
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa
File: 8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa (raw, json)
Hash identifier: gOVgj5bSTjIeX5OSZdku+YwBOaFkj+zTgbTFfuOeoXo=
Subject key identifier: 80:BA:DB:BD:BE:C7:52:A6:BA:BA:0C:B3:DD:76:29:02:05:50:DF:2A
Certificate issuer: /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913
Certificate serial: 010D0C9F4328584DC8303E0397ADBC6184341340
Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa
Signing time: Sun 10 May 2026 01:00:24 +0000
ROA not before: Sun 10 May 2026 01:00:24 +0000
ROA not after: Sat 08 Aug 2026 01:00:24 +0000
asID: 4766
IP address blocks: 23.133.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c8:30:3e:03:97:ad:bc:61:84:34:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913
Validity
Not Before: May 10 01:00:24 2026 GMT
Not After : Aug 8 01:00:24 2026 GMT
Subject: CN=3ac7142e-e574-498b-8a57-9c0974638408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:86:e8:92:d9:61:81:fd:52:9b:ce:5d:78:
ca:dc:fb:a6:06:dd:41:fb:5c:bc:79:45:35:89:6e:
01:76:59:c7:5e:bd:e8:c2:4a:4c:66:71:3c:cd:08:
2f:c4:30:66:ce:73:fc:5a:ff:d4:f5:66:1a:53:95:
7c:e9:d6:b8:5b:39:cb:89:1e:57:bb:1d:80:62:4c:
59:36:e3:3c:17:64:7b:7c:16:5d:84:0d:94:4a:b2:
87:a7:06:5b:00:55:b7:fe:b1:bc:27:d8:ba:75:fc:
7c:21:9d:e5:b5:ba:57:15:21:de:99:d0:7a:5f:67:
14:33:37:cd:12:db:3b:dc:39:85:71:1c:5c:ea:c5:
20:b5:2d:49:46:d4:60:fb:e6:f6:00:34:97:97:2e:
7a:40:1b:9a:8f:21:c1:ab:9e:1e:c6:04:17:d8:fd:
52:fc:2d:22:57:21:c7:31:15:7f:19:0d:35:26:bf:
14:51:57:9b:14:35:c8:49:1e:3b:77:af:f0:50:8c:
b5:2e:79:a1:0f:7a:27:2f:66:c0:d5:6f:3b:c2:ac:
26:82:cf:73:39:65:02:6a:af:ee:9e:0f:d5:99:0f:
a2:f8:23:6f:20:e5:b5:10:fb:2c:0e:98:d0:f7:20:
04:95:52:45:2c:58:5c:33:4c:cc:09:04:88:4c:4e:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:DB:BD:BE:C7:52:A6:BA:BA:0C:B3:DD:76:29:02:05:50:DF:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl
X509v3 Authority Key Identifier:
keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:86:24:5d:8c:af:c0:a7:96:f2:79:c2:49:10:fe:77:ef:ab:
ef:1d:f4:64:e5:84:b2:ab:5a:03:53:38:a3:d8:b9:11:c4:b5:
22:85:57:12:b2:8b:13:b2:3e:16:18:57:ed:41:0a:c9:71:23:
5e:70:8d:b6:3e:99:73:72:55:e7:6e:16:4d:d4:f8:71:17:9e:
22:8f:8d:cd:75:97:c9:96:f4:07:39:5d:bf:fd:84:35:16:2b:
ef:c7:a5:81:69:e6:2a:3a:27:d2:17:e6:43:d7:ab:d7:90:49:
10:83:f7:9e:50:70:f2:6a:5b:0d:f0:0b:37:99:4a:d3:32:0e:
7f:0f:7b:ef:1b:e5:b1:7a:94:b5:d2:26:67:be:fb:d4:b9:e3:
dd:e7:d2:1e:73:fe:fc:3a:36:48:f5:4e:d9:56:2a:a4:9a:b9:
30:f1:81:7c:47:d4:a3:19:bb:81:1d:6c:06:8c:cc:15:92:c7:
5b:1b:77:14:c2:f8:a9:16:6f:a2:1f:d0:c7:bb:d1:57:f6:1c:
1f:44:9d:9f:8d:f5:05:98:c7:13:4b:7f:e0:e4:ab:38:3d:a5:
77:86:89:8d:f2:a1:04:44:72:4e:09:05:35:9a:e8:fc:b1:d2:
6a:3a:af:37:7b:a5:e2:2f:bd:e9:00:2e:19:00:54:b5:2d:4e:
12:81:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:22 2026 by rpki-client