
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/b5135c25-a8de-3d53-9ca1-e156f7ec7be2.roa
File: b5135c25-a8de-3d53-9ca1-e156f7ec7be2.roa (raw, json)
Hash identifier: 0H5bSkhv0/J48aIWq/SW1QpwuX45XyoEj9PLpM9bh84=
Subject key identifier: 50:1C:10:3B:AE:D9:A0:09:E2:C3:5D:7D:C5:27:3A:79:94:AE:A1:1E
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F4328584E8405EFC3345860248E356334
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/b5135c25-a8de-3d53-9ca1-e156f7ec7be2.roa
Signing time: Thu 16 Jul 2026 07:47:11 +0000
ROA not before: Thu 16 Jul 2026 07:47:11 +0000
ROA not after: Tue 29 Sep 2026 21:00:12 +0000
asID: 16509
IP address blocks: 23.167.8.0/24 maxlen: 24
162.222.132.0/22 maxlen: 24
2602:f9df::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:84:05:ef:c3:34:58:60:24:8e:35:63:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Jul 16 07:47:11 2026 GMT
Not After : Sep 29 21:00:12 2026 GMT
Subject: CN=8fe158ff-3003-468e-a6d7-6f259b21320d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:4e:9d:4a:bd:89:82:27:4e:4f:b3:3e:15:
ac:2d:ee:19:1f:17:91:a2:b9:c6:b4:05:1a:a2:ca:
fe:73:7c:61:71:63:dc:e2:d3:6e:12:a4:6b:dc:a2:
4a:aa:38:54:c5:8d:70:92:de:b5:57:75:80:a8:2d:
27:c5:88:c8:bc:d9:2a:94:d4:d4:e6:7b:cf:5f:8f:
25:a7:9a:ce:18:22:9b:9b:5f:d7:8a:d2:aa:7f:32:
cc:70:1a:4d:8a:0b:1f:c7:ff:2b:a4:34:d5:22:1c:
43:95:b6:9d:ac:a3:33:4f:a8:f7:59:12:d1:b5:70:
79:14:3e:f3:6e:f7:94:86:9f:55:b3:34:21:cb:df:
c3:71:05:df:51:d7:4d:e7:ca:33:ef:94:08:34:ea:
0d:a7:f1:27:b4:4e:5c:10:78:8c:91:38:d5:6b:e1:
1a:aa:d6:e4:6f:ac:7d:72:ea:fa:25:3b:a7:4e:2b:
ab:c7:dc:0e:9e:d0:b3:3e:18:4f:fc:6f:e5:0f:55:
4c:42:c0:2a:7e:7d:b2:a4:d9:95:c1:41:0c:4c:81:
ed:c5:98:18:3e:f8:24:28:32:db:02:77:d2:69:76:
35:28:88:0b:0e:66:32:67:02:b7:96:63:e0:87:89:
c7:ac:2d:02:a1:f9:80:78:83:3f:ce:2a:47:2f:18:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:10:3B:AE:D9:A0:09:E2:C3:5D:7D:C5:27:3A:79:94:AE:A1:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/b5135c25-a8de-3d53-9ca1-e156f7ec7be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.8.0/24
162.222.132.0/22
IPv6:
2602:f9df::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:06:a7:d0:2c:05:db:51:4b:1d:d9:a0:7c:b4:4c:e5:20:90:
62:4b:b3:8e:c0:3c:49:de:f0:59:c0:74:3b:f4:30:87:fe:77:
56:43:ba:c7:41:f4:41:7d:c5:02:ed:65:23:b2:d5:39:39:7a:
0e:2b:78:6e:8d:f3:32:36:53:20:63:d8:2b:18:77:15:5f:b9:
4f:99:8b:14:90:cd:35:77:78:97:7c:22:29:ce:15:38:00:db:
43:c5:fd:e6:98:ef:c8:88:d3:7d:d5:43:46:1b:59:e5:4a:99:
cf:f5:7a:4c:b0:52:e1:6c:09:01:86:0c:c6:71:a0:82:b4:a6:
0d:3a:ce:6b:ac:65:e7:b4:38:33:ad:aa:d6:45:82:3d:1b:68:
b4:66:d7:14:85:68:49:15:ff:7b:e6:2c:63:4b:39:04:b4:25:
2a:8e:7b:46:b9:b2:2e:e0:53:09:64:34:45:c8:66:82:41:7f:
d7:75:35:c5:53:66:a0:c6:af:0e:85:cb:39:bd:79:6d:a1:dd:
b6:c3:40:51:82:84:25:05:ee:a9:39:3e:d3:f0:57:09:52:13:
34:a2:52:5e:f4:90:9c:40:e3:8a:31:6a:a0:f3:88:1f:20:a5:
1f:8a:b9:1a:73:97:51:dc:19:ce:5f:75:7f:38:a7:fe:5a:cd:
2d:42:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:09:56 2026 by rpki-client