
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa
File: 973479d0-5172-3d77-b14f-43290390a046.roa (raw, json)
Hash identifier: Nyi0kDa/LbQOFuCY+BcoHPZdySgAtuXoRSTZLdRt+Xg=
Subject key identifier: 34:25:26:5E:88:64:9C:86:B9:39:64:44:8A:D3:BD:D9:FA:C7:84:52
Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial: 010D0C9F4328584E6B0A0BF458B979AAEBCB4080
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 396502
IP address blocks: 23.172.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:0b:f4:58:b9:79:aa:eb:cb:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=2de17b9c-dd3d-4242-b8e8-1ad3f93546f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:e1:3f:5b:07:c9:71:18:ee:77:7b:15:d3:
29:f1:04:21:27:37:98:a5:11:b6:32:4e:94:4a:42:
21:3f:dd:3b:df:bf:4f:d7:19:6c:76:c9:1d:33:62:
83:b9:2d:4e:44:8c:47:60:a4:ed:4f:a6:10:c6:e8:
b3:a9:16:06:16:b4:0c:24:bd:05:24:d2:10:af:87:
7b:80:56:a7:0a:fe:0e:ee:8c:51:9b:ec:7e:76:53:
01:11:5f:67:fa:c4:4e:bc:1c:a1:e8:fb:e7:32:c6:
d9:91:60:cb:5c:12:ee:bb:10:f6:fc:18:5b:72:a0:
cd:ce:47:b8:a2:30:7e:e7:0c:7f:38:24:6a:ae:e4:
ce:84:d2:15:f2:88:83:ce:b0:80:17:9c:a4:69:ee:
b9:04:71:87:eb:44:df:e5:83:03:df:ae:21:55:e9:
77:88:75:75:3d:1e:27:7e:c7:df:da:28:33:61:d6:
6c:ac:25:8e:a0:06:b8:dc:83:ec:4f:f1:44:93:95:
1c:49:f8:89:e4:61:4b:79:8e:7e:e3:7a:1a:28:c1:
f6:1b:4d:20:3a:08:10:60:dd:f4:a4:2b:db:45:ab:
eb:45:e5:91:30:72:9d:d4:64:6c:24:b4:94:0a:9a:
15:c8:11:c3:41:f8:8b:c3:83:af:b8:5d:e5:85:8b:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:26:5E:88:64:9C:86:B9:39:64:44:8A:D3:BD:D9:FA:C7:84:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
X509v3 Authority Key Identifier:
keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:3e:51:53:40:a6:1d:6d:91:e7:9a:e6:f2:ce:29:c9:c7:45:
e6:33:12:03:75:84:5b:94:2e:62:af:db:48:70:94:e1:b7:73:
f7:a5:fd:61:53:e1:2d:f5:8c:ff:98:5a:fb:81:19:0a:9b:a9:
0a:9e:1d:a2:e9:a9:9b:92:ec:c1:54:a3:4e:0f:65:8e:4f:95:
54:0c:f6:cc:32:fb:59:91:b4:78:ad:9c:b4:ae:69:30:3a:3c:
03:84:82:34:17:79:b1:10:b5:fc:2d:3d:33:5b:06:25:31:83:
d7:0c:c3:0d:55:a5:7d:d4:b7:5b:f3:7a:db:b4:cd:ff:37:2b:
39:2d:73:0f:05:29:ca:42:27:e5:ec:8d:4d:09:dd:6c:37:fe:
88:4d:8d:9e:0b:af:18:50:f5:37:8a:fd:63:9e:67:4f:66:98:
24:d2:5b:37:36:e4:8b:7e:7f:e7:1b:d6:34:a2:6d:69:1c:d8:
ba:88:9c:0b:f0:9c:d6:da:5a:9e:d8:86:8d:95:a0:cd:8c:6b:
eb:fc:21:ee:4a:ef:9d:08:4f:33:c3:4f:71:f6:31:cb:21:ec:
9a:1b:f2:8a:42:d5:fb:63:a9:25:67:ca:39:16:0c:61:dd:a0:
21:8b:f3:14:17:9d:69:21:df:60:50:2f:6c:65:3a:89:29:69:
ee:cd:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:35 2026 by rpki-client