
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
File: e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa (raw, json)
Hash identifier: 0OSNaxLjhw8M7l3/iKpYUKyC5aznb8dKyGYuyRsG+a4=
Subject key identifier: DF:8E:1A:DA:09:0A:93:81:56:54:C2:8B:DF:1C:04:1F:48:38:2B:B7
Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial: 010D0C9F4328584E6B0A31B2C50904443EC43000
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 396502
IP address blocks: 23.172.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:31:b2:c5:09:04:44:3e:c4:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=fc281603-c62d-44b1-91a8-c38c166dda57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:3e:c3:fa:e2:a8:9c:98:dc:c2:fe:f5:19:
82:5d:1b:52:07:48:0d:52:20:c1:f3:44:3e:f7:a1:
25:33:98:4b:ec:aa:e0:47:ed:18:e8:f8:33:0c:25:
a6:01:5b:f9:5b:a0:e1:81:6e:6c:ae:57:72:cf:86:
56:11:99:68:3e:d9:b2:41:55:be:85:92:0f:d2:89:
02:9a:19:6d:2a:67:88:f9:3d:4e:23:c3:c5:e2:50:
f2:cb:b8:54:96:56:fc:3d:cd:e2:be:72:f5:f2:ed:
90:68:58:5d:15:7b:dd:8c:12:47:21:40:ab:82:6e:
d4:28:87:86:35:b7:f8:6e:9c:53:85:1b:f1:1a:ce:
74:67:b3:02:b0:7e:ac:91:d1:c3:5b:6c:1b:19:20:
a1:20:07:38:fb:0f:1b:88:c0:cf:8d:bc:c7:ab:72:
fd:cd:ec:ce:3a:8f:9d:0f:75:fd:5a:8d:14:d6:5b:
19:69:bc:85:a5:fd:6a:4b:98:29:76:fd:55:e2:06:
d2:26:88:ea:ff:67:17:cc:4c:b0:1c:7b:4e:76:dd:
47:b1:1f:6b:c4:fa:58:da:f6:60:c5:bb:3c:cc:5e:
c9:c8:26:d8:0e:2f:17:43:12:e9:35:18:58:41:47:
c6:dc:62:02:57:ef:b2:0e:3c:07:c9:91:bc:fc:49:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:1A:DA:09:0A:93:81:56:54:C2:8B:DF:1C:04:1F:48:38:2B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
X509v3 Authority Key Identifier:
keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:8d:5e:d0:d6:36:19:61:23:d7:c9:a2:ad:4e:90:a6:08:6f:
ce:d7:7e:0f:27:cd:ed:81:3b:da:18:27:7b:51:b2:c1:03:34:
d5:95:01:85:ed:72:33:2d:8b:8d:ad:65:ce:e7:03:8f:82:f2:
61:61:43:1f:58:0d:8e:61:5f:bd:ba:48:fa:2e:58:5e:fb:e6:
59:f1:4c:cd:f7:90:d7:1c:87:01:f9:99:9f:fe:31:75:e4:e1:
2f:77:8b:8d:3c:2d:70:98:a0:c4:9b:16:29:0c:b9:c6:e3:f6:
b7:c9:f8:69:9d:6e:31:92:ef:58:d0:a3:1c:35:1d:07:5d:66:
d8:b7:43:a3:69:c0:2b:57:25:fc:15:bc:28:21:f1:2f:2d:96:
e8:12:de:d9:d3:3d:6a:c0:ae:0f:32:31:88:ad:d7:54:30:a2:
d5:3d:bb:c5:b7:65:d9:5d:e9:ef:98:2c:c5:30:bf:6d:ea:d0:
51:97:35:51:40:0e:89:a4:22:f8:40:3f:64:09:e7:f8:1d:33:
4a:97:9b:47:42:e9:15:80:e1:50:eb:1e:77:ac:48:70:27:04:
c7:de:6f:e7:95:b6:05:f8:e6:b5:43:a5:f0:0d:aa:5f:71:1a:
54:15:9d:b0:d8:5b:52:b2:f6:e0:5d:c4:51:2c:55:70:4c:21:
28:7c:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:08 2026 by rpki-client