
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa
File: 8008f8ed-620d-3847-b19a-1d027971a2c4.roa (raw, json)
Hash identifier: xoF31T8siMQFHaZfqBg+JHQqMEq0GWpY3oO6XuJ7j2A=
Subject key identifier: B7:78:99:3A:5C:17:FD:73:C8:7A:E8:C0:44:89:CB:DB:2E:2C:87:CE
Certificate issuer: /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Certificate serial: 010D0C9F4328584E97B4F977F9C3D92884882A80
Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa
Signing time: Thu 23 Jul 2026 09:00:11 +0000
ROA not before: Thu 23 Jul 2026 09:00:11 +0000
ROA not after: Wed 21 Oct 2026 09:00:11 +0000
asID: 26695
IP address blocks: 23.138.208.0/24 maxlen: 24
2605:8bc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:97:b4:f9:77:f9:c3:d9:28:84:88:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Validity
Not Before: Jul 23 09:00:11 2026 GMT
Not After : Oct 21 09:00:11 2026 GMT
Subject: CN=d546850a-efd0-415b-99d4-99ee42b3c1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:24:f2:e9:de:be:0c:26:4d:31:9e:53:d8:
cb:d8:75:8d:3d:64:41:48:b0:4f:ab:e4:a8:98:80:
ff:f7:1f:12:9d:34:62:32:1a:7d:c8:35:80:d5:4f:
f7:24:4b:6f:8c:86:a1:1f:b0:a9:48:31:ee:f7:5f:
87:29:8e:c0:59:50:29:d0:cf:55:a5:dd:36:34:db:
f9:1c:cc:b5:6f:63:b8:73:96:b8:a1:46:96:05:00:
17:ad:59:98:65:52:1a:1b:80:56:24:95:63:a1:95:
4c:73:2e:1f:63:58:70:84:c5:fd:6a:5c:a2:70:a3:
c4:2a:20:b3:38:bd:3b:1a:48:62:22:7e:06:e2:7b:
fa:c8:6a:b4:e1:df:39:c1:1d:56:6f:ad:4c:60:e7:
be:07:0e:6e:c2:67:ca:29:b1:82:80:a8:72:36:48:
cb:cb:7f:62:88:80:a1:ba:ee:71:46:4b:7e:20:c3:
36:e0:9d:34:fe:06:2a:c9:40:b8:46:59:b9:cc:b5:
25:55:c1:e5:89:a2:76:d9:7b:f9:57:4f:83:67:57:
b4:33:07:7b:2a:5b:a7:28:57:d2:a3:8d:22:cc:94:
f6:5b:f6:53:d7:d3:87:06:eb:e8:b9:f6:04:7d:a0:
9a:ec:9e:93:5d:b1:aa:3e:8f:77:47:74:82:37:17:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:99:3A:5C:17:FD:73:C8:7A:E8:C0:44:89:CB:DB:2E:2C:87:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
X509v3 Authority Key Identifier:
keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.208.0/24
IPv6:
2605:8bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:de:28:7e:ec:16:31:a4:99:94:07:de:44:f8:39:37:db:63:
88:d1:59:80:13:48:45:2c:d7:57:35:71:6b:b3:46:4c:69:d8:
9a:f8:3e:2a:70:06:24:33:4e:5f:6d:fe:cc:9e:8e:87:76:02:
4e:36:20:72:e0:f4:c7:51:27:d2:e3:ab:3b:b5:8d:ae:cf:69:
90:e1:99:7f:32:70:b5:a4:29:75:d0:e2:a4:52:9f:29:54:a4:
cb:7c:bd:f6:f4:fc:79:c5:a5:df:b9:5b:d1:0b:26:21:37:03:
8f:1b:82:be:b5:f7:dc:26:eb:55:2d:ba:73:e9:8c:b4:85:bb:
ff:0a:92:46:60:cd:d8:5f:b1:9b:26:b3:0e:ea:d1:0c:fa:ff:
f6:ae:85:29:42:16:8c:53:fd:43:7a:7c:06:33:ea:2b:d1:c6:
ab:4c:29:5b:db:49:68:4f:12:a1:85:a6:39:e4:bd:f9:55:af:
b6:7a:0a:a4:21:af:53:f6:d7:e0:c8:97:3b:7e:81:66:5f:30:
75:bb:3e:ea:eb:2a:63:d6:e5:a0:8d:d7:0f:d6:51:1b:3d:29:
78:42:06:5c:f5:47:4c:89:f4:37:58:0d:bc:e2:ed:97:b4:27:
a3:cb:1e:44:d6:0a:c9:88:6c:92:e4:7a:8e:12:c3:5e:1f:e4:
ae:8c:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:28 2026 by rpki-client