
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
File: acd658b8-634a-338a-a46b-a493a731bb64.roa (raw, json)
Hash identifier: CgR9YhzeT8PXIWCh6PpN5Py5EHrN9gj217AlI/U5R/U=
Subject key identifier: E5:9C:B4:4A:AE:81:65:B7:30:72:89:27:3A:89:D1:A1:2F:C1:99:1A
Certificate issuer: /CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
Certificate serial: 010D0C9F4328584E6144BC843CC6F29824020480
Authority key identifier: 3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 398196
IP address blocks: 23.147.208.0/24 maxlen: 24
23.147.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:44:bc:84:3c:c6:f2:98:24:02:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=1cea2553-78d0-497f-8cc7-d6349eec90ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:f6:76:5b:36:88:fa:79:46:d2:86:f3:ce:
af:6c:b3:91:eb:e7:01:e0:da:78:1e:24:f3:a5:63:
6c:2c:c7:1c:c4:ea:c8:42:e7:30:40:3d:43:ef:1c:
e4:60:0c:4b:89:a3:cd:da:9a:e4:1d:d9:47:7b:b8:
2b:df:d3:c4:d4:bd:89:84:8d:ad:dc:6c:80:b8:a1:
d3:bb:24:64:5a:5d:95:23:2c:e9:8e:88:72:02:b3:
65:2f:93:ef:b5:18:81:8c:32:5b:9c:38:d1:de:2e:
b7:67:68:44:89:e5:49:9d:b1:7e:9d:25:1d:a3:a3:
cb:31:50:fe:01:e6:e4:86:aa:7b:ac:b3:95:d4:c5:
09:d8:df:a1:40:5a:be:4b:db:eb:e3:22:7f:da:34:
f0:c4:4b:47:ef:e2:a7:10:7a:81:9d:20:69:e0:4f:
f4:dc:95:10:0a:b8:60:08:25:2b:d6:0b:0b:9f:c8:
92:a1:8e:47:02:e8:4a:3b:72:4e:61:60:11:7a:52:
d6:01:9e:76:bc:9a:65:a9:11:47:34:db:50:89:8e:
b1:c3:66:53:d5:89:0a:fd:70:bb:4a:30:b3:14:79:
98:be:02:a7:e6:e2:59:f2:34:c1:e5:f8:e4:c7:86:
1e:94:40:88:8b:4b:8e:e5:d1:37:c7:9e:d6:bb:5b:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:B4:4A:AE:81:65:B7:30:72:89:27:3A:89:D1:A1:2F:C1:99:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.crl
X509v3 Authority Key Identifier:
keyid:3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:18:f2:fd:d4:cd:c8:2e:3e:80:c6:77:64:7f:63:f2:a9:97:
57:4a:08:b0:5a:14:2c:ed:c3:51:51:61:c5:73:7b:d1:a0:a9:
14:33:90:90:6e:21:19:cd:9d:a3:20:60:7a:fc:14:7e:f7:08:
2b:7c:68:62:2a:29:b3:5d:b4:de:5c:41:9a:35:e6:c1:3c:d1:
fe:f7:56:2b:5c:82:1c:0e:dc:c3:c3:fc:58:bf:3b:75:73:aa:
61:c6:fc:42:1b:df:2e:7c:af:e8:b1:58:76:8a:b2:9c:ef:c1:
82:ba:d9:9d:51:cf:95:da:a9:98:d0:07:ac:66:70:a1:1e:f4:
51:9d:39:9c:62:7a:ab:a5:99:4b:79:f4:a1:a6:6d:4d:0f:fd:
5c:da:63:f9:c5:96:85:4b:24:e6:31:2d:9c:4a:e3:96:b1:08:
ce:be:c9:e7:97:7c:c4:65:53:93:d5:e3:b5:d9:ff:33:ae:18:
af:a1:fb:25:16:ed:7b:67:b2:09:9f:c9:77:ab:d3:16:6a:b4:
6b:f1:7a:2c:13:ce:ca:7e:88:65:49:43:18:cb:09:47:1f:47:
30:d8:1c:7e:20:13:00:4b:2d:7f:b5:2a:c8:3b:53:bf:bb:1f:
a7:42:e6:0b:50:0c:21:1b:4f:bc:76:9b:19:b2:6a:c0:fe:fd:
55:84:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:50 2026 by rpki-client