
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
File: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json)
Hash identifier: sDt0bfQrN0M4E3BD7EJPxGHmgOwT2LW05sU4sSrnZ5A=
Subject key identifier: AF:11:42:DF:F1:01:01:E8:45:47:00:49:86:6F:97:E3:BA:9A:CE:CA
Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Certificate serial: 010D0C9F4328584E603ADF9FA0B9839D2790E100
Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
Signing time: Fri 03 Jul 2026 12:04:44 +0000
ROA not before: Fri 03 Jul 2026 12:04:44 +0000
ROA not after: Fri 14 Aug 2026 01:00:26 +0000
asID: 62516
IP address blocks: 23.140.104.0/24 maxlen: 32
169.128.84.0/22 maxlen: 32
2604:4940::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:60:3a:df:9f:a0:b9:83:9d:27:90:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Validity
Not Before: Jul 3 12:04:44 2026 GMT
Not After : Aug 14 01:00:26 2026 GMT
Subject: CN=0ba2e025-ac39-4408-91ee-d695904ab2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:4f:c3:dd:b8:83:98:7e:26:97:19:9f:c3:
0c:c2:08:e9:20:78:44:17:44:ba:1d:e1:4a:7f:dc:
df:f8:2e:a3:b1:cd:8a:ae:f2:98:2d:24:4b:81:83:
72:e9:89:1f:19:35:90:62:d1:a3:e7:a4:37:51:ca:
17:9a:21:be:58:80:68:c5:41:a7:4a:55:1b:72:1d:
55:57:e4:cd:a8:32:2f:91:57:c6:60:30:86:36:8e:
74:24:73:ac:2f:29:1c:23:fa:41:81:9b:aa:ff:4d:
18:dc:e2:4f:2e:8f:18:31:ea:7d:17:0e:ce:6a:3a:
d2:72:ce:70:57:bf:38:2b:0b:14:ac:41:3d:3c:ad:
e1:9f:13:ab:90:34:6b:0d:70:d7:b5:1e:4f:18:f2:
64:ff:2a:20:ac:99:4c:3a:d4:95:f5:f1:05:1d:cc:
ab:a7:01:f5:5e:2d:0e:5a:60:4b:81:45:54:ab:d7:
f8:77:48:01:33:e8:94:c4:37:32:e0:72:9b:80:76:
96:d6:f5:ef:f7:8d:91:cd:3b:15:ef:38:59:53:aa:
ed:38:fb:3d:e1:be:f1:a2:73:78:18:46:85:85:7c:
ca:57:6f:e2:7f:cb:88:93:21:79:12:2b:d7:55:1c:
d6:35:fa:0f:9d:03:f8:98:c7:ec:55:96:37:62:01:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:42:DF:F1:01:01:E8:45:47:00:49:86:6F:97:E3:BA:9A:CE:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
X509v3 Authority Key Identifier:
keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.104.0/24
169.128.84.0/22
IPv6:
2604:4940::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:e9:8d:6c:b8:aa:71:4c:54:8a:be:81:35:d2:ee:7b:f7:57:
67:2c:bc:c2:59:f6:6d:c1:b8:d5:08:1a:a6:14:6c:c5:df:73:
f3:d3:74:7e:b7:c9:f9:ef:7c:55:c3:07:3a:29:8c:58:12:20:
8f:92:a7:84:13:63:f0:9a:89:7d:3f:ac:53:33:dd:52:eb:2b:
9f:dc:83:d8:de:3a:02:17:0f:d8:84:d8:0c:fc:26:32:dd:b0:
73:85:04:ec:00:a7:c1:84:df:f8:c9:01:fe:05:42:07:87:8c:
60:28:a9:81:92:cb:5b:4b:c8:79:44:5b:34:c6:76:97:f6:4a:
2c:d9:02:e4:60:82:9e:9d:08:0b:94:85:f6:bd:e1:f6:3a:b1:
64:c4:fc:64:d6:d4:b9:b4:ed:fe:35:b2:fc:36:c3:bf:d6:48:
4f:6e:1d:56:1f:8e:39:e5:87:87:06:6d:79:69:57:51:fc:1a:
72:94:fd:2a:b6:13:c4:c4:96:7c:c9:12:33:11:98:5b:c4:bd:
55:8f:37:42:07:41:6d:1c:07:86:c1:22:fd:b2:92:84:69:0e:
07:ce:16:93:e4:eb:91:4d:0c:87:a9:fb:a7:78:87:6c:a8:c7:
65:80:c8:cb:2d:7f:66:c3:b1:0a:cb:89:c1:d7:24:d6:4d:0f:
45:ae:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:30 2026 by rpki-client