
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c510d90-7c59-34d9-9279-5126b297825e.roa
File: 7c510d90-7c59-34d9-9279-5126b297825e.roa (raw, json)
Hash identifier: 2lhOzLCoiUaMNjExlHXm5jRtHuIkI95L07DBMCnkNAY=
Subject key identifier: 9F:95:CA:F4:D5:C2:0D:AD:1A:66:99:08:2F:CC:1B:B2:81:25:AA:DC
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F3429CC7B622C885C97D41040
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c510d90-7c59-34d9-9279-5126b297825e.roa
Signing time: Thu 17 Sep 2026 10:01:42 +0000
ROA not before: Thu 17 Sep 2026 10:01:42 +0000
ROA not after: Wed 16 Dec 2026 11:01:42 +0000
asID: 3257
IP address blocks: 23.231.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:34:29:cc:7b:62:2c:88:5c:97:d4:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 17 10:01:42 2026 GMT
Not After : Dec 16 11:01:42 2026 GMT
Subject: CN=a4633c59-b363-496b-82f7-2ecb39272c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:0f:d9:f6:bc:5a:64:b7:b5:99:9a:fd:6e:
52:7c:29:ec:7a:02:d1:12:17:80:60:4a:0e:01:db:
76:80:f3:a2:3c:61:80:0f:c4:59:b8:4c:ec:0f:4c:
ee:3c:0a:de:8e:18:96:a0:68:90:d7:2a:a6:5a:2b:
1f:95:92:44:6e:1b:cf:00:85:a8:3b:73:5b:4a:a1:
88:af:c4:54:b9:d3:f2:46:2e:43:4e:68:fb:58:02:
9b:6e:67:f4:7d:07:69:75:b3:8b:fb:9b:5b:52:7f:
75:16:a8:68:e8:65:a4:ba:70:5c:9f:9f:b5:2d:f7:
ae:1a:69:49:e1:bc:89:c9:4d:3e:a8:86:7f:02:7c:
f4:fb:e2:22:23:d7:4d:e1:31:c9:33:94:64:81:9e:
80:6e:bd:5c:d3:5a:35:f5:92:34:01:d7:fb:1d:e2:
64:cb:23:ea:ed:ab:ca:d4:16:62:8a:f7:bb:da:c4:
09:8b:a3:6e:79:ed:71:f0:23:0e:21:e4:2f:50:71:
6a:e0:4e:b5:e5:ab:b7:64:10:50:51:b4:de:f0:8a:
07:2b:55:d4:95:20:42:a8:43:31:36:76:ef:54:d2:
c8:29:c2:a4:1a:bc:14:f4:5a:0e:cf:64:24:c6:52:
68:da:16:e2:4e:76:24:80:af:8b:b5:c7:a5:a6:36:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:CA:F4:D5:C2:0D:AD:1A:66:99:08:2F:CC:1B:B2:81:25:AA:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c510d90-7c59-34d9-9279-5126b297825e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
23.231.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:92:24:a6:cb:56:95:ed:9a:6c:d4:42:ab:03:b6:4e:19:ad:
fa:93:8e:cb:47:2d:24:ed:54:d7:11:17:3c:6e:27:74:75:8d:
d5:7e:db:34:6e:2e:b3:cf:79:86:f8:4d:ff:46:34:e0:ed:55:
a6:e1:c8:07:ca:79:32:99:a8:8b:98:11:3e:e0:64:17:78:24:
3a:87:07:00:7c:f8:fa:fd:57:58:74:b8:c1:9b:50:33:3c:84:
36:56:25:48:79:9e:d9:f9:9b:bd:47:84:34:1c:43:b8:7e:22:
6a:e6:ab:09:5e:76:f0:19:b6:39:21:51:82:34:80:ed:08:2c:
9d:5e:9c:00:cb:ab:bd:65:d9:c8:a6:fd:38:80:d6:2d:ad:97:
2e:d8:00:b2:58:39:cd:a3:5a:c1:af:56:5e:53:d9:06:50:13:
76:03:27:d4:57:47:61:21:a0:59:3e:92:e2:ac:59:dd:98:1e:
a1:ba:92:02:1e:4f:f5:41:64:65:ca:df:2e:59:8d:35:2c:a0:
9d:c3:85:17:da:ec:8d:12:c1:1e:da:dd:47:48:83:1a:e7:58:
9c:72:aa:17:14:84:49:f7:22:63:99:7a:e1:e8:05:4d:9b:d8:
d5:ce:40:2f:fe:21:a1:4d:af:d0:82:0e:76:8f:77:51:f8:eb:
53:f0:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:57:36 2026 by rpki-client