
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa
File: 8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa (raw, json)
Hash identifier: ROZUsodPKUi6MAht49MN2Sok9AvYH0WJAV0VcY/WgKg=
Subject key identifier: 86:8E:48:1A:72:9B:96:E4:C2:4D:F8:E6:DC:16:46:CC:59:2E:31:A4
Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Certificate serial: 010D0C9F4328584F498789E22376FD03A30DF300
Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401578
IP address blocks: 23.136.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:89:e2:23:76:fd:03:a3:0d:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9643a228-c19e-4404-8135-b037ea8c5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e0:2a:b8:34:68:a6:87:44:02:fb:8c:91:ac:
48:3d:4e:34:24:26:e2:9f:7b:4b:7e:3a:b3:6a:d3:
9c:ff:7c:ad:3e:e4:ef:23:50:8f:fc:ab:05:54:5e:
f0:01:76:7f:64:b5:4e:77:28:8e:40:eb:c9:9b:b5:
3e:dc:af:b4:39:fb:bd:8a:8f:dd:88:fd:57:3f:31:
d6:dd:dc:81:50:38:15:68:af:00:00:a2:b7:d9:84:
c6:ae:67:a1:9d:88:62:57:be:1e:4e:e3:ec:f9:0e:
9a:8f:59:b1:4d:2d:b7:4a:0d:9d:08:dc:02:f9:af:
26:93:e1:b1:a2:8f:4a:f6:3b:16:1a:7b:50:89:3f:
1c:d8:c0:3e:1c:bd:07:3f:12:76:66:3f:9c:9a:9c:
98:1c:04:ce:e0:00:1d:93:12:4c:c2:e7:32:67:57:
08:b6:72:82:f8:5b:87:33:a9:16:0a:b9:92:ed:1c:
3b:3e:bb:37:2f:ef:e6:fb:06:43:98:35:1a:c6:39:
c3:05:c3:37:59:0c:87:66:f4:e7:a6:01:52:dc:fb:
33:87:bc:2c:48:ba:be:e8:3e:b1:cf:75:18:b6:07:
85:67:f1:7b:fc:9b:af:88:4c:84:64:3d:8b:86:24:
30:7d:3e:cd:51:d1:a4:ea:38:72:3b:b6:d1:04:a0:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:48:1A:72:9B:96:E4:C2:4D:F8:E6:DC:16:46:CC:59:2E:31:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
X509v3 Authority Key Identifier:
keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:51:07:8f:0a:64:c9:b2:f9:df:c2:ee:0d:86:25:63:2e:e5:
5f:62:32:60:6e:5b:3a:bd:1d:03:80:9c:7b:3a:91:7c:ee:43:
3c:13:74:e0:1e:dd:6a:08:24:6a:e8:0d:67:2f:05:5c:27:1e:
20:cf:00:fb:0d:e3:8b:8c:9f:ec:98:29:f4:5c:22:c6:c0:96:
02:9f:5d:56:47:be:a9:50:b4:b6:24:c3:36:d9:52:54:24:cd:
58:5b:da:66:76:50:17:c3:77:ae:99:09:84:4a:d9:79:16:43:
b5:2c:83:c4:8d:d5:dc:a9:3a:af:33:3a:b6:f6:17:f0:a0:dc:
6a:98:36:7e:f1:9b:2f:cd:0e:98:f0:da:7f:02:2f:e6:e3:4c:
94:ae:b2:db:86:c1:e6:d9:4c:e7:b2:7e:87:53:08:14:ac:84:
55:cb:1e:04:8f:94:fd:a3:55:5c:b6:52:e3:3f:38:70:71:2d:
3b:77:a1:bd:fd:d8:a2:cf:49:48:b9:5c:2d:55:0b:70:31:04:
d2:15:51:08:09:e6:b9:11:7a:42:37:67:63:ba:c5:57:65:31:
1c:96:5d:39:dc:a7:95:3e:e6:6f:1e:30:e1:67:44:9e:df:10:
04:25:5d:8e:90:e7:57:ab:2d:cd:57:4c:28:29:2a:8b:da:5b:
b5:19:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:14 2026 by rpki-client