
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa
File: cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa (raw, json)
Hash identifier: hi28XD1WWeIZnvrAt+9SzeLSstqhkSvill1K2h9P2AM=
Subject key identifier: 12:BB:A5:35:AB:46:D7:1A:F7:E5:14:9B:0E:6E:8D:02:66:A4:AB:26
Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec
Certificate serial: 010D0C9F4328584F480D62107579B590BFE13A00
Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa
Signing time: Thu 24 Sep 2026 13:00:12 +0000
ROA not before: Thu 24 Sep 2026 13:00:12 +0000
ROA not after: Wed 23 Dec 2026 14:00:12 +0000
asID: 399861
IP address blocks: 23.134.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:48:0d:62:10:75:79:b5:90:bf:e1:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec
Validity
Not Before: Sep 24 13:00:12 2026 GMT
Not After : Dec 23 14:00:12 2026 GMT
Subject: CN=d1e36fc9-3ad5-4203-84d2-bc7514b0ab82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:09:d6:d6:7b:99:1a:29:c2:e8:3f:26:68:
fe:7b:07:da:78:3e:54:40:a3:47:fb:40:66:fe:9e:
0e:34:a3:15:ee:24:b6:0c:c0:d2:89:89:09:ce:2f:
cd:e5:a0:01:f8:c9:a3:8c:11:70:c3:5f:b3:a9:7d:
e4:1e:fb:ee:ea:78:cc:65:24:85:0b:b7:0d:21:86:
a9:25:44:a2:34:cd:a9:b8:90:63:a4:b6:f6:4c:f4:
ea:13:b5:ca:88:ce:6d:b6:d6:89:03:75:f9:5a:c4:
f4:ed:40:78:05:9f:3c:35:16:73:8b:d6:e4:9f:0e:
c5:ab:7e:97:15:c5:43:1a:96:94:09:4b:36:7c:26:
86:8f:c5:8b:16:b4:03:58:59:5d:87:66:13:95:e7:
5c:f9:28:68:56:f7:30:d6:0f:bf:41:da:58:7f:fa:
8d:3f:a1:67:f1:f0:f8:02:0b:bd:68:f9:c6:62:f1:
f5:6a:32:81:4b:7d:9d:72:28:df:1d:de:bd:6e:49:
3c:72:51:4e:f6:5b:02:77:5e:76:95:70:fb:85:a3:
44:b6:8b:4a:db:a4:f0:16:ef:a1:f2:0e:42:f8:27:
41:5b:5e:ab:c1:b9:4d:f4:d9:a9:62:0d:13:cb:77:
aa:f8:ff:ae:77:30:1c:69:19:7a:75:8f:a9:f0:f9:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:A5:35:AB:46:D7:1A:F7:E5:14:9B:0E:6E:8D:02:66:A4:AB:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl
X509v3 Authority Key Identifier:
keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1f:21:08:8f:f0:78:9a:ee:2c:df:f3:ec:21:a8:3e:53:91:
ae:f1:56:be:5f:8e:d5:27:98:af:b1:7e:e4:99:c1:9f:84:37:
97:77:7b:0c:a3:91:2e:39:e0:98:67:13:f0:53:42:df:b2:e9:
87:5d:80:f5:86:d3:63:5b:9b:a6:01:2a:dd:67:64:c4:5d:96:
45:02:5c:fc:95:8c:f2:e2:2f:96:1a:cd:cf:d1:2f:19:4f:31:
17:06:fd:5e:54:1c:a8:c2:02:b4:3c:b8:f7:6a:18:0d:a6:69:
38:eb:60:77:e9:79:38:0f:cb:fb:4f:b5:54:da:fa:97:ec:c9:
56:95:38:ce:e0:dc:aa:dc:d6:74:24:6c:2d:6a:dd:1d:f3:b9:
e2:42:b9:62:e0:83:4e:87:19:9d:6e:85:ae:00:e5:07:f2:08:
7c:27:66:bb:d6:0d:0a:d6:6b:5a:13:bc:26:1a:ec:9c:77:8c:
bc:47:43:f8:be:80:0b:e7:1c:16:90:fa:c3:e0:ef:28:a1:a9:
af:9b:d8:32:49:f6:ea:bd:4b:ae:08:e1:3f:07:bd:e5:28:d4:
6b:57:91:69:b8:a1:c5:f4:4a:cd:21:1f:4d:cc:5e:f4:e6:5c:
7d:ec:df:15:0a:40:9b:1b:cc:99:2e:55:cc:fa:13:74:7c:0e:
0f:a2:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:55:14 2026 by rpki-client