
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/4951c4b3-1c10-38fc-a3a2-658a3b78548d.roa
File: 4951c4b3-1c10-38fc-a3a2-658a3b78548d.roa (raw, json)
Hash identifier: +n614oh4CfGVS0NB/EltLCo/13xW1sjuFpFXGFIGFnc=
Subject key identifier: 43:51:51:51:EB:03:48:E0:D3:95:D8:94:98:22:DA:B7:F4:1F:B6:61
Certificate issuer: /CN=94ca04b5-3bd3-40d2-91b3-57cfc8886ca9
Certificate serial: 010D0C9F4328584E964FA29BEF79041AEB26E200
Authority key identifier: 5C:12:31:4B:7E:FD:BA:67:B0:4B:EB:E3:0B:49:94:7C:62:D5:F9:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/4951c4b3-1c10-38fc-a3a2-658a3b78548d.roa
Signing time: Wed 22 Jul 2026 21:00:11 +0000
ROA not before: Wed 22 Jul 2026 21:00:11 +0000
ROA not after: Tue 20 Oct 2026 21:00:11 +0000
asID: 214483
IP address blocks: 23.153.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:96:4f:a2:9b:ef:79:04:1a:eb:26:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca04b5-3bd3-40d2-91b3-57cfc8886ca9
Validity
Not Before: Jul 22 21:00:11 2026 GMT
Not After : Oct 20 21:00:11 2026 GMT
Subject: CN=d8ef77a0-339b-48ab-88b0-18785cbf42f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:c4:69:d1:06:2f:70:0b:41:8c:6b:33:f0:
a8:0c:8e:91:c7:68:62:50:9d:b3:b0:ea:6f:3f:3a:
62:c0:f9:00:6c:57:7d:45:2f:be:ce:96:22:27:b3:
b0:4c:71:a7:e8:e0:bb:9a:98:8d:85:ec:12:35:b3:
ea:67:ca:92:4b:44:73:e4:5c:1c:57:6d:e0:2e:89:
a4:68:fc:30:5d:23:cb:b7:41:0d:4d:96:ec:76:f3:
81:99:d7:17:85:69:49:be:d5:74:06:e0:b2:98:02:
10:db:4c:97:b7:c7:4c:dd:05:90:48:0a:25:74:29:
b1:8d:88:40:04:a9:24:3c:35:54:28:24:bc:c6:e2:
21:a0:a5:a7:cf:29:3d:0c:51:ca:36:16:c2:8e:c0:
3d:12:40:97:65:ef:30:5e:21:c5:1d:17:9a:41:69:
9f:b5:e5:b1:61:5f:49:c1:31:63:cd:b2:b9:78:51:
88:2e:de:5b:3e:b0:3e:c3:ed:1d:b3:59:25:a0:41:
1f:e6:b2:9d:37:4a:74:ca:d7:a2:a3:f5:43:e3:39:
68:99:06:bb:68:3a:a8:e2:91:c6:d6:73:df:21:e6:
67:58:90:13:68:5a:2b:79:f9:6a:60:f4:ac:92:a3:
27:70:4e:08:0a:ea:81:0d:aa:0d:c4:ac:a5:bb:cc:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:51:51:EB:03:48:E0:D3:95:D8:94:98:22:DA:B7:F4:1F:B6:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/4951c4b3-1c10-38fc-a3a2-658a3b78548d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.crl
X509v3 Authority Key Identifier:
keyid:5C:12:31:4B:7E:FD:BA:67:B0:4B:EB:E3:0B:49:94:7C:62:D5:F9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:d8:21:b2:58:79:95:71:b0:b5:88:90:47:fe:d6:b4:40:9d:
06:31:3a:0d:ba:b7:7c:d6:81:43:54:cc:c0:b1:50:d2:26:3f:
ea:df:b6:28:8f:df:1f:2a:7b:3a:61:69:b5:5e:6e:73:cd:f5:
36:bc:aa:f3:99:ae:45:c9:00:30:5c:ed:88:4b:13:62:07:a9:
9e:d4:f9:30:13:4c:ed:35:72:c0:d2:9d:f7:0c:f4:0e:57:d9:
2a:0b:57:73:7f:c5:56:36:51:64:1e:5f:98:da:13:59:71:ea:
e1:7f:64:d6:b6:8f:20:19:2d:cb:36:0e:2e:65:f0:54:96:8d:
d5:7c:03:0a:73:3b:77:4e:2d:df:75:c6:42:9d:1c:b4:00:2b:
da:92:77:62:e1:98:f4:10:44:54:91:0e:20:54:3a:cb:97:f8:
ee:77:9d:b8:48:ff:15:a8:65:48:9e:c5:06:75:5f:41:91:7c:
8f:b5:ee:39:b2:38:98:87:8b:e9:71:43:96:18:62:84:a8:50:
d9:de:6e:6c:cc:0b:33:0f:b4:69:82:dc:41:c6:97:bb:be:1d:
68:64:71:f1:7c:d3:46:f7:7c:65:e0:4b:61:ef:f2:c5:65:9d:
b4:17:db:49:40:ac:a7:74:56:84:af:a3:36:fe:f2:5d:3e:79:
ad:9b:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:55 2026 by rpki-client