
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa
File: afecdebc-ec0d-30da-8631-4209f266e536.roa (raw, json)
Hash identifier: SI8lrTM1nOqOJbbTlmEKKNnrkM1On5ViKzmfy2vuaSQ=
Subject key identifier: 1B:6A:50:AA:EB:A3:48:54:A1:59:C6:D2:A0:CC:34:EC:65:03:5E:AE
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F4328584DD0905396A9A0B87A2608BA60
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa
Signing time: Wed 13 May 2026 01:00:24 +0000
ROA not before: Wed 13 May 2026 01:00:24 +0000
ROA not after: Tue 11 Aug 2026 01:00:24 +0000
asID: 393336
IP address blocks: 23.163.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d0:90:53:96:a9:a0:b8:7a:26:08:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: May 13 01:00:24 2026 GMT
Not After : Aug 11 01:00:24 2026 GMT
Subject: CN=7a02cb54-4e1f-4c8a-b001-c14ace1747de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:ff:63:ec:6b:99:30:af:53:a1:98:5e:09:
68:50:d8:80:00:82:f5:2f:b2:9d:2a:c8:05:39:e0:
b1:a8:f8:f6:4e:4e:be:c4:1b:9d:05:21:99:d1:03:
f4:f9:59:77:11:0e:8b:7e:81:89:ca:35:3b:f4:82:
67:09:08:eb:5d:a1:5c:85:61:f7:b7:59:f9:77:62:
f0:fd:69:b7:66:4c:da:b8:86:34:1d:46:c8:79:89:
6b:6f:bf:08:6a:6b:3f:15:d1:35:e1:3a:33:8e:72:
8d:e8:79:14:f0:68:2c:f4:1b:2a:f9:5f:91:4f:bf:
c8:8a:68:a3:e2:29:d1:fc:04:c6:ad:ff:c9:21:c6:
40:90:a4:b5:57:32:4f:62:c4:18:9b:d9:5c:75:e3:
36:55:2a:12:23:2c:59:68:bf:7a:1d:09:9d:2b:12:
92:9c:4b:65:ec:f7:f9:39:8b:0d:a5:0c:03:6a:50:
34:6e:2e:85:66:64:91:1f:58:a0:11:3e:62:e7:a6:
50:d0:e4:43:93:22:2c:b1:8c:52:78:e6:4e:9c:21:
de:e3:8c:b0:32:17:78:e0:ea:fa:9d:10:f2:9e:99:
2e:fb:93:8c:3c:e7:bd:04:aa:d5:8f:4d:ca:8f:bc:
e6:fb:f6:6a:ed:33:55:df:95:a6:e6:4b:58:22:6c:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:50:AA:EB:A3:48:54:A1:59:C6:D2:A0:CC:34:EC:65:03:5E:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c0:11:f5:57:6e:a5:4f:1a:1b:e8:f8:63:e5:a4:47:96:d7:
93:97:4e:dd:98:dd:76:af:e9:f2:27:5b:5d:0c:49:5f:a4:22:
3a:a1:9e:06:86:91:cf:96:f8:ed:1e:20:41:64:48:8b:08:90:
34:52:10:a6:d2:46:cb:3f:6a:2f:ad:04:92:49:cc:43:12:f4:
dc:8d:36:f1:9e:aa:65:66:cb:8f:27:89:1a:bb:bd:24:73:3b:
61:58:2c:9e:c9:df:3b:1d:a1:b4:81:e7:76:3c:5f:ed:60:22:
05:4f:0d:cd:2b:92:4f:e2:ba:09:cc:a2:f0:c5:24:4f:71:40:
ee:7a:dc:55:81:8e:43:d1:2f:37:f4:39:30:bf:4e:62:7f:47:
a2:a5:57:d1:93:40:3f:8d:1f:ff:06:5a:6f:49:a1:07:e8:bc:
7b:bc:bb:52:a1:20:2f:50:89:a1:e5:98:1f:a8:71:6f:41:1e:
c1:0a:7e:16:22:3b:a9:65:44:89:85:70:92:d1:85:f3:d0:1b:
97:c3:6e:0d:a4:23:3b:f0:93:17:48:9e:b7:68:72:e7:32:c7:
85:7d:85:73:c1:9a:e3:bb:1e:ed:cf:22:e5:63:9b:6d:48:90:
b5:92:1a:33:b7:8a:ce:25:98:a5:a8:36:ed:7f:19:18:6e:f5:
1a:fd:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:48 2026 by rpki-client