
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa
File: d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa (raw, json)
Hash identifier: /DmFeJad3LcQ87pzNx6zkYR5DtBDH3LXuwXrsNDqtqU=
Subject key identifier: B5:C1:F5:6B:2C:96:CE:D8:E1:28:14:C8:54:EA:9E:40:11:16:BF:1B
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584F0D6CFC01F5103EA8A9273380
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 7018
IP address blocks: 23.229.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:fc:01:f5:10:3e:a8:a9:27:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=9a2181ec-6a73-4248-ad25-ba824f9662f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:a8:3d:49:d9:57:ee:e1:7e:c9:f5:e6:5a:
60:27:d4:e8:e8:82:04:05:2c:6d:34:34:11:18:1c:
45:6f:c0:e0:50:49:22:54:4b:30:1f:50:8b:9e:d1:
19:85:04:1b:bf:97:c1:b1:ca:13:1f:c7:95:d8:9d:
a1:c7:18:6e:ab:6f:cd:25:96:96:84:19:1c:83:64:
00:78:8a:a2:72:ff:cd:cc:bb:15:89:66:c1:5d:da:
23:56:80:23:21:bc:34:17:49:4e:c4:50:ee:08:79:
35:da:bf:b1:7e:2e:51:94:3b:60:ef:ab:54:41:98:
94:77:b0:fa:62:b3:8a:09:49:65:36:ec:aa:11:5d:
50:9b:b6:b0:a7:b1:a5:7c:81:a7:4e:d7:20:48:07:
64:d6:66:18:4d:cc:6d:c6:a7:ff:02:dd:35:b8:8a:
11:a7:d7:5c:46:07:89:db:93:ed:41:a0:f0:6f:ff:
2c:cd:99:c8:e9:e1:cb:31:e7:7a:d3:1a:90:57:be:
78:b0:02:5f:a8:4e:a5:f5:fa:12:b3:cb:0c:f8:7e:
0a:57:e0:3e:7f:30:e6:cb:53:09:f4:9a:2a:b4:0b:
e5:a1:48:e7:b5:10:9b:f9:4a:8f:34:52:d6:96:8e:
b4:26:87:59:c6:df:00:e7:70:5d:df:2b:1a:71:7e:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:F5:6B:2C:96:CE:D8:E1:28:14:C8:54:EA:9E:40:11:16:BF:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.229.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:80:3f:ac:a5:14:4d:cd:de:69:11:5d:3a:2f:f8:4b:b6:05:
f6:aa:c5:36:92:69:07:9e:6a:03:72:93:aa:ec:d4:e8:af:07:
f9:d3:54:47:f0:fe:3f:65:c2:3b:02:d2:ec:ae:42:a2:9e:e7:
bb:6c:02:ae:81:af:86:62:0d:2b:ae:4d:38:14:e2:cf:a4:5e:
77:ee:2d:61:4e:7f:d0:8c:f3:9e:3e:f6:7b:5a:27:bf:74:7c:
60:ef:3e:f5:c4:9d:f2:f2:5e:12:9c:c9:48:d6:a6:dc:3c:85:
9a:2c:21:0b:b9:6c:17:96:b1:b1:5f:9f:e6:4d:52:52:c8:b7:
74:52:1f:2f:69:e1:f7:22:d3:dc:e7:1a:9d:11:fb:20:a3:78:
75:d2:44:64:09:7c:a6:d5:f5:0a:6c:f6:19:cc:0c:31:26:c6:
af:be:82:0b:e4:9c:e3:a1:59:57:5b:4a:d2:e9:74:c2:47:ee:
3e:81:5d:86:67:28:5b:47:24:9d:53:62:8d:82:20:e9:f7:b8:
2e:96:d6:9c:24:11:b4:7c:47:d7:32:6f:8f:97:77:94:44:5e:
82:79:7a:46:fc:c8:19:a0:d0:84:c3:46:e1:67:2f:3e:1a:d4:
db:3f:3c:98:65:4c:cd:56:02:56:3f:63:d1:94:c9:3c:34:87:
38:a5:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:13:48 2026 by rpki-client