
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/9ad5f257-d034-30d5-9781-af4a5f8619f4.roa
File: 9ad5f257-d034-30d5-9781-af4a5f8619f4.roa (raw, json)
Hash identifier: EPIEOKvsYgZPRcUJxeRMBrixROCmrPXpc25uebaqpaE=
Subject key identifier: AC:05:CD:2B:CE:6C:22:A4:EB:46:69:44:69:1A:43:C9:D4:D1:9D:18
Certificate issuer: /CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
Certificate serial: 010D0C9F4328584E90BA428A31C9C880F754E8E0
Authority key identifier: 8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/9ad5f257-d034-30d5-9781-af4a5f8619f4.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 399272
IP address blocks: 23.144.204.0/24 maxlen: 24
198.153.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:42:8a:31:c9:c8:80:f7:54:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=8877c94c-2ee2-4d7a-b55c-7fe87cd2fc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:65:b1:5e:61:e3:c0:8d:b1:bd:ed:b8:c5:
f0:64:5e:7e:d1:71:c0:49:af:bb:d7:a1:d0:aa:30:
d5:ea:5a:99:aa:ba:87:d9:f0:2b:6e:07:7a:8d:63:
03:11:60:5c:51:b7:e2:f2:75:3e:82:a2:36:e0:90:
bc:67:f8:8c:4f:01:39:8b:ee:cd:0a:84:8f:c5:30:
92:6f:a7:7e:2b:4a:31:d5:5c:bf:ec:c4:f9:97:90:
a4:f5:d1:ef:00:e7:7b:06:28:b0:2f:41:74:98:64:
18:5c:ad:3d:f4:85:77:40:f8:46:19:9c:5a:fa:a1:
45:65:1e:36:38:ad:9e:8a:f6:39:ad:d6:35:fa:49:
f1:27:74:23:66:57:c7:ef:75:c9:db:eb:cc:9e:06:
f4:a8:f9:60:cf:04:30:1a:cf:84:a8:a8:8c:3f:d1:
b1:19:62:79:f4:c3:96:e0:3e:0c:c5:8c:d2:6a:63:
e5:09:52:62:e1:c0:67:b5:d1:41:6e:2b:3d:4e:ce:
0c:da:84:c3:38:63:f5:c9:c3:f1:0d:94:35:e9:f0:
b9:7a:6d:da:80:e9:cd:ff:45:b4:a1:ae:45:87:d2:
5a:3c:49:dc:57:4c:99:0f:5e:58:20:ef:1a:7a:41:
d6:68:ff:bc:67:f7:4d:9c:6e:09:81:6a:9c:3a:3b:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:CD:2B:CE:6C:22:A4:EB:46:69:44:69:1A:43:C9:D4:D1:9D:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/9ad5f257-d034-30d5-9781-af4a5f8619f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl
X509v3 Authority Key Identifier:
keyid:8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.204.0/24
198.153.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:6b:d3:5e:b7:dd:aa:24:4f:60:45:41:81:bc:e6:0a:1b:7b:
59:f8:bc:14:fa:74:46:6a:fd:6d:e0:31:b7:35:a9:f5:9e:26:
52:8b:6e:fd:4f:85:75:48:c4:f7:4e:cd:92:4a:5c:ab:5a:3b:
06:3f:50:26:3e:62:68:59:4d:18:e7:f7:55:bc:ca:56:c4:fd:
bb:da:84:19:49:ad:48:8a:56:f6:83:f8:ac:76:8e:1c:1c:e3:
ff:8c:f2:c7:1d:63:68:71:62:db:ba:57:0e:04:8e:90:ac:4d:
db:40:f9:28:f5:b1:26:14:2b:17:0b:e5:11:37:19:a6:2d:0f:
73:79:c9:23:9d:35:b5:34:2d:b0:29:3a:23:d6:f9:36:8b:c8:
e3:87:dc:3d:e0:d5:39:85:db:f9:0f:6a:d8:8b:9a:37:b2:fd:
21:0c:a5:73:29:07:7c:6b:32:d8:76:9c:c8:f6:be:78:39:10:
5b:62:80:48:89:1c:51:b5:c4:d0:d2:3a:11:e9:21:2f:64:57:
56:e3:c0:24:c8:49:0a:33:04:e4:08:8d:d9:4e:33:60:33:a7:
e1:71:04:f4:76:90:4a:56:34:1c:83:57:28:2d:be:dd:34:df:
d9:86:46:03:45:46:f3:30:32:5f:98:da:87:f5:00:ae:75:5c:
43:99:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:08 2026 by rpki-client