
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa
File: 55d51c77-3557-3d87-8992-8f280225cb6d.roa (raw, json)
Hash identifier: q2jddUq5DVokY6NDxzF4pSOmSQXF7WuMz/4YVAZUNSU=
Subject key identifier: C8:E5:50:11:A5:9D:53:28:58:8A:71:6D:9A:FE:8C:90:26:63:3B:67
Certificate issuer: /CN=a1de494f-30de-436a-a9c5-418424044ca7
Certificate serial: 010D0C9F4328584F093CE6E6386F7B719AEDD580
Authority key identifier: C0:EA:21:8A:30:0E:DC:42:EB:E2:E0:75:F9:50:68:AD:02:2D:C2:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 23.143.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:e6:e6:38:6f:7b:71:9a:ed:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de494f-30de-436a-a9c5-418424044ca7
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=5c255d62-dc3a-4b2e-8944-b3a14951949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:f2:3f:05:66:e9:f7:4d:d1:83:88:66:6f:
a2:3c:f8:72:30:a6:75:40:bb:44:b0:5a:ab:a5:d7:
3b:f2:9d:a3:3b:e9:87:93:20:79:42:a2:72:ae:79:
dd:86:c6:c0:80:4b:50:22:7a:44:a1:3c:ee:79:2c:
e6:0a:f2:01:0b:f7:e7:ed:1f:9d:e9:69:36:de:b3:
5a:ae:dc:fd:7f:04:95:b2:4e:8d:7a:47:a7:56:56:
00:84:1a:49:e9:c7:0c:77:ae:15:18:48:6b:6a:b8:
65:00:76:94:12:56:69:44:61:d7:df:d9:3a:11:5f:
1a:7f:72:41:de:42:cf:ab:cb:d3:f4:03:2d:b3:7e:
e1:ef:bd:67:5f:60:51:3a:ce:47:f6:99:a5:50:24:
3a:f9:0e:f3:de:a7:71:2a:73:25:9d:62:ec:fb:f4:
a9:17:bc:2b:b8:d9:04:ad:fc:fc:42:ba:32:18:d4:
b2:56:da:f7:54:ad:c4:80:bd:17:ef:3f:c9:7d:4e:
70:0c:ce:f5:ce:4e:ca:2b:44:a7:3e:0b:18:92:0d:
69:ce:ac:56:0a:be:10:b9:79:b5:66:49:5e:80:b9:
43:17:c9:af:6c:24:11:49:76:6e:fe:02:7e:33:81:
7a:56:cf:ab:cf:ee:51:e7:33:50:d9:0f:73:3c:56:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:50:11:A5:9D:53:28:58:8A:71:6D:9A:FE:8C:90:26:63:3B:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.crl
X509v3 Authority Key Identifier:
keyid:C0:EA:21:8A:30:0E:DC:42:EB:E2:E0:75:F9:50:68:AD:02:2D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:46:23:4d:ce:9a:d1:ea:26:e3:99:7b:ae:77:de:ad:4b:29:
88:00:4b:9c:91:9d:e7:2c:1b:4c:25:67:24:81:f1:8f:f8:2f:
81:5e:c0:2a:70:fd:7f:56:f6:47:af:0c:54:ac:13:fb:d5:4b:
b1:3b:be:5b:2b:37:36:10:db:89:ab:ce:cf:61:8c:ae:86:e6:
1a:ac:08:8b:d4:39:fc:51:2b:f5:c8:16:3c:60:6f:27:42:18:
96:88:34:39:c2:37:27:9c:c6:9b:57:ca:8d:98:b1:33:3e:5e:
93:a9:ba:57:62:3b:3f:72:44:55:6f:1b:1c:dd:c4:84:76:d7:
d2:91:73:4c:fb:be:a3:6c:6b:0d:58:72:16:7f:63:30:bf:31:
20:76:dd:0d:db:d6:a3:d2:81:dc:c6:d5:42:ec:93:37:d6:7b:
97:57:99:85:8d:bb:f9:6e:d2:6d:8e:d1:1c:00:79:d8:5c:77:
9d:9a:f7:dd:7f:93:74:1d:11:12:39:7e:61:06:ad:21:7f:a2:
64:8f:38:44:12:09:97:5d:a6:01:ea:b8:d1:f4:22:bc:45:bb:
26:ec:27:71:34:aa:6c:cd:93:cf:7e:3a:2e:33:53:ed:a7:3b:
34:93:9a:16:dc:c4:7e:c7:d5:0d:82:d3:47:22:eb:92:84:f3:
b1:ed:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:17:12 2026 by rpki-client