
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/86e04435-5653-3d57-bf39-e6379988d355.roa
File: 86e04435-5653-3d57-bf39-e6379988d355.roa (raw, json)
Hash identifier: vz3f+HM7gw3Bor/6gX1fiuIFEcj+T5cFdyqk9+X10vo=
Subject key identifier: A9:95:BE:4D:A1:A8:42:54:F0:FB:09:35:10:DC:82:13:18:4A:DD:12
Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial: 010D0C9F4328584EA79D59124E0BC17AAF130C30
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/86e04435-5653-3d57-bf39-e6379988d355.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11870
IP address blocks: 167.23.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:59:12:4e:0b:c1:7a:af:13:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=baa27a1c-94b0-4556-9b14-6bddedf01fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ed:36:dc:91:27:fb:0b:88:f9:8d:88:40:bf:
4f:f1:88:6f:3f:fc:49:c2:72:22:4d:7d:eb:f9:7f:
c2:03:aa:22:cb:44:6d:70:12:62:04:72:a5:e3:2b:
33:e2:63:d3:e6:2d:b8:c2:8b:ef:ec:b5:e1:25:41:
26:d7:14:21:8f:3e:fa:18:33:ec:7d:bd:52:b9:43:
c5:7d:94:55:3d:a5:74:1c:c1:77:c6:74:15:bc:c3:
42:77:b9:ef:05:b0:93:90:33:92:e3:01:4f:4d:7e:
29:7f:d1:ef:aa:a9:35:55:b8:30:37:19:6b:33:03:
a9:b6:ed:1b:ea:3a:e4:da:f2:bf:bc:65:b6:e3:91:
61:16:fe:5c:30:43:b1:45:3a:e7:04:a0:eb:df:0b:
b1:27:d6:2f:78:ca:8b:5f:22:06:0a:66:b2:24:db:
e2:10:1e:d5:c7:71:07:71:55:cb:fa:59:5b:aa:73:
34:7d:95:a7:43:20:6c:9e:1d:58:17:75:ed:0e:9e:
a6:5f:3d:0c:5a:10:65:87:de:32:d1:49:9e:1a:b1:
d1:59:81:d8:94:ac:a1:90:18:20:88:70:af:24:09:
44:17:43:46:03:09:52:cc:2d:56:34:d5:d5:6f:7d:
94:d3:f5:3f:96:4c:14:51:fc:5b:12:d1:4f:e7:a1:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:BE:4D:A1:A8:42:54:F0:FB:09:35:10:DC:82:13:18:4A:DD:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/86e04435-5653-3d57-bf39-e6379988d355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
X509v3 Authority Key Identifier:
keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.23.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:1a:30:f5:df:aa:d9:63:8f:73:78:73:0c:42:2e:54:22:bb:
0b:a0:33:2c:68:4e:b2:32:70:eb:6c:6b:95:1e:a0:b0:7a:54:
1b:48:b8:2d:59:3b:28:2e:0d:79:d1:f4:39:57:85:ce:cc:1c:
e7:8b:5d:51:cd:5e:3c:89:73:cb:37:ba:76:47:12:3f:05:5d:
a5:e7:64:de:96:f8:0d:49:63:f1:75:c9:3f:ab:b3:a0:8d:b9:
be:18:c7:2a:2e:c2:0a:46:de:a8:aa:bf:35:7f:86:cf:66:8c:
cf:52:a0:fb:0c:5a:bd:48:25:43:b6:1d:a0:0b:d9:96:26:c4:
02:88:9e:b0:ba:2a:76:81:3e:dc:9c:32:c4:ac:aa:6e:5c:9c:
9a:04:7e:c7:cc:f7:94:74:cc:97:32:88:12:91:67:28:fc:c3:
59:60:12:e3:a5:ea:f9:73:ec:08:b9:33:81:68:de:b6:30:07:
ed:e3:3c:1f:9a:db:7e:18:19:8c:73:d7:c3:19:5f:af:c0:8b:
f8:60:fd:93:24:ea:8d:b3:09:7e:36:2f:43:05:d6:94:ab:cc:
6f:56:2f:7c:de:b5:e7:bc:77:b7:2f:a6:b0:ff:77:57:bc:59:
10:20:65:c6:41:b7:af:52:bf:cf:b0:ec:93:75:5d:90:fd:bc:
23:b8:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:52 2026 by rpki-client