
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa
File: 2b8b37d4-6402-313e-8eec-4b3538fb036e.roa (raw, json)
Hash identifier: T+SZ3BmlTt7wWy8QYo0gXtRJWnxdmooFqhNeQ0nfUVk=
Subject key identifier: 20:BB:F3:3A:C2:56:3C:C1:A8:5B:3F:20:F3:A7:D5:15:F3:F7:03:CA
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584DEDE09DD99775E303F51650C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa
Signing time: Sat 23 May 2026 13:00:31 +0000
ROA not before: Sat 23 May 2026 13:00:31 +0000
ROA not after: Fri 21 Aug 2026 13:00:31 +0000
asID: 3360
IP address blocks: 168.87.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ed:e0:9d:d9:97:75:e3:03:f5:16:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: May 23 13:00:31 2026 GMT
Not After : Aug 21 13:00:31 2026 GMT
Subject: CN=2d4004d6-0fc5-460e-ab04-2dc51c9558b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:78:38:5d:9c:11:89:fa:7a:16:76:d8:7f:
3d:79:72:54:7e:95:f3:6c:09:cf:f2:5a:ef:3c:b3:
ce:6d:77:33:11:1c:3c:a8:27:98:76:b3:44:9e:bd:
68:2b:e5:7f:a2:ab:44:23:e4:c6:78:28:a0:37:3d:
50:40:e7:07:16:4e:36:7a:c5:68:b9:d3:e0:ac:59:
ca:21:e2:cb:e0:a2:9a:8d:33:cc:ed:f8:3c:33:d8:
2c:06:7c:fd:0a:fa:0a:b3:fc:82:e9:a4:0a:2f:5f:
2a:8f:77:76:1c:29:3b:58:05:a3:e7:aa:d6:9b:21:
1a:c5:ff:db:3b:e1:74:f8:e5:c2:8c:fe:0c:13:92:
21:cd:59:f0:c9:3a:b4:87:20:81:1a:ce:53:89:12:
14:12:7b:5d:3d:a8:11:9e:1f:00:6b:8f:8b:3b:da:
d3:7f:bb:63:b8:48:23:7a:53:da:0c:16:25:24:3f:
6c:d7:8a:58:95:a3:e0:5a:6d:3d:76:50:b3:7a:0b:
79:9e:24:89:9d:12:44:f3:bb:31:94:52:a3:31:e8:
78:d6:cf:39:c8:21:c5:d9:a2:6d:ee:5d:a6:9b:3e:
f1:81:7f:ab:19:23:79:60:fc:a1:5a:63:72:49:9e:
e8:34:21:0a:a1:f7:30:0e:8a:0e:5b:78:31:1e:75:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:F3:3A:C2:56:3C:C1:A8:5B:3F:20:F3:A7:D5:15:F3:F7:03:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a0:49:5d:8a:ad:14:07:75:32:b7:24:37:99:3b:53:f7:6a:
5c:73:bd:26:0b:63:b5:22:4e:06:ad:a9:60:fa:46:38:1a:bf:
b5:dd:1a:18:f6:75:d6:cf:7a:46:0c:7c:e2:17:e4:f2:57:b9:
d8:71:d5:6c:55:67:4a:3f:25:b2:b2:19:43:98:f1:14:06:bb:
65:65:bb:87:2b:0e:47:fa:81:01:df:18:33:1e:44:8d:b9:de:
c3:8b:ac:d8:95:92:76:19:6d:d6:50:f4:a8:53:f6:49:de:2e:
46:db:12:c8:79:38:17:4f:3a:00:c8:82:3f:30:43:78:7e:5e:
52:c0:77:88:2f:c5:87:64:a3:af:a6:ac:c9:32:a6:2f:f0:48:
2a:93:63:cb:f6:54:b4:00:55:33:0c:d4:a2:3a:db:aa:a7:03:
9e:e4:14:55:79:f0:85:c5:cb:5b:ab:36:4c:20:63:98:cc:2b:
6d:a7:bc:fa:85:2c:f0:c9:94:e0:00:e7:7a:1c:b1:5a:f9:ae:
b0:19:e9:37:b6:f6:68:15:d2:35:f3:8f:03:a1:08:37:6d:02:
17:27:10:f9:22:55:6a:dd:80:b8:5e:e4:69:46:57:df:03:d5:
20:79:7e:94:81:7a:2e:84:37:00:a8:be:35:e4:08:e3:1e:63:
cd:28:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:46:46 2026 by rpki-client