
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa
File: 5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa (raw, json)
Hash identifier: MJXA/AkLUe3ulWPtMk7eizOQMwLr1j+9Amyt7lkQBXg=
Subject key identifier: 1B:80:7E:98:B9:D3:7C:12:64:60:8C:86:57:AF:A3:A0:96:47:04:05
Certificate issuer: /CN=3e3dd181-6bf9-437c-8807-1849db23c718
Certificate serial: 010D0C9F4328584EA78766CFF03CF85530818280
Authority key identifier: 13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 395047
IP address blocks: 23.134.20.0/24 maxlen: 24
2602:f6f8::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:66:cf:f0:3c:f8:55:30:81:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3dd181-6bf9-437c-8807-1849db23c718
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3a30ced0-d6d7-438a-a4fa-0f7400481f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:8b:e8:06:85:74:d8:1d:7b:9b:b1:7d:73:
f1:70:1f:75:fa:25:2d:74:fb:09:c9:ad:d0:ec:3c:
d0:3e:a7:d9:51:0e:7b:e4:fd:02:b5:bd:8d:fd:ea:
f4:e1:79:56:09:00:b7:c5:74:60:79:50:63:95:97:
b3:ee:f9:54:78:69:2e:a5:1e:90:c1:68:d6:d0:79:
c6:6c:ee:43:45:a2:22:d9:4a:2a:3a:ce:18:a4:39:
51:1c:0a:7a:5d:eb:58:bd:7b:0b:ff:59:a3:74:11:
d9:b4:31:fe:a2:6f:88:29:e6:b6:ed:81:d9:1f:a0:
19:dc:52:56:83:f7:63:d6:f6:6c:6b:fc:80:87:d0:
02:60:1b:94:af:d0:22:73:f0:3d:60:97:72:e5:4c:
dd:48:81:d5:78:08:4f:79:68:9d:e8:93:1a:60:34:
e1:78:5b:58:df:17:87:68:73:9c:72:13:0c:03:bf:
57:9b:0a:de:c0:7f:93:b2:bf:06:08:0a:f3:0c:ff:
1c:2d:94:44:23:70:f2:fc:1e:93:7a:88:1f:be:8a:
ef:7a:9c:1e:ca:97:30:f8:07:e2:e9:5d:bb:d5:b2:
2a:ff:d8:f0:b0:6d:3c:cc:b6:b1:7c:76:f9:9d:24:
90:60:12:24:81:59:23:8e:db:54:1f:c6:c6:70:96:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:7E:98:B9:D3:7C:12:64:60:8C:86:57:AF:A3:A0:96:47:04:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl
X509v3 Authority Key Identifier:
keyid:13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.20.0/24
IPv6:
2602:f6f8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:15:57:98:84:df:06:18:a4:1c:c6:82:db:a6:fc:54:a5:57:
bc:06:4b:df:2f:01:72:0a:5a:6e:1d:1c:0a:28:ee:ff:c4:46:
42:02:0b:19:ae:58:7b:52:71:c5:c0:d7:2e:02:5e:9a:10:22:
55:ae:13:19:fb:d8:94:0d:96:25:84:59:bb:6e:42:5d:bd:79:
47:6e:f0:b6:00:4e:38:8c:86:eb:50:6d:6f:7c:b2:9d:90:d9:
68:e5:a5:e6:75:b5:99:e1:e0:d0:89:9e:e9:e2:21:da:f5:53:
d3:83:40:d0:72:f9:21:14:de:14:d1:a6:37:ec:c6:b2:53:fe:
50:44:e5:25:0b:ab:17:e7:ae:af:e8:05:a5:11:17:8d:7d:40:
0c:e1:4d:b4:81:20:0c:92:31:08:d0:60:0c:10:26:65:71:5c:
5e:ee:5c:3b:b9:fd:12:3d:74:8e:98:f3:9f:d6:78:bd:8a:20:
90:65:38:39:19:41:22:4f:21:1b:37:44:e3:01:00:2a:10:63:
5b:c9:7f:31:6d:64:5a:dd:88:fa:55:fc:53:6b:83:40:62:ef:
cf:be:ad:75:fd:b3:c2:02:ee:7c:41:e5:02:71:d1:33:ce:88:
bb:c9:fb:52:6f:b8:5b:c3:ce:6a:b6:7b:f1:67:16:8d:14:a1:
11:c8:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:18:51 2026 by rpki-client