
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa
File: 86e4edff-6e07-3702-ac55-43bc214c832b.roa (raw, json)
Hash identifier: MWyZay/y2l0XEKo6i4J6kPDjXkNfQyb+6ZZKIchHQoE=
Subject key identifier: 9D:EC:7D:2F:F1:CC:A0:F1:26:DD:D6:88:6C:47:AB:C4:D6:8C:49:97
Certificate issuer: /CN=ae6aa33d-df94-457a-9298-bc765c153d31
Certificate serial: 010D0C9F4328584EF2E764A7350FE8786D397F00
Authority key identifier: 43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa
Signing time: Tue 25 Aug 2026 01:00:12 +0000
ROA not before: Tue 25 Aug 2026 01:00:12 +0000
ROA not after: Mon 23 Nov 2026 02:00:12 +0000
asID: 63023
IP address blocks: 23.139.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:e7:64:a7:35:0f:e8:78:6d:39:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6aa33d-df94-457a-9298-bc765c153d31
Validity
Not Before: Aug 25 01:00:12 2026 GMT
Not After : Nov 23 02:00:12 2026 GMT
Subject: CN=f777fd3a-0c77-4f22-b84f-8511d6f58ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:44:78:ca:35:06:d8:ee:34:88:e0:7f:6a:01:
9e:9e:c7:58:3b:08:a3:ef:fd:74:36:57:bd:df:c3:
10:22:32:31:6f:a7:ea:28:df:3e:3e:7c:a6:e7:c5:
5c:39:f4:cd:22:72:15:68:1b:31:1c:60:e9:32:43:
f2:bb:2a:db:d9:24:40:65:7b:3c:02:eb:50:ba:cd:
20:10:c0:fb:b6:93:79:82:06:47:16:a4:88:30:9a:
ca:df:c8:2b:2d:1a:b1:24:93:b1:4c:dc:e3:e1:9e:
d3:3b:59:70:b3:42:2a:5b:c3:0d:e1:d4:40:ad:ee:
73:57:bf:e5:b8:50:4b:be:12:ff:98:37:fb:df:e4:
79:e5:8b:60:04:44:09:6f:e0:cb:9f:64:29:8b:7b:
c5:38:37:bd:f1:a5:55:51:30:d8:c7:de:f1:da:a0:
e2:1f:71:83:ec:a3:b9:65:eb:c9:10:d0:a8:b7:30:
f2:ac:59:ca:19:17:e2:fa:fd:ff:58:5f:70:6b:c6:
7a:49:08:8d:63:dd:7a:9f:39:72:aa:d2:ac:84:88:
81:8b:84:41:f7:c2:43:eb:85:4c:f9:6e:e6:18:ff:
1e:af:47:51:61:ea:79:cc:2d:5f:91:35:37:53:9c:
30:09:00:b4:67:35:00:48:b7:31:fc:f9:cd:a3:3e:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EC:7D:2F:F1:CC:A0:F1:26:DD:D6:88:6C:47:AB:C4:D6:8C:49:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.crl
X509v3 Authority Key Identifier:
keyid:43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:7a:08:6c:07:fe:1a:df:b5:40:f0:10:8d:7e:cb:14:f2:b1:
26:c3:3e:d4:2c:66:4e:4c:f4:17:c9:98:1e:fe:82:2d:df:31:
67:4d:be:e9:05:eb:0c:13:a0:87:9c:9a:94:52:ee:ff:93:97:
f0:e0:25:78:8b:cc:51:d9:33:49:a0:af:99:cc:07:b0:1e:75:
aa:e6:f9:b3:bb:6f:79:c6:2e:17:df:71:07:51:e7:46:0e:78:
09:2b:c8:38:91:0f:f7:c9:91:e7:4e:00:95:be:2d:ee:92:9a:
e6:b1:74:68:63:84:4e:8e:96:7f:46:2f:28:e0:cd:dd:7d:36:
e5:a8:fb:ff:f5:d0:f2:90:eb:d2:58:50:c7:a9:e2:8d:1a:4d:
55:9e:52:a2:d2:4b:71:a2:e4:81:6a:55:df:4b:d5:bc:73:b4:
23:e0:34:83:a6:78:4d:17:51:e7:66:cb:d9:e7:82:06:95:83:
ab:6d:f6:36:41:a9:10:c7:a0:ec:f2:ef:20:0a:08:09:5b:16:
46:b4:25:00:e6:8c:a5:2c:6c:74:47:31:0c:23:c2:53:11:8d:
b6:48:71:60:a0:25:49:b2:f5:b3:40:6f:ad:cd:ef:f0:c8:93:
00:ee:2b:94:45:6b:0a:e4:da:e9:27:93:99:40:98:32:a6:95:
09:6d:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:06:58 2026 by rpki-client