
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa
File: aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa (raw, json)
Hash identifier: R19SrhBsrRjs7ml9LfGnqw11UvCzVeuOVvHko8xn9lE=
Subject key identifier: 99:1D:C0:5D:61:F0:98:E8:4C:E6:DE:A7:D0:BA:8D:C0:FE:AA:7D:C6
Certificate issuer: /CN=cf287819-e56f-4dbd-8904-66671e2f705d
Certificate serial: 010D0C9F4328584EF87CE334784BE46AFDE28540
Authority key identifier: 29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 63023
IP address blocks: 23.139.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:e3:34:78:4b:e4:6a:fd:e2:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf287819-e56f-4dbd-8904-66671e2f705d
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=1e8e3810-3459-4808-90fa-503ecc83a72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:45:e9:25:90:d6:45:fc:7c:e4:73:ff:24:
00:cc:c1:d0:9c:0f:e9:e5:ca:99:6d:d9:0f:bb:72:
41:d1:e6:16:3a:1b:82:76:c0:54:d1:74:28:99:04:
9e:0b:3e:fb:de:1f:37:71:12:7e:a1:d8:09:ed:35:
d3:98:1e:d4:f5:49:8c:cc:f5:47:27:86:31:b5:71:
17:9b:e4:25:50:a1:22:66:37:79:5a:13:a9:b0:8e:
8e:cd:62:62:08:0b:4f:02:bb:7e:11:d5:fd:56:45:
ae:67:73:34:c1:5d:21:2a:b1:2e:49:a9:33:30:f9:
e7:25:7c:bc:55:12:f2:1a:fd:77:b1:9a:10:09:d7:
04:52:89:6c:62:da:07:ec:75:fb:83:58:03:82:a7:
b0:19:42:23:61:6f:e8:3f:87:1e:25:1b:33:5c:76:
a5:74:52:01:81:5c:87:7d:58:2a:cb:7e:5d:54:f2:
70:30:58:ee:94:7c:aa:e9:f2:66:65:02:52:03:73:
b0:8c:92:92:ca:bc:f3:50:c2:04:18:0d:d1:d2:3c:
ad:4e:6c:c3:7f:11:8d:00:40:c2:99:97:7d:92:b4:
f4:39:0c:05:dd:a0:19:72:79:f0:18:f1:cf:75:ee:
f5:d9:2b:8c:67:52:7c:62:85:a8:75:12:bc:a2:72:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1D:C0:5D:61:F0:98:E8:4C:E6:DE:A7:D0:BA:8D:C0:FE:AA:7D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.crl
X509v3 Authority Key Identifier:
keyid:29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:9a:49:fe:ed:a3:83:22:db:44:bc:21:96:29:75:07:dc:ae:
e5:e2:09:63:89:55:ad:46:3f:40:39:3d:99:a8:f9:1a:6b:30:
2a:41:78:71:96:0a:7b:29:7f:14:85:a6:1c:fe:94:ea:51:7a:
c6:31:fb:73:df:09:73:47:93:f0:21:63:5e:0e:dc:2f:2b:c6:
34:40:43:77:37:2b:b4:6d:b9:3b:53:ae:d6:20:4c:bd:db:ef:
b8:6f:b2:ca:05:31:20:8d:09:0e:9d:a9:8a:3c:21:3d:b0:c7:
77:a0:84:0a:c8:bf:de:e5:f3:81:3c:4c:95:b4:48:fd:19:24:
6f:de:13:86:2a:20:ee:47:93:57:5d:5e:34:9d:7e:37:e5:7c:
12:b1:f5:e0:1b:47:2c:6e:f4:81:95:06:eb:43:cd:1c:14:e4:
25:60:68:bd:54:75:1b:a7:ea:99:db:64:cd:08:88:b5:fe:7b:
b1:e8:b0:43:8e:a6:91:5d:55:04:64:4c:4e:01:1e:85:88:b5:
d1:3c:6f:db:b4:55:d6:52:5f:7c:58:37:63:a6:08:dc:7a:8d:
61:07:96:9c:e6:65:6e:c7:bd:45:dd:19:c9:80:ad:18:3e:79:
c6:a6:4e:11:1d:83:cb:34:09:f1:b3:7f:f1:cb:87:19:17:b9:
c5:4e:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:19:52 2026 by rpki-client