
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa
File: ca4eafff-9365-3068-b787-140215783a30.roa (raw, json)
Hash identifier: Giy547AZc+8tgQ+N9jaqqQztqbz94WCb4ncy9rCTSvc=
Subject key identifier: 45:FD:01:89:A0:1D:88:0A:34:8E:6B:69:70:07:BB:B5:95:B2:E2:E0
Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08
Certificate serial: 010D0C9F4328584EA798F290794199833A743080
Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 401472
IP address blocks: 23.129.28.0/24 maxlen: 24
2602:f7af::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:f2:90:79:41:99:83:3a:74:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a10e4f12-e2e6-4f56-9384-519c035edb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:c3:3e:23:42:66:d6:72:65:90:ed:30:93:
aa:2f:c5:cf:e7:a6:33:de:d8:e4:fc:bf:d3:27:29:
98:da:2c:d0:68:e1:82:6b:d5:47:6f:9e:ad:60:6d:
e9:99:27:0b:be:46:85:4f:15:d4:b7:65:7f:e1:44:
61:7a:ef:fc:0e:a5:c0:ca:28:b5:66:33:39:89:fe:
4e:36:da:5b:ef:2f:59:99:03:51:fe:3c:57:3e:fb:
dd:db:34:b2:89:61:49:e5:d8:7f:02:b7:ad:ab:91:
f6:dc:5f:e3:a1:13:26:ba:ba:6f:26:a7:01:8c:74:
4a:f4:78:3c:70:f0:63:7b:45:47:48:c3:90:f2:cc:
78:20:15:15:b0:92:01:c6:b2:d3:af:46:2f:d6:6c:
94:73:57:60:1d:f0:e9:f9:57:c4:86:dc:bb:4e:89:
60:5f:b7:d2:be:51:b9:af:77:49:b1:b1:9a:9c:b3:
8a:29:c7:66:1e:11:af:b8:c8:33:a9:2c:24:35:65:
4f:6f:44:ef:fc:f7:eb:79:02:23:21:0e:ba:47:15:
bb:7a:6a:7c:a5:35:77:88:26:51:01:bf:0a:15:a5:
bc:95:6e:f4:a7:a1:f0:28:dd:d1:48:91:a7:28:5d:
ce:b1:aa:06:3a:ba:0c:16:1b:69:ed:32:a0:eb:dd:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:01:89:A0:1D:88:0A:34:8E:6B:69:70:07:BB:B5:95:B2:E2:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl
X509v3 Authority Key Identifier:
keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.28.0/24
IPv6:
2602:f7af::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:86:99:89:54:b0:8b:31:c1:71:f6:0d:11:eb:d0:d5:84:5b:
93:04:d2:5e:fa:7e:9f:9d:fa:9d:97:08:3b:d2:d0:76:15:66:
bc:2e:1f:f1:d0:57:c3:8d:03:74:e1:5f:0f:9c:0f:d1:23:b1:
ab:b5:a2:f9:db:ea:d8:de:5b:94:b6:67:98:ff:37:14:01:b3:
f3:ca:cf:52:98:de:d9:1b:6b:36:8c:84:21:ce:a2:31:1f:a3:
7a:18:17:96:e1:76:a7:b5:27:17:72:31:1e:e3:11:f2:d8:d7:
47:d9:7d:e7:35:bf:ce:89:f8:8b:b3:7e:46:ab:8d:43:0b:1a:
00:d2:1c:21:d0:d0:88:13:5b:50:49:1d:e1:07:23:80:b5:af:
f2:d2:45:fa:91:4b:54:fd:3f:40:bd:85:05:ad:7e:ae:e0:a9:
ef:11:78:d9:cd:a4:c9:0e:84:a2:ef:ed:fa:9d:56:17:2b:ed:
9f:70:7c:5e:f9:dd:57:59:3f:4f:08:d7:55:ee:72:b5:14:bc:
6f:37:e3:ab:b8:6d:3f:98:23:7e:2c:a3:2d:16:29:9b:43:83:
ff:18:be:2c:9c:23:3e:60:e9:30:78:aa:ad:6f:f7:b5:fb:69:
f3:34:69:af:55:a1:b7:15:29:cb:30:87:9b:41:ab:04:dd:bf:
b2:47:64:e4
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nmPKQeUGZgzp0MIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky
ZTA4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTEwZTRmMTItZTJlNi00ZjU2LTkzODQtNTE5YzAzNWVkYjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV/DPiNCZtZyZZDtMJOqL8XP56Yz3tjk/L/T
JymY2izQaOGCa9VHb56tYG3pmScLvkaFTxXUt2V/4URheu/8DqXAyii1ZjM5if5O
Ntpb7y9ZmQNR/jxXPvvd2zSyiWFJ5dh/Aretq5H23F/joRMmurpvJqcBjHRK9Hg8
cPBje0VHSMOQ8sx4IBUVsJIBxrLTr0Yv1myUc1dgHfDp+VfEhty7TolgX7fSvlG5
r3dJsbGanLOKKcdmHhGvuMgzqSwkNWVPb0Tv/PfreQIjIQ66RxW7emp8pTV3iCZR
Ab8KFaW8lW70p6HwKN3RSJGnKF3OsaoGOroMFhtp7TKg693irwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFEX9AYmgHYgKNI5raXAHu7WVsuLgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0
Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvY2E0ZWFmZmYtOTM2NS0z
MDY4LWI3ODctMTQwMjE1NzgzYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm
ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5
MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi
ZWFjOTJlMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4EcMA4E
AgACMAgDBgAmAvevADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOhpmJVLCLMcFx9g0R69DVhFuTBNJe+n6f
nfqdlwg70tB2FWa8Lh/x0FfDjQN04V8PnA/RI7GrtaL52+rY3luUtmeY/zcUAbPz
ys9SmN7ZG2s2jIQhzqIxH6N6GBeW4XantScXcjEe4xHy2NdH2X3nNb/OifiLs35G
q41DCxoA0hwh0NCIE1tQSR3hByOAta/y0kX6kUtU/T9AvYUFrX6u4KnvEXjZzaTJ
DoSi7+36nVYXK+2fcHxe+d1XWT9PCNdV7nK1FLxvN+OruG0/mCN+LKMtFimbQ4P/
GL4snCM+YOkweKqtb/e1+2nzNGmvVaG3FSnLMIebQasE3b+yR2Tk
-----END CERTIFICATE-----
Generated at Fri Aug 21 21:59:51 2026 by rpki-client