
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/bf63bab3-aed4-304b-b82e-926d239bb3ca.roa
File: bf63bab3-aed4-304b-b82e-926d239bb3ca.roa (raw, json)
Hash identifier: +XicQBmwUrCk+HwoxmJJ3UnN/5MnCMx3B/uxq3+6ZJE=
Subject key identifier: 0A:96:B6:36:BE:86:40:E8:85:3A:A0:0A:DD:07:77:1E:8C:06:DC:71
Certificate issuer: /CN=e328149d-d077-4e6a-93b2-829a96c70afd
Certificate serial: 010D0C9F4328584EABB6E18571AC7EA3F2399580
Authority key identifier: 4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/bf63bab3-aed4-304b-b82e-926d239bb3ca.roa
Signing time: Thu 30 Jul 2026 13:00:12 +0000
ROA not before: Thu 30 Jul 2026 13:00:12 +0000
ROA not after: Wed 28 Oct 2026 13:00:12 +0000
asID: 402587
IP address blocks: 23.158.164.0/24 maxlen: 24
2602:f3b7::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ab:b6:e1:85:71:ac:7e:a3:f2:39:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e328149d-d077-4e6a-93b2-829a96c70afd
Validity
Not Before: Jul 30 13:00:12 2026 GMT
Not After : Oct 28 13:00:12 2026 GMT
Subject: CN=15363af5-ca9e-4849-a8cd-7fb1b37adf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:7a:5c:65:d9:2a:c3:dd:6c:30:69:07:27:
d9:bb:a6:60:44:4c:ce:b2:be:24:fb:63:d1:22:76:
6c:7a:99:44:0b:9c:9f:de:6f:8e:a1:1a:14:74:0e:
46:a8:49:a2:a9:a8:d6:c2:c1:b4:90:77:80:d5:aa:
77:81:8f:92:a3:93:6e:5f:52:eb:37:0f:49:2f:f4:
e8:23:3d:92:6e:20:2a:3a:90:91:e3:d2:bb:31:30:
39:18:9b:0e:27:83:6d:9a:49:a4:cb:47:ad:5d:7d:
0e:32:2f:eb:98:dc:7f:50:4f:04:7b:84:5b:12:77:
bc:14:91:7b:9d:44:e3:8c:c1:c2:96:5e:2f:32:be:
a1:9b:61:45:30:2e:40:5e:8b:77:87:6c:72:7b:a4:
e5:73:6d:71:3d:c3:d3:12:18:de:d0:61:1d:6b:08:
e5:fc:b4:e8:51:68:0d:c2:42:e7:18:ef:a3:a9:34:
37:37:40:dc:3d:4c:c6:d6:22:0d:4c:ac:61:47:c2:
7c:8d:30:35:71:ad:f5:42:4a:20:61:5e:d0:e3:33:
76:7f:5a:cf:0d:05:21:c2:b5:1c:88:8f:84:4a:74:
82:90:08:f3:6e:d7:c3:fa:87:9a:6d:59:3f:45:82:
24:ff:48:9e:ad:28:0a:c7:2e:5c:0b:14:1e:94:01:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:96:B6:36:BE:86:40:E8:85:3A:A0:0A:DD:07:77:1E:8C:06:DC:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/bf63bab3-aed4-304b-b82e-926d239bb3ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.crl
X509v3 Authority Key Identifier:
keyid:4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.164.0/24
IPv6:
2602:f3b7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:7a:54:cd:37:ac:d2:45:e0:ea:5e:7d:46:51:30:0c:ca:dc:
79:cc:f9:a0:2a:01:c7:73:8c:1c:b7:ce:63:38:b8:25:4e:e0:
50:47:d0:fe:bb:6d:91:9c:8d:b2:e2:ec:09:77:dc:54:0d:a2:
06:f5:95:62:c4:17:c7:bd:59:aa:d3:5e:36:fb:d5:a0:7b:4a:
af:b5:b3:78:04:42:2e:9a:47:39:76:3e:f4:d3:73:91:46:cc:
d4:d7:0c:c9:af:66:dc:c1:0d:d7:a5:04:f1:20:ce:c6:a7:3c:
63:da:21:dc:47:61:0f:f5:3e:12:34:5a:6c:a9:67:57:b6:03:
13:d8:9f:2c:57:62:7d:5e:3b:29:c1:94:5d:fc:63:81:33:d3:
1a:8c:35:3e:1b:a8:79:10:0c:db:1b:59:4a:3f:f4:e6:41:4c:
e1:30:49:ab:54:dd:9f:79:7e:c7:2c:df:06:2a:4f:61:d2:29:
30:09:20:c3:1b:1a:3b:6f:b9:4b:5f:7d:0d:e8:ba:39:dd:66:
48:e2:a4:e3:45:80:b3:8f:fd:79:80:7f:4d:1f:ef:15:02:b6:
44:dc:6c:08:47:2e:6b:bf:b5:bd:63:36:e8:94:4c:ea:2d:cd:
39:af:42:c5:d7:4c:23:7d:06:78:67:71:7a:6a:7d:ac:89:00:
20:bb:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:28 2026 by rpki-client