
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1/a5df4e31-3b26-34c2-a8bb-09233ce75d9a.roa
File: a5df4e31-3b26-34c2-a8bb-09233ce75d9a.roa (raw, json)
Hash identifier: jcqbb3/BmIJpv7kXunH1R1bBFLJso8XjD/3t+8FYJkY=
Subject key identifier: 5B:75:90:9C:A7:CE:C4:79:A7:89:B8:D5:5C:B4:9E:34:78:EB:D6:D6
Certificate issuer: /CN=bf68485c-4ee2-41de-ab20-d3d7649e32a1
Certificate serial: 010D0C9F4328584F6292BCAC6CFC864C6C2A810C
Authority key identifier: A4:E2:12:AE:6A:7F:0F:89:BE:80:9D:6B:67:44:1B:86:50:07:3D:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1/a5df4e31-3b26-34c2-a8bb-09233ce75d9a.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 402023
IP address blocks: 23.148.132.0/24 maxlen: 24
2602:f545::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1/bf68485c-4ee2-41de-ab20-d3d7649e32a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1/bf68485c-4ee2-41de-ab20-d3d7649e32a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:bc:ac:6c:fc:86:4c:6c:2a:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf68485c-4ee2-41de-ab20-d3d7649e32a1
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=a9ea7826-a1b5-4c1a-8b88-340674afe30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:86:10:9b:51:4e:3c:68:94:07:4e:8a:f4:
3a:2b:87:78:d4:7e:96:e3:39:11:69:1f:c8:2d:e3:
cf:5b:7f:42:73:d4:9b:dc:85:33:a6:33:aa:7f:89:
b3:77:8d:c7:2b:50:cb:40:65:a2:f9:ae:64:47:1f:
19:e5:cd:95:35:ab:4a:26:c0:6a:71:40:f9:5b:ae:
cc:9a:8b:12:ef:f4:c6:a7:94:4e:1d:77:36:df:9c:
88:bb:6f:5c:54:c4:d9:31:17:2d:53:94:b7:6d:4d:
3f:ea:19:2f:55:29:b0:e0:94:76:a1:6b:32:f1:f0:
83:5f:c7:b0:88:ad:23:3d:26:78:c0:10:aa:6c:94:
bd:6f:c0:ce:5e:09:47:dd:a3:66:39:d1:ad:db:f9:
2e:f9:d9:5f:cc:20:43:3b:b0:21:ac:7b:61:f7:30:
07:63:97:c9:16:94:67:bb:76:6a:fb:7c:d0:83:de:
04:fe:58:70:1e:ca:44:66:bb:30:d8:40:57:f1:8f:
a9:8d:af:bc:b5:91:84:e8:f6:c2:59:4f:e7:f3:5e:
0d:97:86:d4:e7:82:01:bb:a8:95:cd:cb:f6:08:06:
fd:46:64:33:a5:ca:df:1a:61:d5:e2:6d:3a:b1:2a:
27:c5:0b:1c:0a:ed:86:77:ce:f7:6b:ea:a3:a0:94:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:90:9C:A7:CE:C4:79:A7:89:B8:D5:5C:B4:9E:34:78:EB:D6:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1/a5df4e31-3b26-34c2-a8bb-09233ce75d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1/bf68485c-4ee2-41de-ab20-d3d7649e32a1.crl
X509v3 Authority Key Identifier:
keyid:A4:E2:12:AE:6A:7F:0F:89:BE:80:9D:6B:67:44:1B:86:50:07:3D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf68485c-4ee2-41de-ab20-d3d7649e32a1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.132.0/24
IPv6:
2602:f545::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:01:6c:95:2d:4d:70:aa:89:9e:25:97:1c:06:b5:ad:d3:55:
43:13:ac:96:7e:05:4a:8f:2a:53:3c:84:13:1e:de:bc:1c:f5:
e5:27:d1:b0:db:77:64:2b:ea:44:3f:54:20:fa:ec:17:b2:ba:
36:c5:7d:ff:e3:13:99:08:ed:b2:3d:a4:42:63:42:77:4b:a0:
22:3f:ad:41:3f:78:b9:96:33:78:6a:70:93:17:92:30:b0:cd:
c5:41:df:d3:36:13:68:d9:9b:4c:50:c0:bf:22:8a:8c:6e:d9:
d2:8a:3a:bf:1a:f2:36:2c:8b:af:5e:3c:7c:6a:13:86:7d:32:
22:e9:02:33:ed:0a:91:21:34:73:ea:64:fe:05:c2:68:4b:08:
ad:52:01:06:2d:4a:47:96:3b:00:db:a3:1e:c8:1c:24:e2:ae:
35:7b:ea:7b:71:f2:3a:48:4c:fc:4a:6c:58:de:b1:14:9d:6d:
6c:bf:b4:23:35:31:0f:a3:36:6d:78:f7:f2:d3:d3:c2:6d:1d:
cb:d7:ec:69:b4:d5:d4:f4:a5:59:67:6e:88:af:53:70:7f:a9:
26:4b:92:04:6c:9e:55:b5:56:66:40:07:20:76:1c:93:04:82:
bd:84:93:c3:f2:eb:d4:f8:2d:0e:77:cf:d0:51:d8:0a:d2:0d:
fb:b4:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:35:55 2026 by rpki-client