
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa
File: 3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json)
Hash identifier: 0fMN0KyPwIM5yirOjbfMKnpWYFCPqXJspDSKGgQ8Tro=
Subject key identifier: CD:0F:4A:7B:47:D4:9A:53:2D:20:05:FD:B3:A4:27:59:7D:49:F8:07
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584EB416FBAEB66357AA8328AA80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa
Signing time: Sun 02 Aug 2026 13:00:12 +0000
ROA not before: Sun 02 Aug 2026 13:00:12 +0000
ROA not after: Sat 31 Oct 2026 13:00:12 +0000
asID: 9009
IP address blocks: 24.235.20.0/24 maxlen: 24
24.235.21.0/24 maxlen: 24
158.115.240.0/24 maxlen: 24
158.115.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b4:16:fb:ae:b6:63:57:aa:83:28:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Aug 2 13:00:12 2026 GMT
Not After : Oct 31 13:00:12 2026 GMT
Subject: CN=61a4cc7f-3903-44bf-ae1f-c0c4a47583fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:00:ff:c1:d4:9f:a9:83:a0:0e:b1:35:dc:
6f:72:f7:b1:0e:e3:76:7d:05:34:7d:1d:17:f1:c7:
ea:f4:aa:77:7c:de:ca:bb:b4:8d:39:d2:9a:d4:31:
0c:92:06:5a:db:be:63:f5:7e:bc:85:fe:2a:a0:18:
68:55:fa:0a:4e:09:29:c5:5f:d7:a0:11:17:6e:3f:
15:2d:2f:e8:69:36:dc:13:01:38:82:f7:5a:90:69:
35:ad:19:db:31:32:52:e9:b1:f6:23:bf:ea:59:20:
4b:0b:4a:2b:d9:90:06:27:44:a7:6a:0d:fe:8d:75:
a4:66:f2:79:40:dc:56:75:eb:cf:91:05:40:d9:ff:
87:31:6c:82:9c:24:b9:1c:78:47:27:65:55:84:3c:
10:02:cf:6f:62:4b:f9:b2:bd:3f:8d:da:54:93:9c:
c3:f6:59:db:55:62:1b:4b:c7:73:28:c9:d0:1b:be:
21:20:f6:b6:12:c8:5c:94:5b:9b:dc:d0:7f:5c:93:
a4:e8:71:cf:6f:3a:60:0b:20:65:48:6c:13:3b:0b:
19:d0:a2:55:87:63:61:ac:52:77:5c:8c:2d:11:a8:
a5:39:c6:73:0c:8e:e8:c1:f8:b6:e2:58:22:f7:e2:
01:43:66:82:ab:a5:4b:e6:68:85:58:7e:e8:1d:c1:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0F:4A:7B:47:D4:9A:53:2D:20:05:FD:B3:A4:27:59:7D:49:F8:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
24.235.20.0/23
158.115.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ea:08:d6:73:34:d1:90:f8:d4:cd:38:63:ee:bf:f5:f5:fd:
0e:f5:be:11:e0:1e:1b:00:00:ae:be:36:ba:9d:fb:e5:7b:e8:
16:10:4e:17:23:df:a4:4a:c6:91:b1:b3:7f:d3:d3:d2:38:05:
e2:dc:3e:f3:f9:00:a6:61:eb:82:9b:ee:04:03:17:96:4c:f6:
a4:fe:78:92:21:de:72:0a:8b:29:f9:59:2b:2b:bd:ed:49:6a:
44:71:f2:0b:b2:b9:bc:a1:64:56:74:f3:d8:79:37:cc:55:5c:
c8:90:84:4c:18:59:33:19:56:8c:6f:46:02:65:a8:19:48:89:
cd:a0:12:a5:a8:d6:15:a5:88:ff:1d:99:ba:0b:0d:ea:b0:37:
2e:64:8d:ce:11:cc:6a:a9:c0:29:bd:25:d5:a6:4c:02:97:88:
13:18:be:cb:3f:2e:e8:c8:e9:00:d9:13:d5:f2:af:e2:e3:fd:
7b:05:51:d2:a9:6a:79:91:23:f7:6d:50:66:58:1c:32:77:84:
45:c8:3e:cc:2f:bb:70:b9:16:59:c7:80:65:e5:64:c6:3e:8c:
a2:44:ce:3b:11:dc:a6:8c:6c:0b:51:a1:18:75:ab:ae:0d:b6:
bf:d2:4e:43:48:8b:bc:83:19:99:ac:01:5f:6a:a2:13:b9:9e:
75:3c:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:08 2026 by rpki-client