
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ba20aed6-2a86-39f0-936d-fcd27baabdeb.roa
File: ba20aed6-2a86-39f0-936d-fcd27baabdeb.roa (raw, json)
Hash identifier: KLsu8EZ579yPeCjp1K4Lf5BZW9Sz8eQw/Z2gpkcxQnw=
Subject key identifier: 33:6E:AB:0A:DC:A4:96:DD:0D:51:46:93:32:2E:29:2A:9F:76:6B:15
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584EBBE9CC287B4B111D0DB829B0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ba20aed6-2a86-39f0-936d-fcd27baabdeb.roa
Signing time: Wed 05 Aug 2026 08:15:45 +0000
ROA not before: Wed 05 Aug 2026 08:15:45 +0000
ROA not after: Tue 03 Nov 2026 09:15:45 +0000
asID: 19148
IP address blocks: 23.19.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:e9:cc:28:7b:4b:11:1d:0d:b8:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Aug 5 08:15:45 2026 GMT
Not After : Nov 3 09:15:45 2026 GMT
Subject: CN=87fa6e73-2dc9-495a-afbc-2c996592e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:10:e3:5b:d4:56:4f:99:a6:cb:54:2d:c7:
44:2f:22:d3:fa:00:80:72:30:90:7c:e6:32:c2:d9:
6a:ba:a0:4e:95:73:93:3e:95:52:95:f2:49:dd:7e:
49:6d:39:ff:8f:49:dd:a9:35:26:76:8d:92:68:34:
f3:7c:51:6c:60:90:d5:83:28:0f:85:d3:43:1f:d1:
d5:23:3b:c7:74:d9:38:7f:e6:e8:63:ed:ac:8a:1f:
96:75:a3:4f:e0:a5:e7:e9:65:2b:3a:b1:38:e5:ef:
f7:00:4e:a7:29:cb:07:17:b4:bc:7a:aa:2d:c3:99:
80:ce:82:94:d2:ec:27:14:cd:8b:c5:3f:98:90:d5:
3c:71:3d:cf:6e:f2:84:38:49:c5:58:d4:99:97:21:
26:c0:ce:32:f1:70:14:8f:18:18:34:8c:34:d4:fc:
d0:3b:cf:00:34:5d:75:15:af:7c:08:da:0e:de:ee:
79:85:13:fc:5a:f6:b2:a7:b2:60:d3:ad:89:05:bc:
a1:c5:9e:bf:01:8e:df:71:d4:7c:03:2f:3f:a7:28:
97:84:45:64:11:d3:24:45:8a:6b:7d:60:2a:dd:98:
c5:b1:92:7f:1f:f5:9c:24:d6:d3:44:39:bb:bd:56:
af:4b:a2:42:cf:83:d1:b8:e4:f1:47:7d:bb:31:7e:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:AB:0A:DC:A4:96:DD:0D:51:46:93:32:2E:29:2A:9F:76:6B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ba20aed6-2a86-39f0-936d-fcd27baabdeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:66:d0:e7:a0:58:c2:2c:99:e7:ed:ac:49:0e:33:d1:9d:62:
b3:2d:db:a2:7c:ab:45:f3:3e:ef:20:a0:59:21:02:db:c9:e4:
32:3f:2d:b7:62:44:db:ff:5e:7a:41:79:49:be:e4:ba:a9:fc:
33:20:6b:d3:8e:36:63:6e:03:f3:d5:66:65:4d:3a:70:8e:81:
7f:12:ec:63:10:24:f9:0e:34:bb:79:43:df:c2:46:9f:62:a6:
b9:31:69:03:bb:19:ed:a2:cc:9d:46:0b:3d:1e:84:ca:57:f1:
e5:1e:3c:c7:65:39:b3:b9:4e:78:86:d1:28:98:a0:d1:7c:71:
10:ce:06:68:7a:e2:0e:fd:68:98:21:20:e9:2d:2a:2d:9c:a0:
98:be:c8:8b:c2:ae:21:3c:bf:f1:f6:99:13:a9:80:fd:df:8d:
ef:f1:d0:81:16:57:0c:c6:81:bf:63:42:14:80:c0:0f:01:13:
87:f5:5c:ca:fc:da:23:d2:b6:c0:21:d9:68:bd:e6:f7:33:75:
f6:72:43:18:65:be:50:4f:6e:b9:92:3c:61:3e:58:96:b7:89:
93:3f:48:de:69:ae:7d:d5:ef:40:d0:a1:81:5e:ec:67:1d:56:
34:04:31:5e:06:29:81:73:d7:4d:04:ef:90:7b:d8:0d:7a:e6:
a7:f6:31:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:36 2026 by rpki-client