
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa
File: f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa (raw, json)
Hash identifier: D17QsPnlz0xo+pSzw9R3J+zdBq4GO4tA9WZ4mKrnMOw=
Subject key identifier: 6B:53:75:94:22:B1:15:89:48:80:FF:61:09:8E:B1:EA:85:37:88:2E
Certificate issuer: /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial: 010D0C9F4328584E2F0460386B2919224B44D080
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa
Signing time: Mon 15 Jun 2026 21:00:12 +0000
ROA not before: Mon 15 Jun 2026 21:00:12 +0000
ROA not after: Sun 13 Sep 2026 21:00:12 +0000
asID: 11990
IP address blocks: 23.168.136.0/24 maxlen: 24
2602:f9bd::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2f:04:60:38:6b:29:19:22:4b:44:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Validity
Not Before: Jun 15 21:00:12 2026 GMT
Not After : Sep 13 21:00:12 2026 GMT
Subject: CN=76af233b-c894-47a6-aa58-dc0afe1face5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:f2:f2:d9:4d:e2:29:d2:1d:99:42:4c:73:
fd:c3:bf:0e:9b:ef:b5:d4:f0:5d:a9:0c:c8:4a:eb:
f8:43:91:b2:ca:09:95:64:ff:ae:11:51:9a:d1:47:
46:9f:b3:e6:66:30:c5:4b:1e:28:3d:8b:ba:db:5c:
c8:d8:88:fb:6a:0a:27:fc:b3:88:ae:d3:70:9e:b7:
92:fa:10:ab:d9:8e:17:a1:f5:b4:57:d1:53:3b:58:
ad:34:d9:d2:31:59:c6:fb:59:48:f6:8a:47:fe:44:
87:37:35:44:59:3c:34:3c:90:8d:ed:d8:1d:e3:c9:
77:43:e2:41:67:21:34:d1:8d:b5:9a:5f:31:f8:c8:
b7:62:3a:e3:9a:fa:b7:16:8c:02:90:9c:11:75:63:
02:37:29:91:12:31:52:2e:1f:2a:09:2b:ac:dd:4f:
55:19:43:9b:5b:b9:ca:03:64:3c:15:bc:31:b8:3b:
33:68:bb:4b:fa:07:8c:7d:3b:8e:c9:0c:af:16:a0:
1b:5b:63:d4:79:43:bf:9b:88:ac:13:4b:93:a5:1a:
e7:c5:65:e4:8d:00:fa:03:42:d0:31:7c:e0:d4:53:
af:2b:d3:65:a5:19:61:c4:38:6f:3a:83:50:34:d4:
37:7d:75:ad:5c:0f:67:74:c0:b7:ab:14:07:3c:be:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:75:94:22:B1:15:89:48:80:FF:61:09:8E:B1:EA:85:37:88:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
X509v3 Authority Key Identifier:
keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.136.0/24
IPv6:
2602:f9bd::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b2:c4:4d:48:92:a1:cd:17:c7:79:94:a1:bc:22:f9:54:03:
ad:5e:26:61:78:57:e1:86:6b:d4:d2:71:c6:c3:dd:97:6a:7a:
16:c6:11:0d:c5:ea:94:c2:70:c1:fc:e1:ea:67:0d:12:d5:ad:
0e:9c:6a:c5:e5:9c:9d:4e:58:27:35:39:24:5b:0c:a5:f2:77:
0c:c2:3a:93:72:cb:e3:b5:54:1f:81:2b:d4:4e:42:51:72:c2:
89:2d:07:aa:86:a6:52:c0:5c:cc:71:ff:d4:7a:f1:60:6e:18:
11:0a:ac:96:db:b7:bb:bf:7a:e4:9c:69:f0:f2:7f:87:47:0e:
f2:b0:b0:a4:69:d6:81:e2:2e:d2:ff:f3:c0:22:b6:51:f7:a1:
d9:29:7e:f9:09:35:3f:12:97:28:5a:bf:5f:ef:7b:d8:9d:0f:
87:70:c7:3d:d6:a3:bc:db:ee:4e:02:26:1c:c4:10:73:bd:1b:
81:f5:48:f0:27:ef:52:71:b2:db:1a:80:45:10:a8:8f:cd:3d:
ef:ff:5e:9b:67:dd:d3:7a:df:15:2e:ff:62:fa:bc:4a:b9:ec:
5e:0f:8d:46:d9:c2:03:68:99:6a:0e:6b:0b:56:05:a2:f1:05:
c6:db:1a:d6:0b:c7:76:27:ae:3d:b8:48:31:2f:7c:82:d6:ca:
02:0c:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:36:16 2026 by rpki-client