
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/bf69307c-2d42-3132-a270-29f16aa3b969.roa
File: bf69307c-2d42-3132-a270-29f16aa3b969.roa (raw, json)
Hash identifier: /0f0loi8PRS5QDW/SrAnzFuI+L2Iz8iHcTdX1IJlAnk=
Subject key identifier: 6F:0F:58:63:1D:35:70:09:2F:93:44:53:08:4F:7E:AE:90:CA:1F:31
Certificate issuer: /CN=0149474f-8f94-4fcf-8fda-bf84c685a777
Certificate serial: 010D0C9F4328584EB2B19E0FBF0FA431D37C1300
Authority key identifier: D0:9B:C2:36:37:2C:A7:BA:40:8C:2E:30:A2:A5:B1:B3:81:B7:2E:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/bf69307c-2d42-3132-a270-29f16aa3b969.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 40662
IP address blocks: 23.136.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/0149474f-8f94-4fcf-8fda-bf84c685a777.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/0149474f-8f94-4fcf-8fda-bf84c685a777.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:9e:0f:bf:0f:a4:31:d3:7c:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0149474f-8f94-4fcf-8fda-bf84c685a777
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=22f6d670-f709-4b27-8d32-d174ec3102b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:97:bb:0a:90:87:ca:b5:e3:0b:41:fd:5e:
65:01:4b:82:4b:51:0d:4a:37:00:02:df:71:de:a4:
82:7f:d3:43:4e:a2:d2:6f:f9:ee:d3:4c:d9:73:df:
97:05:28:f2:03:4f:ce:20:37:d9:83:38:da:a0:dc:
88:6d:23:1f:e4:5a:74:c4:73:41:ee:71:07:0b:2c:
6a:23:2e:6c:b5:47:d7:55:bb:68:ca:a9:07:57:62:
d7:1e:29:5c:7d:fb:11:64:00:88:56:8c:08:cc:88:
9d:ee:ef:bc:93:97:49:40:c6:6e:de:2d:87:28:a9:
f1:bb:0f:36:70:1d:3c:f6:fa:96:12:72:e1:a3:c2:
4c:d8:80:6b:08:25:c8:c9:5d:61:7e:9d:4e:ae:15:
99:64:16:17:ba:64:91:50:7c:19:5e:c7:7d:e4:8b:
07:6f:76:30:66:d6:48:d6:f0:f9:6e:8c:38:6c:7f:
f1:6d:e4:e9:ec:fe:72:41:37:d9:d9:44:6e:1b:d2:
3a:53:53:07:12:c0:be:39:46:31:8a:37:bb:86:20:
d4:dc:a1:d2:a7:53:68:27:41:cf:e0:39:09:1b:2c:
67:2d:6a:96:31:dd:65:01:7d:c2:26:bf:48:af:48:
06:4b:1f:f8:cf:20:0e:39:bd:b7:0f:99:ee:23:32:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:58:63:1D:35:70:09:2F:93:44:53:08:4F:7E:AE:90:CA:1F:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/bf69307c-2d42-3132-a270-29f16aa3b969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/0149474f-8f94-4fcf-8fda-bf84c685a777.crl
X509v3 Authority Key Identifier:
keyid:D0:9B:C2:36:37:2C:A7:BA:40:8C:2E:30:A2:A5:B1:B3:81:B7:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:86:bf:a8:9c:1c:17:9e:a9:ee:96:b2:d0:e5:1a:5f:f0:f3:
60:be:11:92:ba:9c:58:87:32:59:72:76:fa:5c:7c:d7:d2:d2:
50:00:a6:60:f3:b6:91:44:cd:48:b3:e0:56:52:d9:d7:01:1d:
25:4a:09:aa:9b:1e:ae:47:b2:ed:65:95:42:9b:c2:e0:94:74:
81:aa:41:25:bf:e9:42:0f:07:d0:e9:71:04:4e:ab:eb:db:93:
f7:c6:66:ab:07:30:c2:ba:0c:87:ae:76:e9:d7:04:23:b0:56:
b3:d9:9f:2c:66:63:78:53:03:8f:db:35:da:f6:85:ac:80:c4:
da:ac:1a:67:58:ac:b8:ad:8f:38:9d:4f:8e:40:29:08:b2:32:
6b:ad:e7:ed:e2:af:d4:e5:32:e2:38:30:41:d8:42:50:a6:76:
bb:cf:17:c3:97:c0:a7:37:ac:43:4c:02:04:5d:9e:0e:da:6f:
ed:99:10:55:fe:ef:73:24:ca:60:5d:52:f2:a5:7a:44:e3:8f:
75:46:30:c9:ac:22:f3:3a:c1:d5:d4:06:26:ba:ea:8a:38:20:
be:97:1f:2f:c6:4f:74:33:aa:89:41:67:a0:ef:fe:2e:b4:b3:
a7:15:84:4d:3f:fe:8d:59:23:38:d4:7f:94:61:a8:4d:4b:99:
7c:80:ef:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysZ4Pvw+kMdN8EwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE0OTQ3NGYtOGY5NC00ZmNmLThmZGEtYmY4NGM2ODVh
Nzc3MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MjJmNmQ2NzAtZjcwOS00YjI3LThkMzItZDE3NGVjMzEwMmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyciXuwqQh8q14wtB/V5lAUuCS1ENSjcAAt9x
3qSCf9NDTqLSb/nu00zZc9+XBSjyA0/OIDfZgzjaoNyIbSMf5Fp0xHNB7nEHCyxq
Iy5stUfXVbtoyqkHV2LXHilcffsRZACIVowIzIid7u+8k5dJQMZu3i2HKKnxuw82
cB089vqWEnLho8JM2IBrCCXIyV1hfp1OrhWZZBYXumSRUHwZXsd95IsHb3YwZtZI
1vD5bow4bH/xbeTp7P5yQTfZ2URuG9I6U1MHEsC+OUYxije7hiDU3KHSp1NoJ0HP
4DkJGyxnLWqWMd1lAX3CJr9Ir0gGSx/4zyAOOb23D5nuIzL5lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8PWGMdNXAJL5NEUwhPfq6Qyh8xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wMTQ5
NDc0Zi04Zjk0LTRmY2YtOGZkYS1iZjg0YzY4NWE3NzcvYmY2OTMwN2MtMmQ0Mi0z
MTMyLWEyNzAtMjlmMTZhYTNiOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDE0OTQ3NGYtOGY5NC00ZmNmLThm
ZGEtYmY4NGM2ODVhNzc3LzAxNDk0NzRmLThmOTQtNGZjZi04ZmRhLWJmODRjNjg1
YTc3Ny5jcmwwHwYDVR0jBBgwFoAU0JvCNjcsp7pAjC4woqWxs4G3Ln0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wMTQ5NDc0Zi04Zjk0LTRmY2YtOGZkYS1iZjg0
YzY4NWE3NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4iUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKGv6icHBeeqe6WstDlGl/w82C+EZK6nFiHMllydvpcfNfS0lAApmDz
tpFEzUiz4FZS2dcBHSVKCaqbHq5Hsu1llUKbwuCUdIGqQSW/6UIPB9DpcQROq+vb
k/fGZqsHMMK6DIeudunXBCOwVrPZnyxmY3hTA4/bNdr2hayAxNqsGmdYrLitjzid
T45AKQiyMmut5+3ir9TlMuI4MEHYQlCmdrvPF8OXwKc3rENMAgRdng7ab+2ZEFX+
73MkymBdUvKlekTjj3VGMMmsIvM6wdXUBia66oo4IL6XHy/GT3QzqolBZ6Dv/i60
s6cVhE0//o1ZIzjUf5RhqE1LmXyA75E=
-----END CERTIFICATE-----
Generated at Mon Aug 24 06:46:56 2026 by rpki-client