
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
File: 860b20cf-76ac-3497-b0c1-607d390e67dd.roa (raw, json)
Hash identifier: aWcIDpRXHWVYdeTowo23B2BInEookyejtaXMj/0W5zc=
Subject key identifier: 31:78:61:6A:B9:CC:01:E4:D5:2D:9D:35:88:33:3A:03:9E:FC:10:F5
Certificate issuer: /CN=3b78e0f0-5f02-4f2e-a084-899096441110
Certificate serial: 010D0C9F4328584EA5AA75AC293F89C3420F9700
Authority key identifier: 02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 401778
IP address blocks: 23.140.76.0/24 maxlen: 24
2602:f615::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:75:ac:29:3f:89:c3:42:0f:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b78e0f0-5f02-4f2e-a084-899096441110
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=d187bdb1-dd62-420e-8a88-fd2c5dcfc6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:c6:f0:16:f2:4d:3c:be:6f:87:e9:7d:77:
30:b8:10:4c:ee:a8:df:81:3f:51:19:2b:68:a0:05:
53:3a:30:ac:7c:5d:62:b1:69:a5:2c:a2:36:97:c3:
94:47:c7:67:20:2d:01:08:8b:85:51:65:17:51:a0:
4f:70:0e:ea:ca:e7:75:fe:d4:e4:7d:a8:84:48:9c:
fa:b6:cb:ee:97:2f:6b:c8:f0:cb:08:54:86:3f:ad:
6e:25:1a:7b:a0:02:20:21:df:4b:38:b6:bf:dd:81:
bb:b0:22:ce:0a:d5:17:02:8a:48:ae:dd:a5:a6:a1:
6c:99:b4:6c:ae:3a:4f:97:b8:8a:79:a5:d9:e6:f1:
7a:11:50:dc:e7:88:f9:0e:91:35:ed:a5:c9:bc:4d:
c4:cd:1b:d9:d6:54:10:70:24:f5:a6:47:ea:20:53:
f9:22:71:49:1c:fb:2c:de:c8:7a:d0:18:10:b1:37:
f2:8a:ee:50:23:27:f6:a7:0c:d6:d8:0a:fd:1e:53:
36:11:1c:67:67:08:0f:fd:64:04:be:60:ca:42:06:
5a:a1:04:4c:79:bb:a2:01:3b:d3:dd:50:12:de:20:
70:c9:94:0c:87:b9:12:6f:61:e0:ba:44:b8:c4:a5:
7d:f7:c0:91:82:6b:d3:6d:33:d6:6a:cc:d3:a4:e9:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:61:6A:B9:CC:01:E4:D5:2D:9D:35:88:33:3A:03:9E:FC:10:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl
X509v3 Authority Key Identifier:
keyid:02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.76.0/24
IPv6:
2602:f615::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:2a:c3:58:24:e5:0d:dc:60:47:5d:ee:33:8d:62:28:40:13:
65:30:93:a7:dd:09:73:a3:3b:dd:a0:9b:63:47:bc:8e:d1:16:
2a:c0:65:98:8c:ec:56:8d:4d:77:db:95:e4:cd:4b:45:97:22:
11:17:0c:02:1b:5c:82:d1:a8:54:30:cb:09:13:10:e4:1a:42:
46:b3:86:20:9a:1b:c7:03:2e:c8:51:15:aa:a5:72:c7:fe:38:
f3:ec:6b:33:ba:dd:6b:65:96:e6:57:b0:fa:0d:29:db:3c:c2:
58:ee:a2:3b:d1:c3:5b:51:9c:15:1f:76:5f:5b:77:c9:7b:10:
11:c7:a7:96:2f:bc:78:93:fa:a2:f8:ff:61:7f:ad:36:e6:66:
ca:b4:0e:e0:30:2e:cf:54:fa:f9:76:11:f2:54:25:17:a9:ea:
bd:8e:0d:a5:cc:2c:07:af:b4:af:02:bd:5f:02:33:5c:cd:1c:
0d:57:ba:f2:50:c0:6e:ac:f8:57:82:89:ae:9c:0d:71:0a:e0:
e8:11:e4:ba:2f:8c:e8:62:7a:1d:f7:09:cc:53:e6:fc:30:e8:
52:7d:91:eb:cc:a4:9e:e2:cc:f7:34:66:7d:7a:39:95:98:2d:
6f:00:ee:68:e2:de:2a:27:f0:8f:41:e2:48:af:21:02:a1:7e:
ee:d4:fa:48
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6lqnWsKT+Jw0IPlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I3OGUwZjAtNWYwMi00ZjJlLWEwODQtODk5MDk2NDQx
MTEwMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
ZDE4N2JkYjEtZGQ2Mi00MjBlLThhODgtZmQyYzVkY2ZjNmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE/G8BbyTTy+b4fpfXcwuBBM7qjfgT9RGSto
oAVTOjCsfF1isWmlLKI2l8OUR8dnIC0BCIuFUWUXUaBPcA7qyud1/tTkfaiESJz6
tsvuly9ryPDLCFSGP61uJRp7oAIgId9LOLa/3YG7sCLOCtUXAopIrt2lpqFsmbRs
rjpPl7iKeaXZ5vF6EVDc54j5DpE17aXJvE3EzRvZ1lQQcCT1pkfqIFP5InFJHPss
3sh60BgQsTfyiu5QIyf2pwzW2Ar9HlM2ERxnZwgP/WQEvmDKQgZaoQRMebuiATvT
3VAS3iBwyZQMh7kSb2HgukS4xKV998CRgmvTbTPWaszTpOko0wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFDF4YWq5zAHk1S2dNYgzOgOe/BD1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjc4
ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkwOTY0NDExMTAvODYwYjIwY2YtNzZhYy0z
NDk3LWIwYzEtNjA3ZDM5MGU2N2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I3OGUwZjAtNWYwMi00ZjJlLWEw
ODQtODk5MDk2NDQxMTEwLzNiNzhlMGYwLTVmMDItNGYyZS1hMDg0LTg5OTA5NjQ0
MTExMC5jcmwwHwYDVR0jBBgwFoAUAi0TqC1UqlratGs7fYOjofpzKu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjc4ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkw
OTY0NDExMTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4xMMA4E
AgACMAgDBgAmAvYVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7KsNYJOUN3GBHXe4zjWIoQBNlMJOn3Qlz
ozvdoJtjR7yO0RYqwGWYjOxWjU1325XkzUtFlyIRFwwCG1yC0ahUMMsJExDkGkJG
s4YgmhvHAy7IURWqpXLH/jjz7Gszut1rZZbmV7D6DSnbPMJY7qI70cNbUZwVH3Zf
W3fJexARx6eWL7x4k/qi+P9hf6025mbKtA7gMC7PVPr5dhHyVCUXqeq9jg2lzCwH
r7SvAr1fAjNczRwNV7ryUMBurPhXgomunA1xCuDoEeS6L4zoYnod9wnMU+b8MOhS
fZHrzKSe4sz3NGZ9ejmVmC1vAO5o4t4qJ/CPQeJIryECoX7u1PpI
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:39:37 2026 by rpki-client