
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa
File: 1aa4c712-289c-3632-8103-98b72f2ecced.roa (raw, json)
Hash identifier: b1ZZLKKTGYII38R2D4HAnK+M19fw0VcK83Ry4S3xRMM=
Subject key identifier: 61:37:67:49:85:32:9A:60:1C:BA:A2:B7:1F:42:C8:FA:78:89:F0:3A
Certificate issuer: /CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac
Certificate serial: 010D0C9F4328584E7204E3213777F26FEE83FE80
Authority key identifier: F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 402410
IP address blocks: 23.156.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:e3:21:37:77:f2:6f:ee:83:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=6f3d3bf7-4c29-415b-89e9-252abafaebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:97:83:cb:7b:ea:9f:3f:97:88:05:22:e0:
32:ff:f9:3d:29:72:ab:c8:eb:b7:f2:be:da:f2:5d:
a6:d5:25:c0:c3:d1:86:07:a4:7e:ec:f8:27:72:c2:
5f:ae:d1:06:cb:d1:6b:f2:58:84:9d:ad:81:f6:fe:
53:a5:41:01:2f:82:c2:3d:6b:6d:96:fb:e6:6c:72:
ce:3c:0c:7a:c9:64:37:de:b4:25:3d:d5:fc:11:f4:
d0:04:bf:d4:7f:1b:64:a9:51:86:87:62:a5:5a:b8:
0a:fe:5a:94:ff:11:6c:e4:18:0d:3f:f7:83:02:bf:
54:4d:be:16:5d:f6:e7:dd:cb:e9:3b:2e:e3:a0:56:
13:fc:85:f2:fc:cd:25:8f:fb:e5:24:a1:ec:af:b5:
2a:6f:20:21:8d:6d:59:e5:d1:22:9a:f0:e5:ba:a5:
40:c5:b4:73:02:4c:4d:8e:1a:36:f3:f6:b9:1f:06:
0c:23:69:e7:55:5a:d0:7f:62:3d:35:c0:4b:87:0f:
c2:ff:4a:5d:1d:d5:61:af:3d:cd:b7:c5:67:8f:05:
e4:18:4b:60:e5:ba:5c:31:45:c3:6e:2f:81:5b:27:
0a:e6:51:98:b3:d3:37:e4:cc:c0:d1:21:d2:cb:a8:
76:40:74:c6:0d:6e:e8:59:11:ea:ea:4e:0e:b9:93:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:67:49:85:32:9A:60:1C:BA:A2:B7:1F:42:C8:FA:78:89:F0:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl
X509v3 Authority Key Identifier:
keyid:F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:44:b7:fd:63:8d:88:00:a5:2d:a5:d4:72:f9:37:1f:d4:75:
24:d1:80:4d:d5:80:ff:03:d1:84:52:16:2c:af:ca:08:3c:27:
fd:5f:7e:92:c0:b5:04:08:d7:93:c2:e1:c1:a1:a9:94:a4:16:
51:b6:a3:83:04:51:1a:be:39:eb:ca:82:8d:fa:77:c9:26:5f:
b1:d1:b7:f2:c2:c3:7c:09:07:7b:20:3e:1a:d5:a7:44:14:20:
a6:17:7f:de:5b:6b:5b:6f:bf:5e:d5:a8:eb:fd:ad:ea:14:c7:
73:6a:01:12:12:bc:51:87:29:17:17:8b:4a:9d:3e:95:e5:6e:
67:18:8a:c1:d6:f5:9f:c1:59:76:0d:98:2c:8a:0d:4f:2a:bc:
1b:fc:69:1b:af:a9:c7:1c:7a:37:cd:2d:fb:a9:42:a0:b2:88:
26:1b:cf:a1:6c:d1:56:37:1b:f0:0f:23:e2:82:df:3c:d0:2f:
32:68:66:bc:f6:dc:67:4a:f7:e8:08:78:0b:6e:8c:84:f9:2a:
eb:27:22:27:83:a2:d1:89:96:3d:81:e1:02:ef:3f:10:48:3f:
a7:fd:70:eb:4e:78:e4:50:84:ba:80:b9:50:83:35:81:5d:db:
19:87:97:75:b0:51:34:77:e2:9e:6b:aa:84:2b:db:10:71:43:
17:1e:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:18:29 2026 by rpki-client