
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa
File: bda139a8-8afc-3912-9a45-3703bbfa8a28.roa (raw, json)
Hash identifier: XLVZ/uWaTEbkJru94V0Qjyg8mWu12sA9nowGu/GrgTU=
Subject key identifier: AF:53:05:82:7C:F2:3B:83:37:9B:42:88:60:F8:67:4C:A1:EA:4F:E2
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F4328584EA7965C5CCB2FC49A38192FC0
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7018
IP address blocks: 23.143.104.0/24 maxlen: 24
2607:340::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:5c:5c:cb:2f:c4:9a:38:19:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f9ef0cf1-ed61-41c7-a1b2-6af2ccce4a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:5a:37:aa:dd:59:8b:7c:08:f4:37:99:c3:
63:ff:ae:6d:91:db:0d:55:0c:28:83:6c:7d:a7:5a:
b9:54:bb:48:df:9a:b6:25:79:f3:46:8e:f8:54:1a:
19:0c:b1:3a:ee:ba:2c:ba:9d:8a:09:7a:29:fb:79:
3a:82:bb:35:b9:29:44:57:8b:fd:73:6c:7b:77:5f:
47:86:36:fe:66:de:49:0c:af:51:58:1b:dc:b2:85:
70:8e:2a:7e:f9:b5:b9:0d:b5:7d:e9:77:54:ff:87:
c4:7c:aa:32:35:8c:cf:17:c0:15:78:9b:f4:81:2a:
5d:f2:ef:ae:47:9c:4a:90:10:a6:db:a8:c2:e6:3d:
44:e7:7e:53:b3:09:ad:f4:83:ae:0d:9c:90:67:10:
85:76:4f:37:ef:f1:d7:f5:48:0e:4f:2d:70:fa:70:
a0:3b:2d:ca:98:52:0d:16:31:13:87:4c:ba:f4:65:
59:4c:e8:ee:fb:f7:95:fc:cc:07:f3:2a:66:3d:f4:
97:c1:ed:94:54:2f:72:13:60:08:29:39:1c:40:1c:
f3:f6:07:01:42:c2:91:29:2d:8b:dc:cd:f3:a4:3a:
d1:db:d6:f1:96:0f:aa:6d:34:4b:4e:a9:7c:4c:48:
89:4a:de:47:19:49:42:4f:83:69:9e:d6:1b:e5:7a:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:05:82:7C:F2:3B:83:37:9B:42:88:60:F8:67:4C:A1:EA:4F:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.104.0/24
IPv6:
2607:340::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:37:7a:84:7f:d1:14:45:fa:4b:75:1d:21:d1:5d:58:f0:93:
49:bf:f1:20:6e:7a:29:bc:9c:a9:bc:7d:7f:24:9d:32:b8:80:
fe:e9:13:03:44:45:5e:35:3b:82:55:ed:d1:5c:62:ad:1a:5f:
02:18:d1:58:b8:32:78:b0:b0:3e:71:27:75:1d:a9:1c:1e:cf:
61:15:98:35:cd:81:dd:e1:e9:55:dd:4d:bf:56:65:49:d1:8f:
37:3f:93:fe:da:7d:21:5f:ba:73:ea:5d:75:10:28:9f:6d:ee:
0c:c5:0d:39:ae:8e:fb:92:53:cb:f5:85:c4:d3:db:02:ac:2a:
47:4b:52:8e:07:0e:9b:8e:f1:f7:b6:4b:53:ca:f6:56:47:27:
15:7c:e5:bc:3a:f0:63:ba:43:f8:42:f3:35:58:ab:df:b7:4f:
c1:66:2f:2d:56:08:8c:d4:d2:7a:06:02:0b:82:fa:b7:af:da:
75:ec:75:51:5e:45:3e:40:ab:f4:0b:70:af:1d:f1:ba:fa:0f:
f3:fe:48:41:86:fb:eb:6c:b6:67:fc:06:43:25:c3:d7:2b:18:
52:e1:5a:4b:f8:e9:32:01:92:96:2d:a4:aa:39:92:af:d5:e1:
35:75:4e:01:02:21:fd:53:5f:01:8c:0f:ef:89:b2:1b:b5:5a:
a5:5d:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:15:21 2026 by rpki-client