
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
File: 9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa (raw, json)
Hash identifier: mfLLnmjylaPlc/5FOY1OSw7SBk4pAPDCKNKEB0oKFrI=
Subject key identifier: 7C:75:7E:77:0F:83:E9:52:0B:E7:56:FE:70:ED:5B:43:1C:5A:E3:85
Certificate issuer: /CN=bff64bc2-33e0-4980-b94c-1b0369245ea4
Certificate serial: 010D0C9F4328584EA79787BC515F8B9ABDD01800
Authority key identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 215129
IP address blocks: 23.135.52.0/24 maxlen: 24
162.212.33.0/24 maxlen: 24
2602:f6d8::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:87:bc:51:5f:8b:9a:bd:d0:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff64bc2-33e0-4980-b94c-1b0369245ea4
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3e807c42-23b2-41ea-ad0f-0bde28878177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:6b:25:a3:36:07:7a:eb:ec:ce:77:f8:4f:
8b:ed:7d:58:ca:e7:42:7c:5f:c9:b7:d7:0a:6c:b8:
66:2f:96:99:e8:7a:95:d7:2d:6c:97:60:8f:f9:6a:
11:f4:a5:34:23:36:0f:14:92:82:a6:64:09:7a:44:
0b:68:02:a9:90:17:97:28:c5:a3:08:21:95:c8:d9:
6f:b2:34:41:42:23:30:0b:c9:1a:2a:98:de:78:ef:
c0:bb:4b:fb:e1:fe:e6:57:a9:48:b4:7e:e2:d9:a2:
ef:fd:9a:11:64:6b:0b:1a:9e:49:25:4a:5e:77:7c:
3f:a7:e2:2a:be:f3:71:bd:b8:cd:65:44:da:42:d3:
5b:8e:6d:21:60:38:ee:4f:37:f5:d1:c7:12:a2:07:
0a:7e:ec:c8:1a:9f:a2:67:4e:4a:c0:fa:97:f8:c9:
e4:c1:f4:19:56:6b:cb:e1:03:f4:e3:00:34:9e:e8:
41:07:87:d5:bb:2d:44:18:1c:a6:53:19:7c:01:e4:
05:b7:46:1e:d6:9a:c0:2c:ae:38:96:14:51:81:40:
ba:06:e0:47:29:09:5f:7e:03:0d:1b:fb:fa:54:2d:
3e:b7:b5:2a:ed:24:c8:84:65:3b:d8:ac:d5:f6:85:
60:39:ed:f5:4d:07:e3:0d:12:19:ca:09:8e:31:86:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:7E:77:0F:83:E9:52:0B:E7:56:FE:70:ED:5B:43:1C:5A:E3:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl
X509v3 Authority Key Identifier:
keyid:FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.52.0/24
162.212.33.0/24
IPv6:
2602:f6d8::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:9d:45:8a:11:df:07:e5:fc:8a:d7:ee:1b:26:58:27:2b:ff:
ba:bf:9e:1e:9a:39:9b:e9:7a:de:60:75:37:4b:46:6d:47:95:
bf:e5:2c:dc:79:d8:64:3f:b6:2c:4c:3a:a5:49:de:a7:a4:f6:
7c:10:55:db:30:aa:38:68:81:e3:51:ba:ef:bf:e1:60:32:1b:
36:3c:c7:63:67:aa:92:83:51:e8:58:de:1e:00:b5:07:9d:2d:
2d:ee:80:57:fa:f5:b0:8f:29:29:21:fb:7c:8c:8a:9f:67:70:
49:55:45:32:96:ad:98:e2:72:b7:d3:cd:83:32:c3:2d:37:7f:
ad:2e:2a:6d:af:ef:f8:f2:a9:8e:1e:21:dd:d4:73:b6:6e:35:
7f:b9:24:d5:e2:d6:06:28:e6:f3:50:07:ad:df:98:c8:e5:dd:
1c:58:d3:fa:48:3c:65:6b:03:6b:57:6b:67:63:8a:65:6b:f6:
d7:ba:aa:d0:69:78:b9:21:54:ad:46:76:dd:8e:2c:af:bd:bb:
b4:75:65:5b:37:a8:4c:98:74:68:9d:6a:b8:f2:7a:ef:e6:9c:
6e:89:78:e7:e4:bc:e6:0c:1e:04:b0:82:00:a7:d1:b9:71:ad:
bf:2f:16:13:7f:b0:6b:ea:2a:6a:6c:ac:4b:36:15:68:85:8d:
d9:d3:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:30:06 2026 by rpki-client