
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
File: cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json)
Hash identifier: 0vrBuF9DjdRK7JoNwwrnfCSDe/lxVL0K8W1rsUWaq9Y=
Subject key identifier: 5B:BB:BD:46:44:23:BE:4F:7B:29:B1:0E:E6:1E:5E:2C:E2:08:20:7F
Certificate issuer: /CN=8deb6383-7043-43c4-b39c-395a97ee0114
Certificate serial: 010D0C9F4328584F43DD55329096D59DDE176B80
Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
Signing time: Wed 23 Sep 2026 01:00:12 +0000
ROA not before: Wed 23 Sep 2026 01:00:12 +0000
ROA not after: Tue 22 Dec 2026 02:00:12 +0000
asID: 13925
IP address blocks: 23.131.160.0/24 maxlen: 24
23.131.161.0/24 maxlen: 24
2620:138:5000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:43:dd:55:32:90:96:d5:9d:de:17:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114
Validity
Not Before: Sep 23 01:00:12 2026 GMT
Not After : Dec 22 02:00:12 2026 GMT
Subject: CN=76a7434c-f84e-4451-9374-430ab068024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:ff:6b:c2:3f:9a:89:8b:c7:d9:ed:7e:57:
6d:1e:3a:1d:55:fc:38:43:66:2d:a9:04:1f:d2:93:
58:b2:92:9b:2b:ec:4e:ea:2f:3b:dd:03:57:78:71:
d9:ec:65:42:9e:61:21:ef:7f:71:0a:c2:99:f0:93:
64:cd:78:ad:b6:89:75:02:f5:54:95:13:3f:56:96:
11:5f:ba:39:39:d2:3b:90:13:9f:85:85:42:3e:d8:
61:05:93:bb:5b:42:aa:07:d2:fd:0b:19:e2:28:17:
10:f8:02:ee:53:14:d4:13:30:1c:0c:66:d1:01:01:
67:f7:b1:28:08:0a:a5:d1:fc:c1:c5:f6:40:7c:2b:
b5:57:f9:97:b2:ea:eb:f1:e5:09:98:48:83:c0:d8:
53:e1:bd:1c:d5:56:c1:58:fc:a0:19:68:0f:8b:41:
b3:13:26:0b:f2:2f:08:90:cd:35:a5:4f:4e:e7:2e:
33:81:16:78:d7:e5:41:45:db:1b:d2:bc:90:c8:ff:
6b:25:49:dd:fd:76:5a:41:15:fa:27:24:00:3d:58:
eb:00:38:d5:2c:10:3b:b0:45:ae:f7:ac:1a:2a:89:
9d:b5:1d:17:5b:4f:37:da:56:8e:e7:f3:2d:da:d8:
8a:51:a1:cc:2f:a7:23:42:20:1e:07:62:f0:09:67:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:BD:46:44:23:BE:4F:7B:29:B1:0E:E6:1E:5E:2C:E2:08:20:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl
X509v3 Authority Key Identifier:
keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.160.0/23
IPv6:
2620:138:5000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:60:ab:b5:f0:59:07:71:69:c7:75:b4:7a:90:97:d3:bd:c8:
e2:25:15:1d:f5:48:5b:f6:bc:b1:0e:2b:e1:0a:2e:17:c4:23:
28:8f:fc:10:59:cb:b0:ce:b5:62:3c:c7:b8:b3:a1:66:8d:ea:
4a:96:6a:52:25:18:57:8b:d2:8f:e2:69:70:55:62:57:09:a6:
17:69:1f:3b:e2:df:0e:f2:c8:d7:d5:05:b1:24:d4:72:9b:67:
17:53:8c:0c:04:d9:20:0e:b2:1a:bd:99:94:af:48:ba:a2:d9:
08:4d:a3:40:3c:2c:95:f6:81:b9:d5:e3:f4:6d:7d:fd:57:4e:
a7:14:f5:95:f9:e0:84:6a:8f:98:bf:17:ce:42:52:77:68:7d:
41:62:de:29:cd:53:a8:15:74:85:17:0b:27:70:2f:42:bb:a6:
54:e1:03:42:42:ac:0c:9b:92:13:52:52:e4:28:37:05:ae:88:
c5:44:46:c3:f0:00:8a:39:87:03:8e:e5:1e:59:fe:f6:fa:07:
8e:3f:ce:8f:e2:8c:8a:9d:4f:8e:b5:f6:39:93:6a:a8:8a:7e:
a4:3f:82:1a:78:62:80:17:4a:4d:dd:ed:b0:ba:d8:b9:19:ad:
0b:16:0a:8b:64:8f:24:b8:d2:c8:77:13:cd:bc:1c:3c:f5:5a:
5e:d4:ab:ce
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9D3VUykJbVnd4Xa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRlYjYzODMtNzA0My00M2M0LWIzOWMtMzk1YTk3ZWUw
MTE0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NzZhNzQzNGMtZjg0ZS00NDUxLTkzNzQtNDMwYWIwNjgwMjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAL/a8I/momLx9ntfldtHjodVfw4Q2YtqQQf
0pNYspKbK+xO6i873QNXeHHZ7GVCnmEh739xCsKZ8JNkzXittol1AvVUlRM/VpYR
X7o5OdI7kBOfhYVCPthhBZO7W0KqB9L9CxniKBcQ+ALuUxTUEzAcDGbRAQFn97Eo
CAql0fzBxfZAfCu1V/mXsurr8eUJmEiDwNhT4b0c1VbBWPygGWgPi0GzEyYL8i8I
kM01pU9O5y4zgRZ41+VBRdsb0ryQyP9rJUnd/XZaQRX6JyQAPVjrADjVLBA7sEWu
96waKomdtR0XW0832laO5/Mt2tiKUaHML6cjQiAeB2LwCWcegQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFFu7vUZEI75PeymxDuYeXiziCCB/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGVi
NjM4My03MDQzLTQzYzQtYjM5Yy0zOTVhOTdlZTAxMTQvY2ZhYWU1YzgtYTMyYS0z
OTM3LThiMzgtMDkwOTM4MDAxMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRlYjYzODMtNzA0My00M2M0LWIz
OWMtMzk1YTk3ZWUwMTE0LzhkZWI2MzgzLTcwNDMtNDNjNC1iMzljLTM5NWE5N2Vl
MDExNC5jcmwwHwYDVR0jBBgwFoAU6W//RnPZ9uE0VumNjwSN0GAc6KgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZGViNjM4My03MDQzLTQzYzQtYjM5Yy0zOTVh
OTdlZTAxMTQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF4OgMA8E
AgACMAkDBwQmIAE4UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJWCrtfBZB3Fpx3W0epCX073I4iUVHfVI
W/a8sQ4r4QouF8QjKI/8EFnLsM61YjzHuLOhZo3qSpZqUiUYV4vSj+JpcFViVwmm
F2kfO+LfDvLI19UFsSTUcptnF1OMDATZIA6yGr2ZlK9IuqLZCE2jQDwslfaBudXj
9G19/VdOpxT1lfnghGqPmL8XzkJSd2h9QWLeKc1TqBV0hRcLJ3AvQrumVOEDQkKs
DJuSE1JS5Cg3Ba6IxURGw/AAijmHA47lHln+9voHjj/Oj+KMip1PjrX2OZNqqIp+
pD+CGnhigBdKTd3tsLrYuRmtCxYKi2SPJLjSyHcTzbwcPPVaXtSrzg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:57:47 2026 by rpki-client