
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/d8691a01-818a-3ee6-8c72-fa036d95527b.roa
File: d8691a01-818a-3ee6-8c72-fa036d95527b.roa (raw, json)
Hash identifier: jUibeqg5bIJMVwfxLYB5zYNJ0lU40ajVMgkaKW7BIKs=
Subject key identifier: A3:2A:60:E4:CE:AD:F8:BB:ED:43:E3:57:CB:8C:F1:B5:73:08:D1:C2
Certificate issuer: /CN=bfb32325-5962-452d-81bb-2eb68992a5df
Certificate serial: 010D0C9F4328584F498832B26C01787059DB1140
Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/d8691a01-818a-3ee6-8c72-fa036d95527b.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 398076
IP address blocks: 23.150.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:32:b2:6c:01:78:70:59:db:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=87a0949c-bf08-4270-b633-8eae55de7d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:bd:e3:f4:08:d7:7d:77:f3:ed:fc:03:3f:
aa:b2:87:62:2e:71:3d:14:e8:68:5c:ce:82:a4:ce:
06:ab:23:74:51:df:5b:d3:4c:de:d7:8f:44:6d:3a:
ae:7c:34:6f:93:07:6b:e2:e1:69:e4:93:b2:6b:ce:
58:9f:95:4f:47:8e:69:9c:b0:1f:60:70:8e:30:cc:
33:a5:3a:d6:61:6a:2a:52:b2:ab:84:a9:15:52:c5:
f9:dd:1a:f6:dc:5c:d9:e4:76:82:b0:96:20:ae:df:
72:4f:6b:ff:00:17:32:93:34:d8:b5:67:1d:6c:48:
48:99:d7:1f:52:7d:89:f3:e2:1e:48:e7:43:54:55:
9e:46:46:2e:58:50:52:5b:ee:fe:72:1e:87:3d:45:
42:03:f2:11:f9:66:46:c6:34:5e:45:ef:0e:c0:78:
2b:b9:ba:8a:05:14:a4:98:17:7f:04:f5:7a:44:f1:
89:db:2e:66:da:1f:57:21:e9:76:e8:ee:91:c5:4b:
ad:a8:a4:73:35:9a:81:71:d6:b9:3e:51:eb:b6:80:
e6:ff:16:fa:a2:de:4e:49:f9:c3:b2:5c:9d:09:b3:
46:1b:60:2d:34:c5:a3:b4:ad:d3:2f:4c:30:fd:0a:
b0:35:7a:40:30:37:ec:0a:35:1c:c8:2a:ec:8f:7a:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2A:60:E4:CE:AD:F8:BB:ED:43:E3:57:CB:8C:F1:B5:73:08:D1:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/d8691a01-818a-3ee6-8c72-fa036d95527b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
X509v3 Authority Key Identifier:
keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:53:b5:57:c9:c4:91:91:34:04:f2:3a:cf:81:14:a8:b2:5e:
31:45:a0:03:05:55:5b:e2:2e:e1:48:1d:69:cf:a8:70:8a:0c:
fa:72:9e:b0:09:aa:0b:e9:d0:6a:8c:bd:a7:0b:85:ed:e7:df:
17:09:47:2a:6d:b7:23:4e:ac:3b:23:58:b0:dc:b1:be:dd:33:
59:be:8c:1f:36:dd:aa:88:46:ff:6f:13:1c:51:dc:ae:9a:98:
85:92:99:54:2d:97:27:ef:df:05:ac:71:80:86:7d:c1:c6:84:
27:a8:ba:45:88:10:d9:f8:ca:38:80:2c:ad:7c:57:85:a6:20:
8b:02:3f:65:49:74:72:35:cb:cb:08:df:c0:7f:4c:81:23:22:
e6:6c:31:77:7a:17:c1:06:18:ea:6e:b9:b0:aa:8f:3a:5e:19:
d7:8a:08:79:ed:ad:df:67:19:72:de:93:11:90:79:d9:5a:f5:
26:ff:61:20:15:a2:5c:73:82:33:66:d1:0b:06:34:fc:39:f9:
28:bc:73:1e:9c:ed:ec:2c:33:9f:0c:c8:f4:53:8f:84:b1:2d:
fb:78:7d:57:99:bf:1f:6e:d0:ae:26:1a:0d:66:2a:53:db:85:
8b:9a:a3:5e:99:90:54:d3:9a:05:34:2d:2e:f1:51:e4:08:b4:
45:d8:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:12:11 2026 by rpki-client