
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
File: 989d0448-cf0d-3fdf-a782-65bf875466d4.roa (raw, json)
Hash identifier: FsvtcyYsoBga/vbZ63TtXeJX77mqUUB0nvdn8Vy7HeE=
Subject key identifier: 32:87:6A:D3:4F:A3:9E:2C:1B:9B:8D:0D:F2:9B:26:9C:79:52:F2:9D
Certificate issuer: /CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a
Certificate serial: 010D0C9F4328584E921FAB436EA6ABBB25B3C980
Authority key identifier: 10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
Signing time: Tue 21 Jul 2026 09:00:12 +0000
ROA not before: Tue 21 Jul 2026 09:00:12 +0000
ROA not after: Mon 19 Oct 2026 09:00:12 +0000
asID: 395497
IP address blocks: 23.166.152.0/24 maxlen: 32
2602:f9d6::/40 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:92:1f:ab:43:6e:a6:ab:bb:25:b3:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a
Validity
Not Before: Jul 21 09:00:12 2026 GMT
Not After : Oct 19 09:00:12 2026 GMT
Subject: CN=68c5bb8f-f1d5-4354-8838-18355e9da655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:58:38:cd:b9:d8:e5:c1:c0:f9:ac:ce:ec:
4f:21:cc:a8:e8:f3:35:f4:2f:8f:b6:97:4b:0f:e8:
7b:54:fa:fe:cc:b5:ef:c9:f9:0b:db:fb:e7:01:bf:
61:70:2c:d2:72:5e:3c:80:0b:29:ee:80:30:b4:1c:
13:c4:01:1e:12:a4:b3:fa:a8:f0:63:27:de:84:a4:
03:d6:d0:2b:4d:41:95:91:76:85:2e:9a:14:56:b1:
4a:3b:06:b2:4c:8f:c2:31:36:50:d1:8e:c7:7a:6d:
35:d4:ae:2a:2c:71:51:cc:0b:01:0d:69:a6:77:9d:
9e:39:55:73:50:b1:e6:2a:43:4b:db:d8:36:6d:db:
e0:58:eb:5c:53:f6:af:02:ab:10:d5:4c:74:ff:6e:
9b:12:63:3e:a5:27:12:8e:bd:1e:d0:51:db:94:24:
10:a4:4d:9b:48:f9:82:17:67:bc:73:ec:57:50:3d:
20:b3:bb:23:74:a0:a5:cb:2f:25:f3:c9:88:68:27:
a6:2f:0f:1c:92:ed:62:13:0c:ef:53:bb:4d:92:b3:
c1:5e:22:fd:d6:ab:a5:44:a4:8b:7d:d2:79:42:f7:
a1:bb:fd:99:bc:e9:1f:77:4d:d4:5a:5a:4b:03:3f:
d1:18:47:73:13:a7:bd:0a:14:a6:16:d0:30:6d:6b:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:6A:D3:4F:A3:9E:2C:1B:9B:8D:0D:F2:9B:26:9C:79:52:F2:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl
X509v3 Authority Key Identifier:
keyid:10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.152.0/24
IPv6:
2602:f9d6::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:64:93:a1:09:d8:02:77:ee:fb:c2:c6:39:be:a9:df:19:86:
a9:b8:33:20:11:e8:b9:11:f9:a7:90:a5:86:7f:4f:6b:74:20:
74:88:a5:42:96:e1:33:29:d6:66:8d:89:b7:ae:e4:79:62:60:
91:37:80:c5:d0:da:be:b0:7e:ac:ab:e0:16:c6:31:41:67:36:
c3:72:e5:97:23:fd:9e:29:c7:e6:dc:4d:a5:b5:a1:db:fb:a1:
31:99:c6:77:ed:67:1c:9b:f5:a7:f4:61:93:a4:16:12:00:21:
92:02:8b:11:94:1e:27:5e:83:b7:36:46:4e:28:d3:be:1b:f0:
db:43:98:dd:40:73:64:7d:00:4a:d6:ae:dc:f2:1b:03:a4:b9:
24:e7:58:bc:ce:5e:75:b6:dd:6b:2f:f0:45:bf:a5:04:19:aa:
06:f5:04:76:83:48:a1:18:e0:ae:c3:d4:0e:1c:80:e3:be:9b:
74:77:e4:49:4d:86:aa:98:31:44:b7:f2:0c:8f:88:e0:8d:fc:
41:a8:cb:e6:bb:65:52:a9:39:92:ca:ae:46:9a:ab:59:53:e0:
63:48:65:fa:9e:95:ca:26:ca:a3:71:56:ca:61:74:c6:c4:bb:
64:6e:1a:99:7f:04:0a:9e:1b:cf:9f:59:42:b8:6d:4a:1f:4e:
8f:ab:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:55 2026 by rpki-client