
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/bf69307c-2d42-3132-a270-29f16aa3b969.roa
File: bf69307c-2d42-3132-a270-29f16aa3b969.roa (raw, json)
Hash identifier: rbKNqqQ7TaQgbboG7R7wxpoeysbi97/EPrcIGCcUn2Q=
Subject key identifier: FA:8D:73:D0:5B:D6:EA:CB:9D:FF:4F:AE:75:75:5D:61:F7:2D:99:6A
Certificate issuer: /CN=0149474f-8f94-4fcf-8fda-bf84c685a777
Certificate serial: 010D0C9F4328584F549D5ECA95435CAC9F01F0C0
Authority key identifier: D0:9B:C2:36:37:2C:A7:BA:40:8C:2E:30:A2:A5:B1:B3:81:B7:2E:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/bf69307c-2d42-3132-a270-29f16aa3b969.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 40662
IP address blocks: 23.136.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/0149474f-8f94-4fcf-8fda-bf84c685a777.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/0149474f-8f94-4fcf-8fda-bf84c685a777.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:5e:ca:95:43:5c:ac:9f:01:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0149474f-8f94-4fcf-8fda-bf84c685a777
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=a4b71ff5-866a-41cb-9b6a-7e5d9833ed14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:b7:4c:2f:58:f0:f3:a1:87:4d:f8:d6:4a:
bd:cd:d7:5e:c0:00:40:1d:82:90:c5:4a:f2:6e:51:
2b:f5:ce:e4:f7:56:6d:b5:75:5f:09:29:69:2f:25:
b0:0b:6c:1f:8b:4d:b6:8a:db:68:f8:b2:96:6b:2b:
40:d6:fc:d1:20:a3:b3:37:24:b3:b1:d4:b9:f6:21:
7d:a2:51:3a:a6:8d:62:1a:9b:70:c1:05:f0:3b:5c:
61:69:8e:22:f1:f4:05:69:69:2a:85:de:14:86:1b:
af:48:f3:5b:47:ef:14:31:a5:d4:66:bf:76:bd:dd:
99:8c:34:06:68:e3:0c:77:3f:b0:c3:3f:1e:79:4f:
20:7d:69:92:c8:39:a3:30:ca:7f:93:55:98:ec:69:
fb:99:09:ea:dc:29:14:32:f3:46:29:ce:4f:3b:16:
5b:e1:5b:b2:bd:87:25:3e:d0:25:ff:bf:5e:fd:53:
ec:df:ff:03:49:cf:0a:af:b3:3e:6e:e8:e9:1f:80:
b3:43:4a:d4:02:96:ed:75:e9:27:7a:99:74:9e:5e:
af:94:e9:62:0b:2d:85:84:fc:df:16:fd:3d:07:14:
92:a1:d6:4c:a6:05:59:a6:4b:3e:0b:d3:de:d3:68:
c2:d3:ac:b8:75:99:83:47:40:78:d1:3e:a6:54:1b:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:73:D0:5B:D6:EA:CB:9D:FF:4F:AE:75:75:5D:61:F7:2D:99:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/bf69307c-2d42-3132-a270-29f16aa3b969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777/0149474f-8f94-4fcf-8fda-bf84c685a777.crl
X509v3 Authority Key Identifier:
keyid:D0:9B:C2:36:37:2C:A7:BA:40:8C:2E:30:A2:A5:B1:B3:81:B7:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0149474f-8f94-4fcf-8fda-bf84c685a777.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:0d:21:a7:76:97:bb:4d:28:87:6c:6f:fd:7d:e7:1e:bb:de:
70:a3:76:a8:a5:3d:3d:d6:ac:56:cd:cf:b1:e2:93:5d:b8:c5:
e0:64:c2:8a:ba:b0:be:fc:c5:02:57:e9:c1:18:33:5d:7b:52:
d2:12:d4:29:39:88:c8:d6:b1:30:42:bc:15:dc:0b:61:63:c4:
58:72:9d:99:fa:e0:71:9e:3b:40:df:2f:7b:ff:42:80:71:f6:
0d:63:65:e3:2e:42:c5:37:e8:4f:ce:5d:2f:0c:a8:f8:b1:42:
05:72:40:d5:38:03:c1:63:d6:33:28:7d:38:a3:71:9a:25:ca:
25:77:3b:7c:94:95:db:49:0b:75:05:99:bb:b6:57:d0:7d:a2:
28:a9:2a:4e:08:94:cd:2d:0d:e3:d6:97:a3:33:d5:ce:f6:b4:
93:bf:6c:a7:ed:67:b5:10:ab:ab:a8:a3:34:5d:93:2c:dd:69:
8a:24:a5:b8:0b:72:59:2c:0e:f8:39:2d:24:87:35:38:f3:37:
d8:08:78:16:0e:96:1b:55:3a:e2:f0:86:1c:38:1c:3f:45:fb:
84:04:3b:d5:12:24:24:50:04:95:6f:75:59:5e:b6:33:c5:b5:
06:30:19:8b:38:21:7c:8b:a0:8f:4d:0e:50:3f:aa:58:c0:19:
b0:17:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:56:08 2026 by rpki-client