
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
File: 860b20cf-76ac-3497-b0c1-607d390e67dd.roa (raw, json)
Hash identifier: KXzq1JfaCyotf0NOwz+mo0u60mnHzQIDbxQCcikyc8A=
Subject key identifier: 80:9D:96:F1:4E:B3:F5:B6:19:D1:F5:17:44:60:FB:A7:2B:91:B8:9C
Certificate issuer: /CN=3b78e0f0-5f02-4f2e-a084-899096441110
Certificate serial: 010D0C9F4328584F480D43161247A3984F5E8080
Authority key identifier: 02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
Signing time: Thu 24 Sep 2026 13:00:12 +0000
ROA not before: Thu 24 Sep 2026 13:00:12 +0000
ROA not after: Wed 23 Dec 2026 14:00:12 +0000
asID: 401778
IP address blocks: 23.140.76.0/24 maxlen: 24
2602:f615::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:48:0d:43:16:12:47:a3:98:4f:5e:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b78e0f0-5f02-4f2e-a084-899096441110
Validity
Not Before: Sep 24 13:00:12 2026 GMT
Not After : Dec 23 14:00:12 2026 GMT
Subject: CN=32c47829-c3cf-4cdd-9f7b-bd812ab87a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:97:33:4b:bd:b1:73:26:e3:07:24:d1:67:
5f:9a:91:4f:2e:1c:84:ba:0f:0d:c6:48:74:b7:12:
93:3e:ca:0e:07:26:de:18:39:a5:a9:7b:51:74:db:
73:a2:05:0d:ed:8a:f5:c8:c4:7a:45:8b:44:b6:11:
6c:a4:9d:38:f6:d7:3b:73:7b:c6:af:a0:6e:4d:5c:
41:2e:ae:e0:05:7b:bd:c6:0c:c6:f8:16:5b:ea:4d:
6b:27:7d:d9:1e:32:27:32:cd:3e:86:ce:f2:19:55:
99:b7:3a:ce:c8:1f:1e:bf:f6:f8:9f:e6:3e:cf:cc:
66:cc:58:a7:d4:38:af:53:93:6e:3e:00:fa:8b:61:
10:b7:64:1c:16:23:2c:16:97:52:a5:cf:ee:ab:fb:
9c:76:3b:c3:e1:6e:d9:85:30:96:83:9d:be:c5:69:
e9:a8:5b:00:d2:2e:bf:7f:f9:ac:9f:d6:68:a3:0a:
2d:33:59:ae:4f:e6:b9:15:ae:5b:b7:21:f9:29:26:
da:0d:61:19:54:07:58:00:ed:9e:60:d0:e8:10:3d:
cd:a8:c4:22:b9:55:fb:86:e4:80:3f:c3:4a:75:7c:
8d:55:b2:31:5e:1c:6a:9c:7f:6f:45:9a:f7:02:a5:
37:c7:4f:31:c5:46:3d:86:08:05:e0:2a:0e:b2:60:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:96:F1:4E:B3:F5:B6:19:D1:F5:17:44:60:FB:A7:2B:91:B8:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl
X509v3 Authority Key Identifier:
keyid:02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.76.0/24
IPv6:
2602:f615::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a6:92:db:79:3f:13:b4:73:b4:32:8e:eb:ff:17:ab:af:35:
66:1b:8c:43:86:98:e6:b3:41:17:c5:e7:6b:f1:0d:d1:33:51:
b6:51:8e:94:88:20:3c:d8:41:21:05:09:6f:33:d0:4a:6b:ff:
cc:fe:d1:88:54:ac:2b:0f:d5:ea:63:d4:ea:d1:f9:61:99:9b:
21:f9:43:50:b1:cc:47:43:a4:62:df:4a:f6:45:c2:47:8a:59:
7e:b6:d2:98:d9:7a:7a:d1:c5:5e:0a:9f:18:8c:38:3c:51:3b:
62:40:f0:e2:f1:25:ba:65:fa:5e:04:3d:ef:10:72:eb:1a:1a:
88:d5:71:05:f6:5b:16:a4:a1:fd:7a:6a:f8:94:aa:77:62:ac:
a2:52:5b:c7:d0:2c:41:4a:b3:8f:10:9a:bb:ef:df:6b:7e:7c:
d3:47:85:fd:1b:c1:ca:fe:81:92:28:42:0e:a3:aa:45:74:1f:
2f:9b:34:db:3f:fe:22:25:37:55:b7:a1:e2:3d:56:51:7b:0f:
74:cb:47:de:a8:8d:00:54:19:69:98:0b:5f:5f:7b:4c:87:cb:
e3:27:e5:8f:1c:a1:c8:d4:34:e9:ec:ab:28:d3:4f:3f:18:0b:
82:30:7b:bc:92:4e:17:f9:87:a1:82:ec:3d:39:84:08:c9:b8:
eb:be:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:56 2026 by rpki-client