
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa
File: a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa (raw, json)
Hash identifier: 5OTRzl303VcDLf/aKkKAb0QR05BSZ7nyz5xniCtLdTE=
Subject key identifier: 4F:16:E5:51:02:37:31:16:09:8D:AC:FF:98:9F:1C:25:61:54:D4:DE
Certificate issuer: /CN=63991382-256c-41c7-9e97-783d23a22bf2
Certificate serial: 010D0C9F4328584D8AC5561876E40B7D32DBBC40
Authority key identifier: 77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 398898
IP address blocks: 23.140.120.0/24 maxlen: 24
2620:ae:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:56:18:76:e4:0b:7d:32:db:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63991382-256c-41c7-9e97-783d23a22bf2
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=ae343239-7d1f-4986-a3df-7a3017bf7a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:b3:5c:dd:1d:71:06:52:87:e5:04:7d:70:
d3:64:b3:fd:8f:83:79:b9:b1:78:cb:55:dc:23:64:
75:5e:d2:90:07:29:42:fa:e1:74:09:8b:1f:12:07:
47:7b:39:0e:c1:51:c9:d5:80:f2:08:b9:0f:ca:8e:
03:ef:1b:22:fc:17:d3:38:66:fd:54:5b:13:11:e7:
f0:3f:6b:7b:7d:4f:df:ef:14:6a:b7:28:18:67:6b:
67:a3:1a:6d:a8:34:bc:a3:d2:ee:b0:fd:97:28:3a:
ae:63:ed:f8:2e:f4:e9:27:72:66:32:9a:92:05:04:
66:06:62:de:b7:cd:ee:b4:d5:a5:fd:dc:5b:18:e9:
0f:b1:7b:6c:7a:5e:a0:fc:de:27:5a:64:92:7d:86:
ff:ee:ec:61:fb:ba:6f:5c:ab:34:35:0b:10:a0:ba:
71:bc:77:1a:66:6b:61:d6:e3:e5:74:77:c6:9e:08:
17:d0:a7:bd:48:c7:75:40:7d:8b:de:23:1a:64:66:
f6:a8:35:a2:a6:20:8e:0e:49:d3:ec:67:03:db:e1:
80:58:d4:14:4c:71:9b:33:2e:9a:3e:16:ec:b9:55:
88:2c:c1:c6:f4:40:01:91:aa:0f:69:54:72:e3:69:
bf:f5:98:fe:15:1b:dc:9d:ab:27:57:4e:97:1a:4f:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:16:E5:51:02:37:31:16:09:8D:AC:FF:98:9F:1C:25:61:54:D4:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl
X509v3 Authority Key Identifier:
keyid:77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.120.0/24
IPv6:
2620:ae:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:4d:97:c9:09:40:76:c4:13:45:89:5b:e3:2f:62:8e:0d:92:
c1:00:d3:73:1a:69:94:ea:b4:61:b7:9b:cd:da:47:dc:5b:7f:
90:09:e9:7f:b7:b6:66:d7:dc:b0:6f:56:b0:b8:d6:09:ec:a8:
5d:be:e6:5b:74:42:d1:1e:b3:22:d2:c4:12:41:75:18:dc:6d:
2a:51:93:ea:9d:6c:14:4c:e6:5b:21:90:31:12:ee:9e:9f:e4:
dc:1a:79:2c:6d:b4:61:78:2b:d1:6c:a3:54:26:dc:4b:2b:5a:
52:ee:64:c7:f3:32:db:51:f0:97:50:d5:48:21:b7:78:1c:41:
b3:cd:58:dd:23:9e:51:f5:91:6b:bc:10:7e:e5:e2:45:05:79:
e9:13:f2:0f:22:d3:c7:cf:bc:ef:27:34:04:a7:66:b9:df:c2:
fd:b4:2e:dd:40:82:ed:d1:e6:73:aa:a5:7d:32:cf:c4:14:43:
b1:de:eb:11:e4:b6:b0:f0:7e:55:33:b0:e1:6a:d9:32:cf:f8:
06:32:46:b7:e2:4e:d9:7d:58:54:e4:18:d7:cb:ed:4e:2f:b1:
25:d3:27:3a:45:c2:8b:e6:07:96:e8:9e:df:b6:98:9a:db:53:
91:c9:59:eb:45:6f:2f:62:f4:7c:51:12:5f:49:ce:00:32:33:
0c:7e:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:51 2026 by rpki-client