
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
File: 9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa (raw, json)
Hash identifier: JN3aM14XLrP4oaB0wRkr3Ggm4Wcy2p3ojo2RgOTHmig=
Subject key identifier: 74:2B:83:C3:1F:09:EC:C9:F1:AC:0B:49:BF:E0:B8:73:A9:91:54:5D
Certificate issuer: /CN=bff64bc2-33e0-4980-b94c-1b0369245ea4
Certificate serial: 010D0C9F4328584D1707D4C7643E486F1BA865E0
Authority key identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 215129
IP address blocks: 23.135.52.0/24 maxlen: 24
162.212.33.0/24 maxlen: 24
2602:f6d8::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:d4:c7:64:3e:48:6f:1b:a8:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff64bc2-33e0-4980-b94c-1b0369245ea4
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=742ded99-e272-46f5-8b47-6068d138753f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:ce:aa:52:fe:0e:d1:5f:db:8f:a4:24:8e:
bf:ce:58:94:11:9a:4f:61:bc:03:28:39:15:ef:1f:
53:9a:5c:e3:18:25:97:5a:32:00:79:3b:30:fa:c8:
78:1c:bd:a8:8d:44:1f:e7:2a:3f:df:26:17:5d:89:
7e:00:7d:e2:fe:12:d2:bd:fd:bd:6a:3a:b1:a3:f4:
00:7d:0e:fa:54:e6:22:0f:71:5d:58:8c:b9:32:ac:
f5:2b:cd:4c:fc:2d:2d:c8:72:63:02:96:2f:33:02:
be:39:8e:cb:82:8d:6a:a7:be:c7:47:cc:6a:bd:13:
fd:63:b2:1b:7a:99:39:33:20:2d:20:91:cb:67:97:
06:06:51:ff:60:bc:9f:33:47:27:97:5b:8c:d1:16:
ab:c9:ad:ba:2c:ee:dd:d0:3a:cd:31:75:7c:fd:4c:
9b:74:9a:b6:f7:6e:d1:fb:c6:7f:63:4c:5f:a1:9a:
e7:16:e5:d3:1d:65:8f:a7:90:88:8e:53:50:81:82:
ec:8c:d1:f3:94:33:1e:e4:24:fe:05:e0:a6:3f:ea:
32:ca:c1:ac:f5:fc:35:fc:07:ca:74:58:28:aa:9e:
cf:3b:4e:da:be:ea:f9:a7:a5:9f:f0:81:77:d0:b5:
41:44:5f:54:31:88:35:b9:42:77:6b:35:87:45:88:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:83:C3:1F:09:EC:C9:F1:AC:0B:49:BF:E0:B8:73:A9:91:54:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl
X509v3 Authority Key Identifier:
keyid:FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.52.0/24
162.212.33.0/24
IPv6:
2602:f6d8::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:28:a3:f9:87:3e:46:ff:4b:c3:15:47:59:41:b1:01:ba:28:
41:3e:5c:b5:08:76:4d:ff:5a:53:6f:8a:e5:b8:aa:90:1f:9f:
c4:06:db:2c:93:f0:6e:df:73:e7:11:f2:b0:66:14:81:21:d2:
45:4e:a1:2a:d6:98:61:71:41:89:18:ae:67:57:31:73:ba:47:
13:08:6b:f0:03:46:3a:58:d2:c7:0b:ab:2a:f8:5b:ba:49:cf:
a4:2b:a6:f2:d7:2a:91:58:5d:2d:3b:75:fe:d0:84:4a:e3:3a:
6c:9b:7b:74:85:29:f5:b9:7e:64:d3:43:0e:08:73:60:b4:61:
c4:16:47:67:01:e9:38:c8:8e:76:5c:19:d5:68:24:e6:6d:db:
01:6a:2f:ee:a4:93:a5:7c:88:e9:c2:dc:4e:e4:ea:3f:20:35:
34:9d:d5:c0:fb:b0:db:43:cf:5c:de:19:a5:8c:fa:a3:05:fe:
a1:75:50:79:28:1e:bb:15:e4:a3:74:53:c0:f8:5e:79:30:55:
07:d8:78:73:b8:ac:1e:8e:b9:d5:96:02:a1:73:54:15:ca:09:
f6:ed:cd:ed:96:d2:06:f5:bb:93:29:a1:4d:b6:e3:8a:e8:cc:
86:6f:be:96:99:ac:11:17:b4:5e:93:ab:e2:8e:b3:7d:c7:88:
d4:19:23:9f
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0XB9THZD5IbxuoZeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmZmNjRiYzItMzNlMC00OTgwLWI5NGMtMWIwMzY5MjQ1
ZWE0MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
NzQyZGVkOTktZTI3Mi00NmY1LThiNDctNjA2OGQxMzg3NTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2HOqlL+DtFf24+kJI6/zliUEZpPYbwDKDkV
7x9TmlzjGCWXWjIAeTsw+sh4HL2ojUQf5yo/3yYXXYl+AH3i/hLSvf29ajqxo/QA
fQ76VOYiD3FdWIy5Mqz1K81M/C0tyHJjApYvMwK+OY7Lgo1qp77HR8xqvRP9Y7Ib
epk5MyAtIJHLZ5cGBlH/YLyfM0cnl1uM0Rarya26LO7d0DrNMXV8/UybdJq2927R
+8Z/Y0xfoZrnFuXTHWWPp5CIjlNQgYLsjNHzlDMe5CT+BeCmP+oyysGs9fw1/AfK
dFgoqp7PO07avur5p6Wf8IF30LVBRF9UMYg1uUJ3azWHRYhxhQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFHQrg8MfCezJ8awLSb/guHOpkVRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2
NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAzNjkyNDVlYTQvOWVmMzg2MzAtN2QwNC0z
ZWM0LWI4YjEtNzg3MGFiNzljMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmZmNjRiYzItMzNlMC00OTgwLWI5
NGMtMWIwMzY5MjQ1ZWE0L2JmZjY0YmMyLTMzZTAtNDk4MC1iOTRjLTFiMDM2OTI0
NWVhNC5jcmwwHwYDVR0jBBgwFoAU+/JLb1yHY5hObo4gfkVD6eU9DHcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAz
NjkyNDVlYTQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4c0AwQA
otQhMA4EAgACMAgDBgQmAvbYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7KKP5hz5G/0vDFUdZQbEBuihB
Ply1CHZN/1pTb4rluKqQH5/EBtssk/Bu33PnEfKwZhSBIdJFTqEq1phhcUGJGK5n
VzFzukcTCGvwA0Y6WNLHC6sq+Fu6Sc+kK6by1yqRWF0tO3X+0IRK4zpsm3t0hSn1
uX5k00MOCHNgtGHEFkdnAek4yI52XBnVaCTmbdsBai/upJOlfIjpwtxO5Oo/IDU0
ndXA+7DbQ89c3hmljPqjBf6hdVB5KB67FeSjdFPA+F55MFUH2HhzuKwejrnVlgKh
c1QVygn27c3tltIG9buTKaFNtuOK6MyGb76WmawRF7Rek6vijrN9x4jUGSOf
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:34 2026 by rpki-client