
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
File: badd067d-d8c6-3638-b8fc-51032051faf9.roa (raw, json)
Hash identifier: DEhGP2mkQc214lH94fNs0EQX3Ujo/bKm6Ac173PD7oU=
Subject key identifier: 5C:0D:34:AF:F2:36:3E:98:AB:D0:E4:13:86:8C:32:D5:BD:FE:83:97
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584CA5F70FECC38B0F2C2A694000
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 63199
IP address blocks: 148.153.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:0f:ec:c3:8b:0f:2c:2a:69:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=e23511bd-e607-48f1-b126-809d10c8cfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:6f:51:23:a4:43:03:d7:f3:6a:7f:4b:24:
36:95:b3:4b:a3:0f:06:f1:b8:7e:b1:85:d8:9a:f1:
c5:82:a9:5c:bc:0b:26:51:9b:70:c4:89:05:9d:02:
41:3a:4a:f7:25:55:48:95:f2:3d:52:aa:24:a8:0c:
6a:b0:74:93:6f:59:cd:6d:46:77:13:23:0c:b3:dd:
e3:bf:6c:bc:e1:7f:25:31:a9:92:b0:bd:9f:4f:cb:
c8:3d:a8:be:9e:f2:3b:b7:c9:e6:1c:2b:b0:f1:99:
4e:8f:7a:ff:e2:8b:31:bb:c9:0c:f3:80:62:1d:d6:
5f:18:90:39:9d:8c:14:ee:f5:03:33:7b:2b:da:8d:
22:3c:8d:71:1a:80:d7:19:2b:18:30:62:c1:ea:14:
42:17:5a:1d:a9:59:0f:95:1f:0a:e5:a0:60:ac:44:
84:a0:8a:ee:12:db:29:4c:5d:41:86:a5:c6:7e:1f:
2f:6e:36:ac:1f:49:fb:f0:a6:e2:4e:d0:b9:bf:9a:
d7:1c:3c:d9:c4:32:d3:63:61:61:1e:58:6d:3c:33:
49:4c:23:82:34:e6:2b:ef:59:bd:2c:3b:f9:c1:b9:
8c:1c:d2:ad:93:f2:f7:81:01:75:52:56:f9:33:90:
5b:ab:ee:23:35:cb:62:8c:c3:fe:48:8e:39:f2:26:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:34:AF:F2:36:3E:98:AB:D0:E4:13:86:8C:32:D5:BD:FE:83:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:0b:04:10:76:96:e2:bd:dd:79:17:1a:1f:35:c0:fc:13:21:
bc:81:9f:3c:48:f1:0d:44:e9:61:5c:e2:90:dd:15:61:f4:ce:
55:98:ff:70:d1:92:d6:d9:7f:8f:1d:6e:7c:a0:36:67:80:ed:
a4:ae:31:47:3c:0c:23:89:c7:85:60:fa:4b:ea:33:5b:9a:e4:
c4:bc:32:8e:e4:d3:ea:60:4b:0d:d5:47:6c:c7:43:18:71:0c:
32:8b:3b:b2:d0:21:c2:da:40:c5:dc:c0:8e:cd:b0:de:43:ac:
2d:1f:7c:9c:a0:55:d3:23:3b:9a:e5:97:60:57:82:09:d7:a2:
1c:1c:7b:63:f6:7f:a3:f5:ff:e1:5e:f9:5c:7a:3b:0c:2b:bd:
77:21:df:3d:77:2d:4e:dc:d1:ed:99:38:f4:3b:89:0e:4d:24:
75:f4:8c:d5:95:40:f4:b7:e4:66:f0:a0:99:e3:09:88:ae:5b:
09:51:ef:48:21:e6:05:01:89:6d:36:33:b5:86:b5:2f:1a:f5:
57:f2:db:5d:e2:5b:97:31:10:68:1a:b9:41:17:63:08:0a:cb:
64:32:16:70:60:4a:0c:f5:6d:38:91:f2:50:a7:9e:d0:68:97:
2e:a3:d9:96:cd:fe:6f:8c:dd:87:b7:6e:fb:11:ef:79:20:03:
56:c3:a7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:09 2026 by rpki-client