
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa
File: f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa (raw, json)
Hash identifier: 87WhziSmrF3zyPqAVsnz2Px99wuMvdOZrrmm03YmaIw=
Subject key identifier: FE:A4:C8:27:08:A3:58:D9:9E:32:02:81:E6:1F:AD:10:8F:CD:70:CC
Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial: 010D0C9F4328584DDE85CB2B7BE6279834993480
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 40916
IP address blocks: 163.123.152.0/24 maxlen: 24
163.123.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:85:cb:2b:7b:e6:27:98:34:99:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=4b4a0dc6-abbe-4af6-89f4-33594488034e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:8d:d7:0a:4f:2b:ce:68:54:0c:64:e9:5c:
ab:ef:75:1d:a5:de:27:ea:a7:2b:cd:44:a2:5d:5e:
21:9e:c2:8b:62:1b:13:2e:91:2f:08:24:19:9b:3b:
67:b6:2d:1d:0e:f6:9c:51:b0:9b:8b:e5:f3:97:69:
a7:37:9b:70:42:d9:e5:5b:85:21:99:e2:65:3b:78:
b3:77:c8:18:08:95:6d:31:77:16:2d:b3:b9:d5:6f:
24:74:a0:8d:d9:c8:80:a7:c8:e8:81:1c:28:2e:1f:
21:34:05:10:d2:35:62:a3:5b:d0:96:6f:f1:b8:18:
55:e1:d7:55:98:93:55:c2:1d:0f:58:75:41:fd:7f:
36:ad:7c:ba:5f:3f:d8:f3:df:a6:41:a1:e6:00:b1:
89:62:68:81:8a:de:30:2b:40:c3:cd:e0:c6:29:81:
d0:82:c9:c4:40:d1:91:61:52:72:19:8d:77:a6:ef:
ac:6b:56:ec:0a:eb:37:d2:54:21:78:ac:7c:18:a9:
5b:6a:76:8d:6c:bb:6c:34:fa:b0:8c:65:c0:30:fb:
fb:ce:b1:eb:57:d3:6e:2d:bf:73:8b:cc:8e:64:1e:
36:3b:89:bd:2a:38:04:66:ed:73:89:37:2d:6d:a8:
15:2a:d6:44:c4:b1:1a:7e:60:fd:e1:e9:2a:15:e2:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A4:C8:27:08:A3:58:D9:9E:32:02:81:E6:1F:AD:10:8F:CD:70:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
X509v3 Authority Key Identifier:
keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.152.0/24
163.123.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:8d:5d:e3:ef:f5:62:3a:d3:84:7b:1b:50:6a:a6:92:c3:fb:
4d:27:53:a6:cf:c8:70:e1:ee:35:ed:52:4c:21:d2:25:c2:ba:
a1:43:2d:78:58:d6:9d:a1:b7:b1:ba:db:5c:75:f2:6e:62:ac:
24:87:e5:3e:06:e8:73:11:37:e4:61:7f:33:ca:1d:91:8b:27:
dd:50:a4:97:60:56:61:c9:5f:a9:c5:9d:a0:d4:50:75:cb:a0:
3f:8f:77:41:cf:6d:a1:c5:65:a5:4d:7e:44:9a:bf:64:f2:26:
7e:23:f5:fd:e6:7c:a9:50:b2:a8:99:c0:b6:28:97:2f:47:ad:
6e:65:ba:00:38:e5:fb:57:26:2f:7a:a1:92:e4:aa:d3:64:b5:
d5:6a:a8:8c:18:64:36:52:c8:cc:94:c1:2b:f7:52:f0:c3:56:
77:ea:32:14:0b:91:c1:33:b2:4c:8f:9a:b2:59:ad:56:1b:cd:
f7:dc:79:ee:a3:dc:5f:0a:7a:5d:78:43:94:23:e1:30:36:ae:
f1:e4:41:d5:e3:c5:a9:7e:52:cc:f8:db:53:03:24:50:68:2c:
72:55:14:89:22:2f:1f:80:d3:c5:ac:9e:a0:3b:80:90:44:18:
7a:96:8d:d3:e4:76:6d:ec:34:38:3c:75:90:a6:dd:d8:45:d8:
01:7c:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:25 2026 by rpki-client