
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/f4ab133c-b3bf-3597-8855-d35a60ee97a0.roa
File: f4ab133c-b3bf-3597-8855-d35a60ee97a0.roa (raw, json)
Hash identifier: yr7z99bD0edKfphoIt+/jlCx7HlgSNFhXj+b53C1Ekg=
Subject key identifier: FB:02:D0:3C:1F:C3:E2:0E:8C:95:C6:5E:91:91:22:A5:35:44:EB:8F
Certificate issuer: /CN=b7ac77c8-e80c-42ed-a289-75dda6df961e
Certificate serial: 010D0C9F4328584FB3AAE5ED61C282A482949040
Authority key identifier: 51:FD:D4:93:5E:03:E8:2F:43:D7:08:03:F5:AF:2F:26:7C:F1:49:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/f4ab133c-b3bf-3597-8855-d35a60ee97a0.roa
Signing time: Mon 02 Nov 2026 02:00:13 +0000
ROA not before: Mon 02 Nov 2026 02:00:13 +0000
ROA not after: Sun 31 Jan 2027 02:00:13 +0000
asID: 14460
IP address blocks: 167.150.111.0/24 maxlen: 24
167.150.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/b7ac77c8-e80c-42ed-a289-75dda6df961e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/b7ac77c8-e80c-42ed-a289-75dda6df961e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:b3:aa:e5:ed:61:c2:82:a4:82:94:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac77c8-e80c-42ed-a289-75dda6df961e
Validity
Not Before: Nov 2 02:00:13 2026 GMT
Not After : Jan 31 02:00:13 2027 GMT
Subject: CN=1064ae68-cd10-4f8e-9d19-7c9f021e73bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:9a:7c:8d:81:06:19:8a:1f:a9:45:29:22:
77:d3:f7:40:88:cd:82:20:c4:61:b9:7d:5b:74:5b:
de:a6:a1:e0:4a:59:35:7a:a2:2f:47:f2:11:c4:d9:
70:a7:89:e7:8a:39:3c:cb:69:e2:a2:39:07:01:fa:
a1:eb:08:72:fb:79:a8:e2:5f:db:d8:fe:f1:ec:cf:
b4:11:ab:4e:ec:83:7a:b7:0f:13:ac:15:59:82:19:
64:77:c1:01:d8:0b:d0:28:03:32:5f:46:55:70:1f:
fa:91:6b:33:92:83:96:7b:71:65:90:01:18:d6:73:
8d:36:bf:a5:da:5f:a5:a0:b3:bc:f6:65:b1:ca:a4:
a5:38:a3:8c:8a:ee:f5:08:22:a5:af:97:0e:8a:ae:
92:d5:1e:9e:a1:2c:4e:e5:36:60:e1:e2:8e:fe:f7:
1f:61:78:53:d1:f8:aa:eb:59:8f:52:56:25:2e:c4:
e8:f8:55:b4:75:19:de:68:30:fb:27:04:96:d4:02:
6d:04:58:e5:42:de:b8:b8:3a:7f:49:6d:cb:28:db:
fc:46:30:00:5a:d3:41:bf:fb:4d:ab:4d:cf:63:38:
84:3c:9f:cc:7d:0d:da:7d:8a:e7:9e:70:c5:02:d0:
c4:db:87:e9:bc:ad:6f:80:58:79:b8:c4:e5:f0:2e:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:D0:3C:1F:C3:E2:0E:8C:95:C6:5E:91:91:22:A5:35:44:EB:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/f4ab133c-b3bf-3597-8855-d35a60ee97a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/b7ac77c8-e80c-42ed-a289-75dda6df961e.crl
X509v3 Authority Key Identifier:
keyid:51:FD:D4:93:5E:03:E8:2F:43:D7:08:03:F5:AF:2F:26:7C:F1:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e.cer
sbgp-ipAddrBlock: critical
IPv4:
167.150.111.0/24
167.150.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:94:e9:00:ea:2e:a1:25:a4:84:5e:f4:69:89:28:06:24:74:
b3:d8:08:ff:71:62:6e:b0:e7:c7:59:51:5c:81:7d:c3:c3:db:
be:a3:ba:36:db:a5:f4:af:5e:aa:91:b6:d0:89:ec:39:5c:01:
63:f6:55:43:1f:05:cd:46:34:33:12:95:97:36:8c:df:4b:62:
ee:c3:f8:c2:15:de:1c:eb:05:53:79:a6:b8:29:d9:e4:9a:e5:
9f:41:a2:1f:e2:4a:64:e3:35:80:81:de:90:51:b5:b3:3f:88:
4e:93:6f:2f:e4:65:7a:3b:59:8c:d3:d5:41:19:5c:f0:9c:00:
23:2b:58:3d:c9:e4:eb:4b:a4:9f:c9:fe:71:5b:4c:0b:92:20:
d2:5d:75:ff:2a:2a:76:75:6f:ba:dc:56:6d:89:6d:d2:7a:0c:
2f:90:cc:45:af:27:d3:e0:54:f2:39:c0:49:58:67:24:c0:14:
5a:0b:07:16:de:f6:81:c5:2e:51:e6:a0:7d:23:c5:7c:90:82:
08:6d:8c:ae:62:bc:a2:3f:05:26:ec:9a:bb:7b:ca:09:fa:60:
33:a0:d5:0b:5c:3c:39:c6:58:5b:d1:85:d3:21:8f:42:2e:2f:
dd:b5:49:7f:23:d9:68:36:48:56:b1:df:97:75:f6:63:e7:df:
30:02:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:25:33 2026 by rpki-client