
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa
File: 3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa (raw, json)
Hash identifier: POGG9uLVd9dmWbzAvwLxqAy8cQx1e2pKmdc/1rvd+oU=
Subject key identifier: CA:4B:53:18:2C:45:B3:56:9C:DC:9C:10:A0:BB:EA:61:F2:BB:0C:C1
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584E11B433FFBF31C0CF8853CD00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa
Signing time: Fri 05 Jun 2026 09:00:12 +0000
ROA not before: Fri 05 Jun 2026 09:00:12 +0000
ROA not after: Thu 03 Sep 2026 09:00:12 +0000
asID: 23473
IP address blocks: 153.33.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:11:b4:33:ff:bf:31:c0:cf:88:53:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jun 5 09:00:12 2026 GMT
Not After : Sep 3 09:00:12 2026 GMT
Subject: CN=35cfca4c-5ded-4bad-96bc-e1c511146909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:d8:30:5f:9d:5d:83:6a:a7:a2:e1:10:ce:
f4:d6:5a:d8:e4:10:b4:35:b9:f9:40:7e:8f:de:e2:
52:de:73:d9:85:9c:62:bf:72:50:2f:55:10:31:6c:
3f:ea:30:8b:df:34:dd:44:83:5e:08:66:72:af:d7:
ab:a6:5e:e3:af:2c:cd:87:80:7d:91:33:c5:1b:f2:
c5:b4:53:83:6e:82:bb:05:dd:82:10:3f:d4:bc:a7:
14:52:77:e7:f0:3d:72:9a:55:8f:de:98:fb:98:50:
ef:6d:b5:5e:a5:0b:33:f9:4c:4f:d6:7e:2e:4b:06:
d3:37:bf:0a:e6:f0:10:cc:a8:7a:6b:f8:c1:0c:b7:
49:6c:42:c0:3d:fd:c8:f2:96:ab:ad:c2:cf:49:44:
b8:50:39:b9:d6:1b:56:7f:11:3e:fe:48:cf:6b:e5:
ab:36:a0:5b:b4:79:f1:91:db:81:70:12:a0:3c:73:
f1:c7:35:0b:e8:96:77:1b:e1:dc:07:1b:66:4c:2d:
a1:b2:0a:41:fa:1a:d1:cd:59:b8:af:d7:a9:e9:0e:
5e:50:ec:42:fd:53:ac:e6:07:a5:14:89:e3:cf:a3:
5a:3e:f7:49:29:aa:7a:f6:bd:d6:06:1a:4d:94:49:
72:23:39:50:ed:ac:38:ae:93:45:d4:02:ab:ae:b1:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4B:53:18:2C:45:B3:56:9C:DC:9C:10:A0:BB:EA:61:F2:BB:0C:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:bd:ca:71:29:91:ab:92:cb:16:31:33:72:49:89:3d:c5:ea:
80:f7:91:58:03:06:74:c6:58:04:3d:1d:89:a3:d7:84:55:76:
a2:1d:88:9c:e7:e5:00:95:19:7b:3e:d9:6b:35:42:79:c6:84:
99:94:f6:2f:4c:28:39:f4:91:5e:77:ae:57:de:d7:28:df:4b:
08:95:9d:a9:4b:0b:56:ca:83:02:7b:f8:8a:d8:c5:37:1c:a0:
b3:7f:a3:63:1a:d3:d4:ff:41:e5:0c:28:64:e3:4d:f1:35:fa:
a0:92:32:77:31:d0:fc:71:c5:45:14:c7:cc:24:d9:2e:95:bc:
c5:c9:f4:ff:93:a0:92:dc:38:b1:3c:8b:6d:49:e4:ad:e4:da:
6c:4f:ed:e3:a8:e1:dc:8c:ee:a3:f1:fe:95:f1:ef:05:9b:cc:
a8:ac:2c:9a:ca:63:5b:14:60:0f:5e:c6:fd:99:2e:d9:62:29:
d5:a0:73:12:c6:c2:ed:3c:d7:ee:a4:06:64:1a:d6:6c:05:6d:
73:85:4c:54:96:fa:87:55:44:a5:47:0d:99:62:7b:9e:4d:d5:
66:b0:41:43:45:6d:e9:07:97:b6:84:72:56:c1:c4:9d:88:e8:
9d:22:dc:c8:82:9e:c4:87:be:64:f0:22:69:95:6a:45:00:c7:
9b:92:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:28 2026 by rpki-client