
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f0e0b1b6-a410-3ee4-b982-1e3f8fccd866.roa
File: f0e0b1b6-a410-3ee4-b982-1e3f8fccd866.roa (raw, json)
Hash identifier: H2Bq8RCBcxuXVmgBcJvCnpWIJunpTRew20fiQEcZ8eo=
Subject key identifier: C9:BF:3D:B4:77:E5:61:48:FB:BC:8A:EE:CB:91:E9:EB:F4:2B:68:F2
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584EE4F1EA6A9E4BC1B985952980
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f0e0b1b6-a410-3ee4-b982-1e3f8fccd866.roa
Signing time: Thu 20 Aug 2026 01:00:12 +0000
ROA not before: Thu 20 Aug 2026 01:00:12 +0000
ROA not after: Wed 18 Nov 2026 02:00:12 +0000
asID: 23473
IP address blocks: 153.33.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:f1:ea:6a:9e:4b:c1:b9:85:95:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Aug 20 01:00:12 2026 GMT
Not After : Nov 18 02:00:12 2026 GMT
Subject: CN=fae0c089-891f-4739-995b-0fe8cf2a8c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:92:70:41:fb:ee:ae:d6:a9:ec:8c:2a:98:
8c:4c:68:92:4b:b5:56:38:47:cc:15:a6:6d:ae:65:
63:e5:42:bb:7e:b7:af:ad:45:52:7b:7e:95:d3:84:
02:2c:b2:c1:c8:ef:40:9d:55:80:3b:21:63:e2:9e:
00:ce:62:05:cc:83:70:76:a3:8e:5a:03:33:72:f2:
38:79:f0:35:e1:a5:c4:c7:53:d7:83:57:13:9d:80:
71:ae:f5:1e:a1:4e:94:76:62:16:99:14:a7:d5:6f:
ea:5a:41:59:7a:78:9d:e1:f1:69:7d:79:95:e1:50:
d7:12:96:52:de:45:e5:54:8c:b4:db:ae:24:df:68:
16:d3:45:92:a9:81:4c:cf:88:87:d2:bd:48:da:78:
16:e0:5d:f3:9e:31:e0:9b:75:84:49:ec:05:9c:1f:
3d:1f:78:78:28:f7:c5:c8:61:5c:19:05:0f:7d:d6:
d8:d5:59:02:9a:e4:1a:9f:8a:8d:7a:50:8d:eb:c8:
d2:f9:c0:98:c4:5e:5e:0c:18:6a:1a:8b:06:5a:b2:
b7:c1:82:c6:35:0d:da:e9:b2:c0:9e:62:6e:75:7c:
6f:12:6a:bd:57:d8:1c:4a:64:91:fd:df:7b:1c:82:
09:23:9c:5e:1e:37:f7:a5:cc:42:2e:88:6e:83:12:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BF:3D:B4:77:E5:61:48:FB:BC:8A:EE:CB:91:E9:EB:F4:2B:68:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f0e0b1b6-a410-3ee4-b982-1e3f8fccd866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:00:0c:ad:10:0d:78:b8:bb:0c:74:d1:2a:26:df:b4:de:2d:
60:89:d7:0f:28:a8:67:30:59:0d:e0:77:19:eb:c8:54:7c:89:
c2:f8:d1:e8:c0:8a:37:64:e7:22:e6:7b:b4:62:76:01:07:9f:
35:f7:7d:58:76:63:a8:30:8a:5e:3e:ea:c0:51:86:b2:7b:8a:
f2:bb:8c:33:e7:99:2b:f2:89:ff:d7:7d:8d:99:38:54:97:d7:
be:a8:c1:d2:0f:25:cf:41:09:f1:5b:84:b4:5a:73:aa:ea:12:
a2:4b:ed:03:ff:c0:66:34:12:3a:f2:1e:79:90:2b:e4:da:5e:
3f:35:e3:fc:07:b3:0c:be:a1:25:d3:8b:68:f2:b1:5b:e3:7f:
c5:f1:dc:94:d7:8c:ce:61:67:11:8a:9f:1b:7b:82:06:7c:1f:
7d:b9:5c:57:f5:91:2e:48:5e:39:2c:88:0b:d6:28:ee:76:85:
11:11:e3:ae:c6:0a:62:b3:57:1d:c7:40:be:40:31:94:97:76:
d9:71:e7:92:98:57:21:8c:ea:00:b5:19:5d:36:3a:ec:7a:d4:
85:33:9d:d6:ff:2e:7d:15:72:a7:64:41:6d:29:5a:86:05:18:
86:7c:06:a2:d3:df:47:cb:79:84:6b:80:aa:f9:af:c4:1d:93:
65:36:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:40:20 2026 by rpki-client