
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f8032f09-cc16-3131-82b0-247334998aa4.roa
File: f8032f09-cc16-3131-82b0-247334998aa4.roa (raw, json)
Hash identifier: EhRP+51vbzXD59gzI2jbUKhl3M46t9L0kMe1cx+pSgM=
Subject key identifier: 3C:41:A8:C8:1D:DE:3C:BA:F1:38:1E:41:63:DE:EB:74:D3:3A:A6:06
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584CF1577D5C47BD8471C37E8200
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f8032f09-cc16-3131-82b0-247334998aa4.roa
Signing time: Sun 22 Feb 2026 02:00:32 +0000
ROA not before: Sun 22 Feb 2026 02:00:32 +0000
ROA not after: Sat 23 May 2026 01:00:32 +0000
asID: 23473
IP address blocks: 153.33.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f1:57:7d:5c:47:bd:84:71:c3:7e:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Feb 22 02:00:32 2026 GMT
Not After : May 23 01:00:32 2026 GMT
Subject: CN=7218b0f3-2200-4e38-afe8-efe8bd11a225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:d1:47:90:de:4f:76:39:29:8d:60:ad:1b:
54:90:14:c2:40:11:79:1c:da:af:e3:eb:66:71:e8:
03:78:c6:53:ca:bc:86:99:e4:82:dd:f4:42:3e:2f:
b9:7c:b7:87:7d:f5:ca:a2:49:65:78:48:8c:4b:5a:
cd:0d:62:e3:4e:df:a1:c3:4a:90:de:1e:51:2b:b8:
b2:0d:1a:19:08:a4:85:ee:90:d0:89:70:80:bd:2a:
e8:2a:d7:b3:ac:b3:7e:25:fd:8e:c5:c2:ee:c6:e2:
b1:a3:b5:49:a0:bc:0e:c8:2a:4f:09:ed:12:bd:1d:
1f:2b:a3:a9:20:cd:ac:da:50:c4:5b:4c:1c:7f:e9:
61:d9:43:a1:75:5d:e2:62:92:3b:f0:6f:c2:24:27:
b6:17:b4:11:df:af:27:c2:02:a0:2b:a6:59:9a:5d:
9b:78:d5:bf:2a:b1:cd:19:6e:d0:d5:c8:da:f0:68:
2b:02:ed:4c:c3:b0:50:5f:0e:81:c5:75:db:f8:fa:
a2:63:71:5b:fd:38:3d:e0:e0:fe:59:72:8a:20:32:
67:b7:52:f2:2d:c8:10:39:24:8e:a5:52:db:55:10:
ea:79:83:fd:51:2f:d1:dc:19:b6:44:6f:4a:93:0a:
f0:01:33:7d:5e:85:52:b5:f3:51:a8:f1:b6:e5:fe:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:A8:C8:1D:DE:3C:BA:F1:38:1E:41:63:DE:EB:74:D3:3A:A6:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f8032f09-cc16-3131-82b0-247334998aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4e:04:3b:20:41:24:6a:f7:bb:2d:9f:e3:76:47:df:35:5c:
bf:d2:4c:cc:aa:8c:33:6b:db:a4:2b:e2:ef:f7:33:53:ed:0e:
ef:21:d2:39:22:d4:5b:45:a1:da:df:f6:01:1f:b7:2a:2c:65:
ee:22:22:58:18:b2:9c:d2:61:e8:03:13:da:32:95:f1:60:b5:
72:54:dc:91:f1:f2:5e:c1:bf:e1:18:96:6f:65:d2:04:25:5c:
14:48:a1:86:7c:00:88:65:d1:8d:dc:98:d5:16:45:83:06:21:
a9:2e:90:e9:d3:c7:9c:bc:cb:41:60:71:8a:37:55:a1:02:e9:
60:7d:1e:a3:24:b5:24:91:eb:a5:3c:aa:1e:b7:87:a8:8c:5b:
ba:67:ea:7e:91:88:d4:0e:44:05:e5:40:0d:99:41:82:04:6a:
80:c3:26:d4:2e:97:70:93:4e:e3:a1:81:47:d1:44:3a:87:3d:
0f:38:9e:ef:c7:73:8f:b6:1f:3d:ca:4d:9b:10:9e:f9:5e:d8:
8e:e0:63:33:57:30:b1:89:23:57:e9:eb:c4:10:40:a5:03:44:
da:6b:d2:8f:8a:fa:2e:0f:4d:62:e4:d9:19:28:77:12:d5:7e:
6f:db:a7:e2:1e:6b:90:2c:79:a0:63:26:9c:7f:cf:de:78:43:
f0:29:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:04 2026 by rpki-client