
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa
File: 0bac6c3d-c4d0-3185-9107-292db0efe582.roa (raw, json)
Hash identifier: kYNk7PkF8TouKd0B650teqqWsZiD+Dhq6yy6v5LH3xE=
Subject key identifier: AC:EC:40:C0:63:96:0B:57:C2:91:3D:EB:E5:20:82:39:60:86:C3:E2
Certificate issuer: /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial: 010D0C9F4328584DEF45E072497E597FF00AD200
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa
Signing time: Sun 24 May 2026 01:00:27 +0000
ROA not before: Sun 24 May 2026 01:00:27 +0000
ROA not after: Sat 22 Aug 2026 01:00:27 +0000
asID: 397898
IP address blocks: 67.159.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ef:45:e0:72:49:7e:59:7f:f0:0a:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Validity
Not Before: May 24 01:00:27 2026 GMT
Not After : Aug 22 01:00:27 2026 GMT
Subject: CN=f3c49a64-fb7f-4573-8146-fb57389a0410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2a:dd:22:d9:d3:a1:09:2e:b4:50:4f:b7:a5:
81:bd:75:16:d0:d1:5d:b9:00:b4:96:c9:4c:02:59:
28:c3:93:c1:c8:5c:a2:f5:19:a7:22:cf:dc:c0:8b:
db:61:11:75:12:fa:a5:76:32:ef:8d:1a:f3:e6:56:
84:19:00:ef:31:16:68:83:ef:2c:44:8a:f8:50:32:
91:81:98:00:8b:c9:f3:27:4f:de:7d:60:9c:fb:50:
75:c8:f3:5d:3c:79:fb:cc:a8:86:fb:f2:84:2d:b6:
b4:5e:90:3e:e6:9e:84:89:0b:07:b4:6b:0a:8a:b1:
46:14:3d:4f:03:7b:87:af:57:6c:50:bf:4d:42:de:
5d:d9:19:50:fd:e4:e2:69:c1:83:3e:75:7a:75:55:
77:5e:ee:86:a0:85:e3:b8:9a:ce:3a:18:fe:3e:7b:
67:c7:90:54:8b:7f:ec:54:c8:42:0f:15:bf:60:53:
61:24:b6:1c:49:91:98:9d:2b:ab:ba:ea:0f:67:96:
e6:14:a4:cb:42:12:b3:44:e6:d1:40:95:96:dc:67:
8e:f3:f4:f7:40:1e:c7:20:c2:4b:a6:6f:5a:21:2d:
d5:5e:b3:cb:91:78:c5:d2:06:7b:0f:bb:20:92:b5:
af:af:20:23:ff:6f:90:18:e1:cf:31:a8:8c:27:91:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:40:C0:63:96:0B:57:C2:91:3D:EB:E5:20:82:39:60:86:C3:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
X509v3 Authority Key Identifier:
keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:99:9b:ea:bb:bf:f9:64:cd:a0:8b:5e:68:35:9d:76:c0:28:
77:40:80:25:05:8e:db:71:66:d7:1a:cb:1c:c4:85:e4:b1:e2:
d6:80:48:a0:01:44:d7:d7:90:19:28:a1:a7:f7:fb:a7:96:72:
6d:86:1a:fd:3c:a3:e2:f8:e4:05:f2:17:11:7e:d4:fa:07:6a:
84:3e:b2:0b:18:86:6e:4c:04:ad:12:be:88:93:d7:ef:eb:73:
9c:d0:68:9c:18:22:5a:03:aa:4a:79:48:56:81:bc:e0:5a:ca:
c9:27:59:4e:58:20:fa:e2:04:09:ab:e9:c9:25:c4:fe:85:b0:
7a:02:c7:0f:d1:01:25:2e:bd:2c:4a:06:c7:9b:4a:99:0d:0a:
10:68:ca:15:22:26:d2:bc:21:cf:92:7c:1a:11:5e:55:dd:45:
ac:1f:c5:4a:94:b3:0c:bb:24:5c:c7:64:a2:d7:7a:25:5d:b6:
c8:15:a4:a8:e0:f7:67:66:44:98:7f:55:f5:f8:4f:d2:74:d2:
91:e3:00:f4:32:75:a1:6c:47:5f:bb:12:34:b1:d6:2c:e9:72:
56:9a:c5:50:7f:c9:db:d9:f8:c5:f1:2c:55:d0:fa:ea:b1:81:
0b:07:9a:8a:2b:ad:0a:21:e2:c9:82:ce:05:17:03:f8:3e:41:
43:b9:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:50:18 2026 by rpki-client