
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa
File: f167a86e-0304-38f6-baf0-2ee2779263a8.roa (raw, json)
Hash identifier: VkVWJPlPbb3OvNbMzI5UFNCPzIMidBXIkgu7SGCVLZI=
Subject key identifier: 00:5E:58:A2:E4:76:CA:C2:9E:AE:86:0B:77:A6:F2:EA:9E:C1:95:86
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584D703FD3FCAAED1C943830D280
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 59210
IP address blocks: 131.153.159.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:d3:fc:aa:ed:1c:94:38:30:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=173b7e15-150a-4a44-879b-b4fcb11cf5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:24:55:db:ad:34:5a:df:56:22:76:fe:b6:
fe:3b:b9:69:dd:1c:bd:2b:ac:a7:a9:f4:61:a7:08:
90:6d:bf:88:8c:3b:f3:9c:a6:a7:0a:ea:dc:c0:b7:
7a:b6:28:4f:d7:29:fd:56:05:b6:42:d1:4a:cf:02:
43:d5:17:fd:e6:ee:f6:a4:7d:8c:5e:68:52:54:80:
8b:7f:47:67:d2:8c:96:77:7d:7d:62:7c:91:0e:62:
cd:28:ae:31:a1:00:1a:d1:c4:76:59:96:e9:8c:d2:
fd:c5:6e:9c:83:be:d0:79:e6:7a:3d:2d:1c:11:d0:
b2:76:bb:d0:41:d7:98:6d:99:34:7c:67:0c:b6:25:
7e:60:70:99:3e:1a:cc:e9:8b:3d:32:24:58:43:a6:
b5:32:fb:7a:00:8d:04:69:ee:6e:9e:63:dc:12:bb:
a3:48:49:5c:2f:a1:07:bc:e4:58:81:4b:0c:ec:cd:
ca:04:ab:cd:fd:40:9c:68:3f:af:8a:08:b0:96:31:
43:d6:c3:17:e9:80:ab:77:ab:75:4a:07:e5:1c:96:
f8:ca:ae:49:50:4a:c0:e4:1a:53:fa:9d:98:a5:34:
e8:2b:3a:c7:4d:60:da:ba:d2:55:58:34:f0:f6:e0:
b5:87:95:d9:01:8d:52:9d:ad:d1:ff:4c:62:a0:33:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:58:A2:E4:76:CA:C2:9E:AE:86:0B:77:A6:F2:EA:9E:C1:95:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:80:09:5d:87:50:61:c7:f4:28:44:a2:b2:87:8f:71:37:88:
e9:90:f6:40:25:1d:57:8a:e6:94:7e:b1:40:1e:97:72:79:3d:
65:25:55:03:b6:a1:d2:66:09:b6:ea:22:b5:fb:c7:47:48:e4:
d4:b9:1b:7f:f0:ca:68:d0:14:f1:b7:b9:1a:ca:62:7c:a2:f4:
0f:2d:6d:65:21:c2:0c:18:12:21:45:f7:9d:d6:87:42:38:b9:
ee:b0:77:e9:8e:be:0b:fb:5a:20:5e:84:07:c6:00:9e:97:90:
09:e6:83:61:d9:5e:80:ea:09:37:c2:65:01:e4:1f:f9:bf:bd:
9b:f2:2c:cf:49:17:76:fa:f7:68:8d:95:a7:e0:96:06:71:cb:
78:63:e5:ac:69:b3:a7:a4:f1:72:3f:d3:96:98:65:59:78:ae:
00:2c:0c:52:d3:ef:47:81:ec:db:6d:a7:18:c9:64:4a:81:eb:
66:ce:0d:69:00:e2:b2:2d:54:6d:bb:b4:2b:be:28:b9:d2:e3:
77:4f:72:09:21:5f:ec:ad:cc:a8:5d:1a:ad:83:50:70:57:75:
56:37:a4:cd:8d:93:a7:80:41:f4:b3:79:1a:6a:f0:4e:47:50:
f6:3b:0d:73:21:62:d7:b4:a2:18:85:ee:c2:0d:39:35:54:49:
5e:98:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:32 2026 by rpki-client