
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb/bacd45b8-4202-3508-8593-49a1acb0b094.roa
File: bacd45b8-4202-3508-8593-49a1acb0b094.roa (raw, json)
Hash identifier: zuYVasbqm+P2C/fousciZ61hEmIpBqyXmLDEq9kYx00=
Subject key identifier: EC:36:57:CD:2B:EF:D6:00:7C:AA:B6:F3:85:63:E8:1F:75:9E:8B:0A
Certificate issuer: /CN=8f8588f9-8b23-471a-aa95-da51086529fb
Certificate serial: 010D0C9F4328584F268D0B5D2A26110341311900
Authority key identifier: 8B:6E:A8:66:32:4E:9B:9D:F1:63:33:E3:25:08:17:19:0A:03:AE:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb/bacd45b8-4202-3508-8593-49a1acb0b094.roa
Signing time: Sat 12 Sep 2026 13:00:13 +0000
ROA not before: Sat 12 Sep 2026 13:00:13 +0000
ROA not after: Fri 11 Dec 2026 14:00:13 +0000
asID: 64245
IP address blocks: 155.103.195.0/24 maxlen: 24
2620:d6:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb/8f8588f9-8b23-471a-aa95-da51086529fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb/8f8588f9-8b23-471a-aa95-da51086529fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:26:8d:0b:5d:2a:26:11:03:41:31:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8588f9-8b23-471a-aa95-da51086529fb
Validity
Not Before: Sep 12 13:00:13 2026 GMT
Not After : Dec 11 14:00:13 2026 GMT
Subject: CN=f711396f-85c6-42c0-b5f5-92eb5a798c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:f1:49:72:3c:7e:5d:db:fb:19:3e:6b:c2:
bb:ac:b5:5f:85:56:f4:61:50:63:4c:fe:32:1d:c7:
05:6e:9a:b2:23:b9:2a:75:a8:f2:16:e3:c1:5b:c4:
6f:f7:17:a8:f0:24:60:b9:1e:f6:09:8c:a4:45:62:
3e:5e:fd:63:3e:a9:e5:2f:9b:72:da:9e:b7:5b:53:
71:2d:4f:26:db:74:68:a4:3c:64:16:04:92:fe:8a:
70:b5:48:01:d8:16:27:af:8e:2a:9b:cd:cc:e4:f1:
ec:87:dc:1d:f7:be:e1:e5:ac:83:7c:5e:55:fa:98:
3c:95:10:0b:aa:76:b6:c9:5d:9c:82:13:36:e6:52:
a0:2c:0c:76:50:bd:12:cc:71:23:f2:a3:b3:38:73:
f8:6e:60:26:7c:9e:14:27:a4:a1:af:87:2c:52:9a:
23:06:6e:85:13:95:5e:78:c1:cc:40:5e:92:90:12:
49:11:12:b6:a7:6b:3c:1f:6b:d0:fe:27:cc:3e:e5:
d9:68:4d:0a:4a:40:98:d5:38:a7:81:73:47:f4:7c:
3c:d9:a6:22:ab:9b:7a:67:f5:ad:ef:15:ff:2f:6e:
ad:d4:ec:09:b0:7a:ed:90:70:61:ac:13:b1:6d:03:
10:5a:72:1d:a8:c8:d0:58:d1:2b:92:7c:f5:47:6a:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:57:CD:2B:EF:D6:00:7C:AA:B6:F3:85:63:E8:1F:75:9E:8B:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb/bacd45b8-4202-3508-8593-49a1acb0b094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb/8f8588f9-8b23-471a-aa95-da51086529fb.crl
X509v3 Authority Key Identifier:
keyid:8B:6E:A8:66:32:4E:9B:9D:F1:63:33:E3:25:08:17:19:0A:03:AE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8f8588f9-8b23-471a-aa95-da51086529fb.cer
sbgp-ipAddrBlock: critical
IPv4:
155.103.195.0/24
IPv6:
2620:d6:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c2:40:af:3c:bf:1e:0b:ad:a7:0b:d7:3f:0e:13:02:99:cc:
69:6d:40:f4:f0:9e:db:0b:aa:b2:05:c3:e1:e9:47:34:2c:77:
30:a6:f7:f3:46:15:ba:1b:cd:31:9b:2e:2b:a2:dc:c3:78:88:
2d:04:df:f4:35:ec:e1:c3:3f:b6:d6:14:99:2d:8c:3a:0b:b2:
64:87:36:f2:99:84:e9:76:8d:89:d3:89:3d:31:57:d7:08:00:
af:0b:de:cf:8b:04:fa:89:4e:ce:39:df:54:36:52:c3:44:b9:
31:be:e2:a8:f8:4d:12:91:fc:67:ab:65:20:7e:00:14:1f:b6:
57:50:20:7c:09:a8:4c:fb:85:46:a2:6c:af:68:01:24:fb:83:
19:cd:3a:73:0d:1c:7a:e1:c5:af:86:eb:a8:f3:5c:06:7c:9a:
3b:c2:5a:a0:ab:85:c0:3f:ca:27:36:a5:da:84:3b:a3:de:50:
f9:09:bf:aa:45:60:ea:a3:b7:f9:2e:fb:42:39:23:d5:e1:1a:
3c:16:7e:e5:70:0c:76:54:83:1c:0a:84:52:d2:f7:a5:f6:1e:
2c:ae:95:3d:26:62:c7:d3:00:8d:86:dd:d0:43:51:40:93:57:
21:40:32:77:0e:fb:12:41:b8:d2:ab:28:7a:82:db:47:62:53:
08:02:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:48 2026 by rpki-client