
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa
File: 36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa (raw, json)
Hash identifier: p81cEvUL5Cl99ASMQAPcob9+33wcTw3PZsuAcRGh1SM=
Subject key identifier: D9:3C:AA:C0:17:FA:9B:2D:A4:90:6F:48:CD:E2:84:0C:13:C3:44:84
Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial: 010D0C9F4328584D852FD56EBBF3DFA7B65F0460
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa
Signing time: Thu 16 Apr 2026 01:00:23 +0000
ROA not before: Thu 16 Apr 2026 01:00:23 +0000
ROA not after: Wed 15 Jul 2026 01:00:23 +0000
asID: 812
IP address blocks: 164.153.165.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:85:2f:d5:6e:bb:f3:df:a7:b6:5f:04:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Validity
Not Before: Apr 16 01:00:23 2026 GMT
Not After : Jul 15 01:00:23 2026 GMT
Subject: CN=ff2753b9-8006-47d8-ace7-28a2bd8198a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:83:7e:29:aa:73:a0:96:5a:ce:e4:3f:30:
17:47:37:9a:db:68:24:63:2d:be:58:38:c5:e1:83:
db:33:66:13:62:e1:a4:20:96:63:02:ec:be:b4:8b:
19:d8:52:84:bb:ac:33:48:da:57:34:cc:c5:c9:f0:
c3:1e:b0:11:68:9c:26:44:d8:a3:83:22:01:1e:1b:
b5:5f:96:9b:86:28:60:d7:1e:6a:31:1f:5e:18:5d:
ff:8d:0b:2d:96:cb:ec:3c:79:f4:28:e3:8b:69:25:
85:20:7a:45:61:6d:6c:a4:75:d4:05:ab:58:c5:c6:
5e:a5:cf:42:c0:48:4a:9f:13:87:1f:06:cc:c4:3d:
d6:92:bb:2f:b5:c1:4a:fd:d0:a3:9b:0b:d6:23:96:
d2:af:55:97:9f:84:88:ae:5f:7d:91:23:42:de:4c:
a7:e9:95:da:09:9e:29:34:4b:25:e0:26:7f:40:f7:
f4:d5:bb:3e:21:a9:3c:ea:4c:5c:3a:73:bc:4b:55:
c6:97:d4:a7:43:74:d3:24:78:97:23:fd:78:6e:de:
dc:e7:db:b1:1b:65:90:23:48:e4:2a:f9:c1:04:89:
81:87:6e:8c:88:19:be:d9:b5:bb:44:18:fc:6f:a5:
86:f3:79:cb:ce:c9:72:22:3a:2e:5f:0e:7b:c0:ea:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:AA:C0:17:FA:9B:2D:A4:90:6F:48:CD:E2:84:0C:13:C3:44:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
X509v3 Authority Key Identifier:
keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:b7:77:7a:ac:67:31:ec:f7:04:35:30:f5:c8:63:d3:d6:9d:
5a:b9:a8:07:b9:c6:ed:c9:43:5c:fa:88:ea:dc:14:6a:d4:6b:
08:c1:e2:61:89:83:eb:9d:bc:4d:42:37:6a:4b:77:bd:53:c8:
71:c4:6f:10:d9:1d:8c:1b:3f:23:3e:35:b2:45:3a:39:55:8d:
3a:2d:d2:e6:06:60:f2:43:0a:4b:f6:b5:c0:da:67:8e:32:e3:
52:30:f2:68:21:de:2b:32:22:36:65:9e:26:6b:3f:15:56:ed:
ee:3e:c7:68:f8:7d:f0:8d:29:44:47:d9:85:cd:ad:bb:c3:5f:
55:96:0b:6b:fb:40:53:f9:91:00:54:86:cd:a1:93:e1:a3:72:
29:5d:1d:32:88:ec:c2:81:07:4a:38:59:f6:11:24:ea:8c:55:
42:3b:f9:0b:be:89:64:f2:3b:c3:0d:1e:5e:2a:21:71:c1:79:
c8:ff:36:bd:9f:19:e5:ae:3e:9e:de:74:31:33:1c:94:20:8e:
44:2c:c9:90:9d:51:64:07:a9:a6:27:00:3f:4c:79:18:d0:17:
31:99:32:15:b4:1c:00:88:9a:bd:68:7c:0f:5c:20:64:5f:c7:
68:bf:5a:45:21:7e:cb:2c:96:ce:07:44:b7:75:98:c3:fc:1a:
1a:7f:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:46 2026 by rpki-client