
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa
File: cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa (raw, json)
Hash identifier: 5I8G+PxthDTzuKFLwqgDMozz3a0JavPJY1zyFN5xwQ4=
Subject key identifier: EA:BC:13:7E:98:65:C9:F8:0A:EC:85:C5:DD:BA:B1:27:6F:4E:26:B3
Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial: 010D0C9F4328584F1CC79E1F7F9786E2E7041980
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 14618
IP address blocks: 164.153.128.0/24 maxlen: 32
164.153.129.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:9e:1f:7f:97:86:e2:e7:04:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=350abf5c-82f3-44f9-af41-6d0caddfda34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:60:f3:a9:0a:19:04:b9:e5:23:d6:82:d1:
5f:0e:6a:f4:d0:de:72:26:a5:36:e2:d4:06:f8:54:
dd:d3:c1:73:6b:3e:9c:8b:0a:56:c9:1b:14:7a:01:
9d:59:bd:3e:66:83:4f:43:6a:96:76:4e:28:fc:32:
45:99:5c:3d:85:f1:3c:2c:e2:98:c3:fa:25:c6:63:
bc:0e:f9:11:7a:fc:ed:bf:8a:9e:c7:dd:9a:05:55:
9d:c5:46:32:83:55:b9:a7:1b:eb:3b:e5:70:92:a8:
16:2d:fc:00:e5:cb:94:f8:08:fe:dd:83:a4:af:bd:
c9:cd:f2:eb:48:0d:ce:f1:b2:59:01:1f:44:40:ad:
82:45:67:ee:67:62:8e:ae:b7:62:2c:df:73:41:ce:
0d:f8:94:3a:af:44:1a:d4:8b:3a:ed:68:99:ee:77:
e0:79:db:e5:99:d8:50:04:bb:45:0f:63:17:61:bf:
d3:41:fd:e6:1d:11:7b:36:de:35:12:27:c6:97:e8:
5b:7b:64:68:dc:d6:88:d7:f8:61:16:c7:19:c6:81:
c6:9b:4c:c9:4a:4f:e1:dc:ae:36:11:4b:0c:48:25:
dd:40:6f:85:e4:b7:06:49:d1:ed:48:1c:7f:c6:c0:
d8:34:70:d3:c3:82:03:78:46:e2:5b:38:10:97:c1:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:13:7E:98:65:C9:F8:0A:EC:85:C5:DD:BA:B1:27:6F:4E:26:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
X509v3 Authority Key Identifier:
keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:2b:f8:51:ef:9b:af:98:cf:e8:ae:82:ab:a6:7d:88:3d:c2:
d4:bc:8d:9d:89:5b:2e:ed:d4:05:5f:eb:44:0e:e3:b7:63:9e:
ce:a5:cb:bf:db:72:70:f9:65:06:26:a9:ba:c5:fe:11:eb:05:
76:be:1b:66:ff:14:51:39:86:92:a3:c4:01:8a:14:75:e9:25:
15:de:d7:cc:84:81:ea:20:7b:64:cd:76:c3:67:3b:6d:e9:ea:
ee:47:34:e9:4c:ce:ef:91:71:b2:02:8a:b2:ff:47:34:c9:18:
27:af:fa:3d:be:93:53:7d:5f:1e:d1:fd:bd:92:63:e1:ca:8f:
3c:04:52:b2:af:86:41:f3:8a:86:f0:53:9a:6e:1b:37:09:3c:
3d:dc:31:9c:69:07:bb:d4:75:d8:fa:ad:b9:6a:e9:1e:f2:ab:
54:03:55:80:fe:ae:c4:1b:03:52:43:bc:51:6e:dd:23:f8:a5:
37:0d:47:6f:c6:4b:0d:ad:79:d5:bd:7a:51:2d:e4:3e:cc:72:
f3:f9:6c:fe:62:86:dc:00:c0:11:0f:d4:14:0b:51:f6:f5:d7:
b5:0c:83:ee:75:2d:48:45:8c:a5:c1:a5:6f:fb:3d:c7:4d:61:
3c:f8:56:50:fa:bd:60:de:93:cb:01:93:db:c7:d3:5d:c0:14:
39:3d:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:53:47 2026 by rpki-client