
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa
File: ca4000da-8aab-337b-9ec7-04cc1a336133.roa (raw, json)
Hash identifier: fsc8whoYT4E6ymHSA74u064jebcbH6PlQrzTWjvgzl0=
Subject key identifier: 83:01:C7:5C:3E:2E:07:EE:C4:FC:C4:E0:0C:9D:D1:0B:F0:A2:34:DC
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584E3E5F3E3330BB28EA261C7000
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa
Signing time: Sun 21 Jun 2026 09:00:12 +0000
ROA not before: Sun 21 Jun 2026 09:00:12 +0000
ROA not after: Sat 19 Sep 2026 09:00:12 +0000
asID: 63199
IP address blocks: 148.153.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3e:5f:3e:33:30:bb:28:ea:26:1c:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jun 21 09:00:12 2026 GMT
Not After : Sep 19 09:00:12 2026 GMT
Subject: CN=a676f8fd-e0e0-40be-9bda-bf2c389433bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:01:36:8a:35:50:67:58:f8:21:cc:44:14:
d7:e6:89:d3:7c:b1:e1:4f:b6:59:63:1d:74:ab:59:
3e:02:e4:8a:30:ff:20:e0:c1:82:a5:51:f9:43:af:
8d:86:d0:ef:57:7f:8c:15:bb:77:63:48:93:21:ba:
50:16:5b:6b:79:0f:82:27:53:be:58:44:b7:30:38:
a3:2d:e2:96:72:3c:09:fd:76:bd:06:42:f7:bf:44:
af:db:d5:49:8a:2d:b6:ed:d1:8b:91:9b:85:c5:4a:
16:c3:13:0b:dc:e9:b2:56:c7:bc:d4:1e:4c:8c:24:
70:c4:58:3e:66:c8:33:c7:17:df:2c:0c:72:37:55:
4b:3e:0c:e4:39:e8:c9:77:ae:d8:9d:cb:47:26:d3:
65:f0:2b:da:e6:1c:f1:bf:1d:cb:90:f9:16:95:6e:
9e:17:2d:c4:c8:c1:82:e1:af:c6:41:61:51:a4:99:
b1:cc:82:49:63:3c:7f:cb:81:e4:a6:9e:e5:ef:3d:
e2:ca:80:a5:e7:63:4e:29:61:d9:63:92:aa:46:fc:
47:cd:77:1a:c4:27:b6:92:4e:05:44:5f:fe:be:7d:
92:ac:41:7f:91:cc:eb:ab:e8:d8:e5:eb:a6:9e:3e:
08:ae:50:9d:04:31:e4:1a:e6:bb:48:01:98:59:3f:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:01:C7:5C:3E:2E:07:EE:C4:FC:C4:E0:0C:9D:D1:0B:F0:A2:34:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:1e:c0:73:40:37:d2:44:1f:5c:46:cd:4e:c0:df:b6:89:71:
34:f2:e0:90:1f:d8:ea:81:af:82:41:96:79:53:2b:0a:55:ab:
e9:ca:cb:67:b9:95:98:63:d7:25:6d:71:7a:00:0a:de:c4:f9:
34:97:37:99:a4:d7:2b:3c:ab:81:92:41:7c:87:ed:1c:bd:ce:
10:df:12:39:fc:f6:e6:a9:47:aa:88:9c:3b:2b:49:b9:7a:83:
0e:51:3b:c6:01:74:c2:b4:8e:68:63:a0:0b:b0:da:b0:18:4a:
66:b8:82:8b:7b:7f:81:63:96:4b:c5:0c:57:ba:b5:6b:61:39:
95:03:e0:be:91:77:53:3b:2a:05:64:fd:07:63:07:fb:97:9b:
f4:b2:30:ee:1a:90:38:7d:6a:80:f1:8d:82:b0:d2:b3:68:9c:
81:e1:34:08:67:71:b5:8e:6b:30:0c:60:ce:1b:90:df:99:0b:
0f:43:3c:55:79:7d:91:46:97:78:41:be:ec:1a:36:50:3b:e2:
11:eb:de:10:29:16:0a:7a:b6:5b:d1:ea:1d:4e:f8:8f:34:33:
f0:d9:4b:d2:09:62:d3:b7:0b:2c:c7:5e:0a:af:62:62:5e:51:
1f:47:64:0b:0f:c1:4f:20:b7:29:c3:76:41:53:f4:ee:84:a3:
e2:a5:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:28:22 2026 by rpki-client