
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1679c5e6-a928-3eb7-a60b-e991a87c5935.roa
File: 1679c5e6-a928-3eb7-a60b-e991a87c5935.roa (raw, json)
Hash identifier: k1R9jT7DgF0UugbwXlUvpSAAxB/qG5U3DNh4lzUNvjc=
Subject key identifier: 06:25:AE:44:5D:F8:D6:06:A4:C6:6E:D9:E1:71:CC:1A:46:CA:91:57
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584F5E62F87C921037F642E01580
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1679c5e6-a928-3eb7-a60b-e991a87c5935.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 54994
IP address blocks: 153.43.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:f8:7c:92:10:37:f6:42:e0:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=08bb28a6-fbab-4a41-bfdc-c90b353bf7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:c6:30:70:0f:11:ff:2f:83:16:de:fe:39:
a1:d6:40:ad:8a:85:0a:98:95:0f:9b:7a:88:9d:56:
5f:a1:9e:7b:2d:16:d7:ec:46:9f:fa:83:30:b7:a3:
b3:ce:00:f0:48:63:cb:eb:44:23:e2:aa:5a:1a:fd:
56:55:06:ca:bc:08:93:89:9a:9f:17:ff:18:26:8f:
58:66:c4:76:5e:bf:2f:f0:5a:25:50:cb:1e:e8:65:
bd:bb:ec:f4:f5:45:bf:02:f7:6d:58:d2:f6:03:d7:
a0:47:60:78:fc:93:79:6c:d2:4a:32:1d:dd:9d:a1:
eb:a4:a4:07:1e:b2:12:ba:cc:47:81:40:a5:3f:e2:
68:29:e2:cf:a6:3d:23:c7:5b:10:66:01:58:00:03:
0a:e8:06:68:77:04:a7:74:08:66:db:3f:d7:3d:7f:
be:d6:2d:91:1e:4f:fb:98:3b:53:bd:b7:9d:1b:60:
7e:be:5c:c3:26:91:d7:74:6b:c0:31:b1:39:96:d4:
6c:0d:1b:62:ce:19:ea:a8:e5:0d:82:97:bc:7c:ed:
4c:ba:e7:f3:9d:49:47:a7:e7:5e:93:2d:fe:f4:20:
ca:e3:32:69:0c:2f:9e:eb:df:bf:5d:a6:c6:b2:58:
cc:27:e6:f9:68:08:03:83:a0:9a:18:c0:b1:70:e2:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:AE:44:5D:F8:D6:06:A4:C6:6E:D9:E1:71:CC:1A:46:CA:91:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1679c5e6-a928-3eb7-a60b-e991a87c5935.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
153.43.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:dc:88:2d:97:66:51:10:ff:2e:62:ce:b7:8d:fb:2c:a6:cb:
a3:b8:7e:27:1b:d0:55:1f:43:85:3a:d6:df:bd:b5:5c:26:87:
85:80:68:49:85:f1:11:b9:bf:54:a2:83:11:0e:35:d9:74:e9:
c6:0a:eb:96:4b:8d:02:6e:81:ab:88:b2:36:b8:49:c2:73:d7:
cf:67:2b:f5:02:69:c6:fb:d3:90:68:bf:36:f5:de:d8:51:d9:
89:1b:48:ac:45:09:39:b9:3d:b2:45:4b:52:18:7b:d4:2f:8b:
a9:24:b1:cd:5b:47:0a:a5:8b:75:06:c6:7e:5d:61:ef:91:ac:
96:a6:74:cb:0c:a4:b2:4a:be:06:6e:02:70:dd:a4:c2:05:f9:
d3:e5:49:e1:19:39:a2:4b:e0:80:04:d3:b5:40:3c:c1:06:6f:
77:cc:18:4a:aa:a2:33:1a:43:77:48:0b:97:17:11:7f:77:51:
e2:69:7e:33:8e:6f:a2:45:ee:b8:fb:51:98:a6:f4:71:e7:2a:
3d:1c:a0:6c:4a:d8:8d:7e:b2:34:84:5c:0f:e3:cf:a9:1b:11:
0a:f1:98:ac:65:08:99:38:16:58:4d:6b:6f:7a:02:d5:09:4d:
ae:4c:d6:66:4c:73:8e:22:8e:07:ce:69:56:c0:ef:1c:87:bf:
ad:2b:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:18:45 2026 by rpki-client