
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/f323cd83-3916-3544-8481-841cd81601cf.roa
File: f323cd83-3916-3544-8481-841cd81601cf.roa (raw, json)
Hash identifier: R/cpKebTJiRYejG06Tz2L2C941nge/KqjA5cdeNBZgw=
Subject key identifier: 89:91:78:16:3B:E0:4B:55:ED:72:A0:B5:B4:23:E3:1A:F6:B9:28:82
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584FAB28B265A19431966B7F3E40
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/f323cd83-3916-3544-8481-841cd81601cf.roa
Signing time: Fri 30 Oct 2026 01:00:13 +0000
ROA not before: Fri 30 Oct 2026 01:00:13 +0000
ROA not after: Thu 28 Jan 2027 02:00:13 +0000
asID: 63293
IP address blocks: 157.240.185.0/24 maxlen: 24
157.240.186.0/24 maxlen: 24
157.240.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:ab:28:b2:65:a1:94:31:96:6b:7f:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Oct 30 01:00:13 2026 GMT
Not After : Jan 28 02:00:13 2027 GMT
Subject: CN=2d8b3478-a05b-42e1-812a-8f20c56961a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:98:ab:02:49:af:ad:64:cb:0a:92:6d:9a:
4e:85:d3:97:af:55:1c:7c:84:0f:63:74:ab:63:82:
77:04:04:0a:9d:c7:ea:bb:59:02:1d:f2:5e:b1:c5:
67:09:17:81:36:0f:69:5e:32:d0:81:b9:9f:5b:91:
62:fb:48:4c:c4:06:64:b8:09:b7:b9:99:e5:70:0a:
35:55:67:bc:99:14:7d:37:67:c4:e3:af:20:c4:c6:
43:47:66:94:ad:1b:7e:af:ea:a7:e2:ed:5e:e6:69:
c8:1c:75:e6:b2:0f:a8:ba:67:47:5f:6a:ca:27:8a:
53:81:06:ff:56:2a:83:c5:0d:13:d9:6b:30:53:0c:
25:c8:6d:ff:13:a3:83:be:00:c8:09:cb:14:ee:13:
fc:d5:50:4d:42:d2:9b:d8:79:ef:87:0f:ff:d3:5b:
d6:d7:2f:1c:cc:a9:fd:7a:d6:f6:a8:e3:7a:03:31:
fe:6b:7d:2f:30:b7:19:5c:22:22:1a:c1:d1:a9:db:
75:67:6d:91:bc:18:bc:4f:e7:df:e2:fa:8b:d8:f0:
79:bc:38:5d:69:0e:f0:89:a1:d5:7f:ae:b0:09:a4:
87:8f:29:94:22:c4:b9:ba:c8:3f:89:8e:72:69:35:
86:20:3f:37:08:04:fd:68:ca:ed:c7:80:6e:25:85:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:78:16:3B:E0:4B:55:ED:72:A0:B5:B4:23:E3:1A:F6:B9:28:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/f323cd83-3916-3544-8481-841cd81601cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.185.0-157.240.187.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:17:f3:1f:d5:94:dd:f6:c2:7a:22:db:fe:e9:3f:12:bd:27:
77:88:e2:e3:87:04:07:22:b2:56:2a:8a:16:ec:9a:26:e8:c1:
5a:87:2a:a5:a1:93:3e:66:c1:56:1c:7d:7b:6a:13:49:59:51:
4f:36:53:29:2c:24:ba:81:52:c5:ee:07:07:2f:f4:e9:53:07:
be:fe:f1:55:cb:0e:2e:ef:ae:c1:8d:8e:40:80:80:e7:fd:50:
7d:26:b9:dc:6b:24:28:20:07:69:dc:3c:e6:41:cb:b6:4f:07:
1e:28:f4:6f:7e:6f:2c:63:fe:66:eb:92:94:27:e3:46:4b:51:
0e:bc:f1:0d:59:37:e4:ef:08:7a:0f:6b:fb:08:29:59:00:6a:
59:b2:5a:e0:18:71:2c:32:f4:fa:14:6d:9e:4a:fa:fb:3c:88:
51:af:70:4a:9e:4c:9b:7a:17:d4:c4:f7:f9:42:57:9d:6f:c0:
a4:78:ee:01:a0:55:c1:58:ff:f3:5a:ef:ec:a3:55:d5:cd:2f:
c9:05:b1:76:91:07:4c:7f:18:f7:35:d9:fb:c3:50:42:92:c2:
87:43:01:68:be:c5:38:7e:8f:b9:50:64:20:13:39:59:ef:b6:
ec:d1:2f:0d:a3:d8:00:8e:a1:bd:d4:f4:8a:62:cd:52:5d:61:
d5:8e:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:26:24 2026 by rpki-client