
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa
File: 2abfa112-93c3-3da0-856a-28fad7798068.roa (raw, json)
Hash identifier: EFthgZj052OjkSsbd2a5Q8KelVQ+FWA9lSfx1CH2zNo=
Subject key identifier: 16:91:FB:E3:9D:F3:DE:84:81:26:D9:3E:02:A0:4C:88:A1:F2:3B:27
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584E07008C2A70AE60CEC10DF800
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa
Signing time: Mon 01 Jun 2026 13:00:10 +0000
ROA not before: Mon 01 Jun 2026 13:00:10 +0000
ROA not after: Sun 30 Aug 2026 13:00:10 +0000
asID: 63199
IP address blocks: 148.153.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:07:00:8c:2a:70:ae:60:ce:c1:0d:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jun 1 13:00:10 2026 GMT
Not After : Aug 30 13:00:10 2026 GMT
Subject: CN=a7769d69-1fa7-44e3-b16e-3fdd55397714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:8b:91:94:03:76:81:8b:91:74:27:5f:62:
29:99:5c:6a:7b:61:be:07:85:b1:14:8b:7b:f6:e4:
c4:a3:84:44:d1:37:59:28:f7:7f:28:b5:4e:f1:e1:
f8:34:26:29:59:7e:5c:af:de:10:8e:4f:a2:0f:e4:
1c:60:1f:e3:6c:26:79:97:e2:bd:60:92:e8:3f:37:
03:28:72:77:30:59:50:94:36:6a:b6:87:4f:ae:aa:
3b:4a:69:06:23:70:74:43:25:c6:f0:b4:9a:6b:ee:
09:38:52:b5:f3:cb:c4:21:b6:c0:2e:99:e5:03:16:
3f:f5:b7:e5:d7:90:ec:58:42:5c:f2:d1:13:40:3d:
a5:39:96:a9:04:13:b5:1e:5f:7a:44:31:2d:9b:98:
40:9f:b0:b9:27:77:dc:3b:37:47:6a:f7:68:2c:67:
34:16:49:5c:29:4e:ac:8a:0b:61:3c:7e:d5:38:3b:
40:1b:ab:d5:ea:5a:d2:b6:ac:37:90:27:61:9a:c6:
2e:4c:c4:ec:b0:59:db:59:a0:51:dc:f6:58:58:62:
c3:5b:4c:4e:ac:58:3a:51:a9:a1:40:4c:6d:25:ed:
b7:7a:92:c9:aa:30:f7:8f:cf:62:3a:b4:0d:c1:0f:
7b:6b:5c:fc:8b:c3:7e:75:b1:7e:5d:1c:59:93:04:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:FB:E3:9D:F3:DE:84:81:26:D9:3E:02:A0:4C:88:A1:F2:3B:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:bf:8d:f8:7c:ac:d0:ae:11:2c:e0:30:97:3d:4a:26:00:d3:
6e:70:c2:ac:6f:77:57:86:8c:4c:1f:f4:47:be:b6:3f:d0:36:
81:99:5d:3f:9a:b3:9a:15:93:e2:c5:27:6f:4a:bf:c1:c8:b5:
d0:74:fd:f1:bb:26:af:87:ef:3e:6e:a6:80:a0:9c:c4:46:3b:
65:72:b1:41:2a:4a:3a:1b:07:03:47:f9:16:62:27:22:c1:84:
06:14:bf:5a:df:06:13:ba:60:e1:25:bb:76:11:c0:4f:59:53:
29:32:10:73:dd:50:be:74:12:81:c2:7f:28:3b:8b:c8:0f:81:
85:58:84:b8:32:03:83:ed:d4:bb:ee:7e:33:a0:a2:04:05:65:
fe:40:b8:76:5f:aa:82:80:40:93:40:7c:b7:0f:fb:cc:b5:e6:
fb:63:1a:5d:d7:cc:57:14:2e:dc:f9:d6:2d:83:ea:df:2e:63:
70:6d:2c:cf:dc:84:1f:d4:8f:6b:ce:42:81:a1:70:53:59:93:
08:e4:a7:d6:0e:54:e8:f5:b6:0c:22:33:32:b0:f0:b1:26:5f:
39:37:36:c8:b4:2c:d5:46:95:82:43:55:3f:8a:21:5c:8f:2f:
f7:42:3c:8d:a6:fd:b4:2e:f9:9c:cc:18:9d:d6:48:93:5b:af:
cb:5b:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:04:59 2026 by rpki-client