
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
File: badd067d-d8c6-3638-b8fc-51032051faf9.roa (raw, json)
Hash identifier: gAGbt6dFFV6oYY76ZZ2JfnJJeIJwgyVkMOvaq1UEW4w=
Subject key identifier: 13:1B:5A:3D:1D:CB:EE:1F:FA:B3:A5:1A:37:3C:33:CB:35:C9:6D:54
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584F093CEDF0B49A004A6168E300
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 63199
IP address blocks: 148.153.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:ed:f0:b4:9a:00:4a:61:68:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=1a65a63d-9300-4139-96c2-4a2e9882ac8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:81:71:61:80:0c:f9:19:97:de:b0:fd:ef:
8f:d8:db:71:ba:76:8e:54:8a:f1:c2:c6:ac:b5:9d:
f5:cc:09:93:b5:72:1f:77:70:9e:c5:8c:fc:cc:61:
2a:8e:13:ba:49:47:25:e9:b4:86:44:2d:24:71:90:
f6:51:58:88:be:da:87:0f:32:f2:53:b8:4d:1a:55:
7b:50:06:b7:1f:90:e1:b5:4e:fc:f3:68:f8:75:b6:
c5:05:9b:a5:df:45:80:88:e3:1b:85:13:ee:ae:6a:
89:0a:81:f0:38:df:ef:27:d1:e1:c1:98:b6:02:d4:
40:96:55:72:9f:16:5f:be:fc:d0:7d:33:e2:c6:ed:
bf:0f:e2:72:72:e0:ad:6b:22:19:e4:f9:9f:c1:e2:
20:44:3f:31:38:cb:a5:ca:50:24:32:fd:45:9c:31:
7a:50:ab:46:9f:51:0e:3a:cd:51:c5:38:fd:f1:0d:
5e:1a:1b:67:c8:4c:4b:22:d8:68:e5:e2:82:6a:4c:
75:31:74:fb:d0:d4:f8:f7:1a:6f:1e:24:0a:ec:73:
ff:9c:47:4c:c4:51:fc:e5:68:80:3f:c3:52:7d:65:
ba:87:1d:e6:57:db:ff:b6:90:24:4d:24:fa:41:a6:
bc:bc:f9:27:3d:29:24:15:4f:ab:68:36:c5:1a:2e:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1B:5A:3D:1D:CB:EE:1F:FA:B3:A5:1A:37:3C:33:CB:35:C9:6D:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c6:9d:1e:8d:74:7b:db:1c:8a:1f:f7:7b:b5:0a:d1:bb:af:
83:54:cc:a0:6e:a4:83:45:7e:99:ac:1f:23:21:07:8a:63:2f:
b6:e3:b6:83:44:de:e4:c8:49:23:55:91:19:62:39:de:48:8c:
2c:23:e8:6b:74:04:ff:77:d2:56:ef:f5:b7:50:33:a1:24:aa:
77:b6:c5:c3:03:9e:d7:c8:e9:6f:6f:bc:70:a2:e4:65:4a:a4:
84:0b:14:b0:d4:84:29:1d:df:f2:90:58:92:34:9f:ef:87:4b:
c7:84:21:9a:cb:ed:af:fc:93:b5:15:31:98:5f:29:05:b5:e4:
66:ce:5e:40:d4:bf:be:a4:6f:f3:ff:f9:39:4f:11:74:06:f4:
69:0c:7e:2f:ae:84:e4:c9:0b:14:ab:39:1e:6f:61:92:9a:41:
4b:55:1c:c4:80:f3:8f:74:13:ac:4f:b5:56:0f:6b:c3:b2:ff:
04:bb:da:75:34:59:0b:f4:dd:57:6a:a2:48:f4:60:a5:5e:2d:
d1:bb:03:26:bd:38:dc:4e:07:07:fb:f2:44:3d:6b:45:92:c5:
d2:45:30:54:a8:32:d2:94:5f:47:cc:32:c1:2a:0f:6d:f2:0d:
33:da:62:77:1c:42:3a:b0:1d:c3:a1:f6:a2:0a:6d:8a:da:5f:
86:8e:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:31:48 2026 by rpki-client