
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/8a0baaff-63b2-3448-9111-f852017cd04c.roa
File: 8a0baaff-63b2-3448-9111-f852017cd04c.roa (raw, json)
Hash identifier: fWQlEBEzljYMfi2/gnW0hf1lzGvZeFeHYbDEpe8ZwmA=
Subject key identifier: 3B:67:87:AB:66:5F:10:5C:A6:DF:32:2E:BE:7F:21:E1:C0:B5:FB:36
Certificate issuer: /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial: 010D0C9F4328584F6292D73B7DBD15F663B62C00
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/8a0baaff-63b2-3448-9111-f852017cd04c.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 36167
IP address blocks: 104.153.196.0/24 maxlen: 24
104.153.197.0/24 maxlen: 24
104.153.198.0/24 maxlen: 24
104.153.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:d7:3b:7d:bd:15:f6:63:b6:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=1ba04c8f-1878-4a24-8781-5dc73bcd832e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:55:4f:ec:e2:a0:69:85:fd:2c:9e:da:b8:
21:e5:06:de:d5:ff:25:cb:70:a3:fd:73:46:8f:c2:
8a:08:b7:9b:92:a3:7f:48:1a:13:78:5c:9e:fd:a6:
e5:70:46:75:ac:bf:30:e9:64:6d:9a:cc:31:8b:c6:
e5:ee:56:dc:1c:df:e2:c0:71:d1:df:7d:7e:a0:99:
96:99:cb:c3:c6:a7:78:46:61:b4:4e:f5:bf:b8:ad:
e0:74:89:87:4e:de:3a:77:8b:7c:b9:ca:5e:4d:b2:
90:dc:ad:e2:9c:70:69:a2:37:7c:50:5a:3e:cd:3c:
c8:91:ba:75:20:d7:41:c3:34:ea:1b:64:67:46:1b:
c0:6a:2c:b6:43:3e:82:ba:25:78:7d:8f:f5:50:e6:
cb:09:00:3b:de:28:32:f7:18:81:ec:21:ea:4c:c4:
ca:5d:01:b6:ce:e3:82:77:22:e7:d4:13:0b:89:6c:
d5:b2:df:fd:51:79:26:e5:c1:24:48:4b:e4:fe:e6:
33:c3:a0:01:66:a5:e9:c5:07:47:03:e2:6b:38:d4:
bf:3e:36:e9:70:21:a0:5a:f8:b3:4e:82:77:ab:1d:
38:d9:4b:a7:a9:30:b2:03:54:ca:e6:20:62:24:d6:
aa:e6:83:85:38:fc:63:19:23:92:ea:09:bd:73:42:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:67:87:AB:66:5F:10:5C:A6:DF:32:2E:BE:7F:21:E1:C0:B5:FB:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/8a0baaff-63b2-3448-9111-f852017cd04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
X509v3 Authority Key Identifier:
keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:b5:d7:f7:0f:40:df:5e:26:66:eb:bd:90:ba:db:78:74:2c:
c5:76:a9:6d:31:51:50:b1:60:99:74:39:aa:92:c5:d2:80:05:
2e:00:76:9f:82:db:7d:d6:cd:ab:11:f6:47:d1:40:c8:28:c1:
a5:93:70:de:fa:2d:7a:fb:7a:7f:64:77:a8:93:4b:71:35:44:
d9:71:7b:23:f7:fa:ac:07:ba:77:34:44:9e:5b:28:2e:03:8c:
39:d9:4e:8b:14:45:3e:45:76:c8:a9:c8:cb:88:d5:99:fa:df:
8a:c7:3b:f3:19:a6:1a:a9:80:fc:88:b9:93:7b:ea:cc:85:7d:
4d:71:38:ff:27:67:c9:34:96:17:d8:3f:88:e6:bd:e2:65:c1:
72:1d:99:ce:79:d0:f9:51:d1:c0:89:9c:23:e3:1b:8b:01:52:
03:74:b8:2d:ca:7b:28:dd:a3:4f:86:b8:bd:57:b1:fb:af:27:
50:db:bd:0d:14:2b:d8:7b:97:8d:75:53:ac:df:6a:28:c1:4d:
e2:d0:1a:16:35:7f:40:70:12:92:3b:e1:85:d9:01:32:c2:49:
e4:d9:08:ea:06:ba:a4:23:72:1c:17:05:8e:1e:5d:61:67:57:
ea:75:1f:9f:24:cb:31:09:71:b3:b3:5a:5f:79:c7:8d:e8:d1:
82:4f:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:19:29 2026 by rpki-client