
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0847cb01-186f-36e3-b414-3bb9ae76892c.roa
File: 0847cb01-186f-36e3-b414-3bb9ae76892c.roa (raw, json)
Hash identifier: sLIlkJek+jVtv+ek/Zw4KZoLQeWHoFXwo+Kj0ntDmFc=
Subject key identifier: 9D:B2:DE:5F:E1:44:E5:DC:1A:3C:BD:93:F0:A4:88:C7:F1:FE:E3:F4
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584D32D4DD73656CBA9F5BAC5180
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0847cb01-186f-36e3-b414-3bb9ae76892c.roa
Signing time: Tue 17 Mar 2026 13:00:41 +0000
ROA not before: Tue 17 Mar 2026 13:00:41 +0000
ROA not after: Mon 15 Jun 2026 13:00:41 +0000
asID: 23473
IP address blocks: 153.33.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:d4:dd:73:65:6c:ba:9f:5b:ac:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Mar 17 13:00:41 2026 GMT
Not After : Jun 15 13:00:41 2026 GMT
Subject: CN=1b91eac8-2cfc-475d-a5e5-efd7786c0d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:e0:97:16:ce:9a:e6:6f:af:71:e1:62:4c:
46:90:f1:5a:a3:fd:a8:66:60:b7:4e:95:d1:e4:b4:
fe:41:62:0d:0a:6f:82:e8:30:82:b5:3e:fb:47:2d:
2d:7c:d0:61:6d:9b:51:63:bb:de:09:b7:ac:5d:72:
fc:a7:48:1c:41:56:2a:03:06:01:66:d5:e2:ec:65:
c8:51:99:c1:d7:de:c5:76:79:da:31:af:95:a5:2a:
cc:18:1c:8b:cc:64:f1:f2:bf:d9:ca:76:2b:55:18:
73:97:62:9e:b2:54:e9:a2:eb:90:d1:de:3b:52:1b:
d1:e5:9e:d3:e2:1b:07:97:a1:4a:09:68:ad:11:2f:
ff:70:8c:96:d9:ce:e6:6e:79:7e:14:9a:26:5c:3e:
c8:c9:61:76:c9:e6:bb:b9:5e:c8:fd:a6:c4:5b:bb:
9a:13:80:c1:17:5e:e5:39:84:b1:a7:21:59:a6:8f:
10:3e:6b:c0:bf:d3:42:3c:bb:26:8b:75:b7:7d:fa:
d1:e8:70:5a:47:c3:8d:bf:71:7e:c8:50:a1:ce:49:
eb:7d:46:0f:05:e0:83:1c:ea:2d:b1:b7:b6:fd:e6:
34:3a:0e:ef:67:c3:ae:9c:0f:00:3e:67:b9:8a:f1:
b3:80:43:4c:2e:d9:e0:98:70:96:3a:d6:d0:94:f5:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:DE:5F:E1:44:E5:DC:1A:3C:BD:93:F0:A4:88:C7:F1:FE:E3:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0847cb01-186f-36e3-b414-3bb9ae76892c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:ef:fc:e7:05:cf:37:ea:c1:1c:75:fa:8e:dd:70:f4:80:2d:
79:e3:de:d4:31:55:e9:1d:e8:e1:64:d5:73:d5:32:53:bb:ca:
8b:ad:0f:f9:35:42:26:29:08:a6:9d:75:e4:b5:bb:a2:13:1a:
3c:d0:7f:ac:9e:2e:db:39:13:ff:0b:92:a6:8f:6b:e0:7c:63:
78:2a:7e:2d:e0:12:f5:89:cc:bc:3d:40:13:5d:09:53:18:2b:
5b:4b:97:03:7a:11:41:df:fd:45:da:e8:df:5f:09:aa:ab:80:
5b:19:0c:f1:67:49:8e:7b:b9:4a:4d:dc:c7:6e:a0:74:21:b6:
39:ba:d2:f7:4f:d1:d0:74:31:08:21:be:ca:18:6c:ad:7c:c4:
d4:9f:8d:2d:a6:ac:f5:98:41:77:89:0c:84:a2:ac:85:a5:ba:
2c:90:b4:9d:de:16:a8:77:72:48:38:2d:49:32:b3:30:9a:83:
14:4f:80:f1:50:3e:05:09:fd:2f:12:d9:c5:a4:5b:62:21:36:
c3:dd:08:34:e2:3a:31:49:fd:71:04:82:da:03:30:70:9e:2d:
24:e5:e9:4b:d4:f9:d0:3c:20:98:82:31:6c:4d:5b:6d:9d:8f:
94:be:3e:e4:9f:c2:22:06:54:fd:67:4f:10:c8:c7:b2:2b:65:
66:36:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:58:27 2026 by rpki-client