
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0dc3c956-89b4-32e1-8157-034f4e28177c.roa
File: 0dc3c956-89b4-32e1-8157-034f4e28177c.roa (raw, json)
Hash identifier: GlhhH+QbEDhu5n0RE4Akh/PF7mLes/lm/IyHrnbn8GA=
Subject key identifier: 66:54:9C:D8:A0:CD:DC:1F:8B:F9:4D:84:D9:A0:1F:41:9A:41:70:79
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584EBC77082D37DFDBF8D09EA3CC
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0dc3c956-89b4-32e1-8157-034f4e28177c.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 23473
IP address blocks: 153.33.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:08:2d:37:df:db:f8:d0:9e:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=561d29f1-0b58-4e78-a875-20b06205c27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:21:0c:28:b1:c3:aa:3d:6f:c6:50:51:9b:
90:2f:75:60:56:32:dd:f2:09:7c:86:8d:c1:69:48:
32:46:fe:f5:78:19:db:52:94:a2:05:6b:8a:b7:01:
ba:01:18:ee:bc:ed:dc:39:18:da:0e:f5:b8:58:ff:
04:37:0b:07:2f:08:d7:1d:38:cf:58:ac:15:42:9b:
29:e0:c4:91:7e:df:c6:cd:6b:c8:2e:8f:ac:43:3e:
7d:bd:8a:ab:bf:8c:b4:65:f3:9c:63:12:49:4a:d9:
58:44:65:21:7a:8a:9f:68:76:7a:0a:b7:23:07:33:
5f:d3:9f:0e:72:be:d3:18:90:2d:dc:cf:54:b3:4d:
04:25:1d:02:fe:12:91:7b:c9:25:e1:5f:91:a9:a7:
81:d6:24:d4:3b:17:5f:87:32:e4:26:d5:79:f5:82:
a1:c8:4d:c5:0c:5d:98:a6:07:53:e1:01:fe:a5:4f:
9f:e6:47:6a:21:1a:51:ef:e4:ba:eb:66:28:e3:00:
46:2e:f2:72:28:e4:d8:6b:e6:57:d7:44:5c:8b:79:
33:56:08:df:cf:53:b8:0a:b3:bb:32:70:93:51:1c:
e8:aa:cc:1f:95:bd:c1:f9:a8:e6:39:52:39:61:ae:
c7:6d:4b:d9:45:b6:b8:ee:46:b9:a7:ec:50:94:2a:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:9C:D8:A0:CD:DC:1F:8B:F9:4D:84:D9:A0:1F:41:9A:41:70:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0dc3c956-89b4-32e1-8157-034f4e28177c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:b8:be:91:d0:c2:00:4a:78:30:3f:66:54:03:1e:bf:07:6a:
f0:0b:cc:e6:df:23:44:74:be:11:58:73:eb:c0:86:a7:01:05:
6b:96:dd:75:74:2f:d5:55:17:5f:f5:40:b0:91:fc:2d:5e:d8:
7e:a9:29:fe:29:39:e4:49:b5:44:53:d2:a0:94:4d:7c:c3:59:
89:8d:5a:0a:95:d4:e2:1e:c9:aa:d5:ed:7a:56:67:bd:6f:1e:
f2:bb:7e:80:81:d5:a0:aa:f2:3f:3c:b1:29:fb:70:92:21:3b:
57:3e:2c:e2:33:56:cf:be:e4:db:52:bb:ba:9c:e7:6d:b1:96:
ef:17:0b:ab:77:83:f4:6d:10:a6:a2:13:1c:e6:28:a8:67:93:
05:d8:1f:ba:bd:bd:b5:3d:31:42:ac:fc:a0:24:18:db:d6:ad:
7b:4e:63:1e:96:93:e8:5b:cc:45:32:f2:af:06:e0:40:67:4f:
bc:4d:13:b7:b8:6f:74:9e:69:5a:35:77:05:1b:2a:c0:fb:fe:
55:8e:5f:78:35:80:a9:36:17:a1:fa:5a:04:9a:8c:7e:8e:4e:
66:7b:b7:42:02:ac:d0:7e:48:92:72:97:29:6c:51:cf:1e:a2:
ab:2d:00:89:2d:e4:7e:19:45:a6:8a:0b:53:c4:de:8e:6c:a8:
1b:1f:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:45:19 2026 by rpki-client