
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa
File: 422a0f33-2965-34cf-afb3-c607d0e91cbb.roa (raw, json)
Hash identifier: fCnGvsXrGgjPeKt8G0ijkU6viHOHPybaUoPSn6c9c2w=
Subject key identifier: 59:D2:4F:42:03:96:48:94:9D:E6:90:7F:F7:24:B6:0C:44:89:3C:2E
Certificate issuer: /CN=15986e61-33e4-484c-ae89-1cac7765c365
Certificate serial: 010D0C9F4328584F119CEFF117692441FA466D50
Authority key identifier: B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 397906
IP address blocks: 158.247.61.0/24 maxlen: 24
2606:b840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:ef:f1:17:69:24:41:fa:46:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15986e61-33e4-484c-ae89-1cac7765c365
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=64f0f5de-827a-4935-9005-90a054e16b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:69:71:17:3d:4a:59:a8:7b:bd:ac:58:4c:
15:d7:41:4d:fa:dc:24:72:73:8f:23:fe:8c:f6:bd:
f3:47:3e:c3:3b:39:99:07:3c:8e:ec:b5:b5:65:f3:
ca:2b:1a:17:19:1e:44:8e:f0:ef:00:a9:93:8c:f4:
a7:4b:14:87:b6:69:82:2c:4b:42:bc:9e:d6:74:da:
ad:6c:5a:d8:9f:26:fa:b0:13:2a:5f:d4:8f:51:08:
6f:32:7d:77:bb:10:19:32:17:36:91:91:19:9f:9f:
b0:01:16:12:00:d8:41:13:34:ef:3e:09:84:ea:ad:
a9:71:65:92:36:b3:18:b4:b7:9f:53:eb:7a:67:4e:
8b:77:30:2c:63:91:99:7d:24:7e:7e:51:69:31:d8:
93:de:59:06:41:6b:9f:ab:eb:e8:ff:4e:ca:a0:f5:
85:97:55:78:1a:49:97:7f:d9:aa:53:33:08:35:ba:
2e:65:ef:39:d6:79:75:37:2d:63:9e:03:e2:c5:a0:
50:43:d7:df:57:fc:97:55:4d:a3:39:88:ef:c5:50:
50:69:64:08:09:58:22:f5:a6:57:1e:2c:dc:83:66:
84:2f:c1:e7:20:4c:16:7a:ff:c5:f5:8b:12:5d:cf:
ab:0b:14:f9:97:fb:b7:bf:34:a2:1b:62:3b:85:92:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:4F:42:03:96:48:94:9D:E6:90:7F:F7:24:B6:0C:44:89:3C:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl
X509v3 Authority Key Identifier:
keyid:B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer
sbgp-ipAddrBlock: critical
IPv4:
158.247.61.0/24
IPv6:
2606:b840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:de:75:7f:b6:7c:9d:d5:b3:bb:cd:e5:df:46:73:df:1f:f2:
59:ba:2b:af:d3:9e:61:c6:33:2f:64:cd:f0:92:ea:c4:b8:d7:
ac:e0:c5:3d:4f:f4:a5:a1:40:70:6a:7e:e3:d7:6d:e9:9c:80:
d9:2b:a4:0d:0d:82:48:d4:f6:34:7f:14:a3:06:2d:27:92:f2:
0b:e4:2a:e9:71:9e:97:d4:62:74:d4:2d:92:1f:2f:a7:fb:f7:
70:7e:30:0c:09:7c:7e:7a:3d:df:3f:4f:da:6c:83:ea:80:e8:
7c:4a:45:86:75:a4:28:72:7c:c9:68:ff:66:f7:a4:55:bc:b1:
4a:a4:fa:89:f2:32:1a:2c:16:96:88:5f:c5:ac:c1:c7:04:48:
a3:fc:07:6d:21:1d:c5:89:69:9a:4a:4a:0e:38:9b:6c:f2:21:
7f:f0:1a:80:48:d7:60:6c:fa:f1:ae:d1:ae:1e:08:e6:33:f3:
e0:f0:a4:84:70:a6:b0:cf:87:65:c8:6f:4c:f6:c3:3b:d2:83:
b8:45:71:38:c2:55:d3:f5:51:20:2c:e3:0e:0e:db:b5:c7:ea:
cf:5d:55:88:0d:b7:ec:95:f8:de:95:97:1b:34:bf:7a:b6:b7:
95:e5:10:88:76:9d:23:f9:78:b2:36:39:f6:3d:27:c1:53:52:
5a:aa:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:11:08 2026 by rpki-client