
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa
File: 8085afc2-07b3-3a9d-b454-91afbe081f01.roa (raw, json)
Hash identifier: x33ODfUuuYNUs0SaSI1gJGWZn4bGOnhDQlaojjXuzKQ=
Subject key identifier: 87:9D:8D:5D:C9:A0:73:5F:D6:91:45:26:5B:EB:68:88:07:85:BD:24
Certificate issuer: /CN=37d65fc0-6e4c-4477-9488-812657d0d39e
Certificate serial: 010D0C9F4328584EA79774CD6B75F48872FCB000
Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 153.45.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:74:cd:6b:75:f4:88:72:fc:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=455973b3-677b-4554-863f-8531a9195db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:f9:d8:bb:c9:f3:e3:f1:33:b9:c5:05:38:
86:f6:77:f5:26:d7:ed:06:75:70:c5:dd:d5:05:5a:
f0:80:9f:c8:c8:09:ef:9f:f2:1b:39:5f:18:84:1d:
42:8c:d9:a8:69:f9:bf:3a:0b:f6:0e:c0:61:82:01:
0b:6a:dd:ad:f2:e2:27:01:1f:e0:69:36:2f:e6:4e:
f5:45:f3:7e:0d:dd:05:ba:20:c4:a4:c1:5f:4c:a9:
73:6a:d2:64:dc:4b:bd:26:72:0e:18:31:68:39:70:
ed:79:23:43:ee:cc:86:c5:21:17:40:39:04:9d:dd:
77:e3:5d:d1:60:0f:41:03:46:f6:71:b6:a5:03:20:
aa:1f:7d:80:50:9b:4d:d6:af:8c:bc:82:fb:d7:50:
c0:06:db:6b:7d:6b:c8:c5:94:65:f2:ca:cc:ae:64:
d7:94:b9:04:78:9b:c9:86:ef:99:1f:6c:99:b7:8d:
50:3f:dc:b9:b1:51:94:72:88:49:05:04:6b:7f:ba:
b3:53:08:3d:75:ca:8c:e1:bd:ac:db:03:16:45:dc:
02:87:a5:1f:93:4f:be:a1:60:17:84:76:a1:4d:85:
3f:65:6a:cf:cd:63:1f:39:1a:6a:67:f6:ed:e6:0d:
c2:19:e1:f3:65:36:cd:0c:8b:dc:9f:e9:23:9b:70:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:8D:5D:C9:A0:73:5F:D6:91:45:26:5B:EB:68:88:07:85:BD:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl
X509v3 Authority Key Identifier:
keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
sbgp-ipAddrBlock: critical
IPv4:
153.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:94:3c:e4:41:b0:53:c5:bf:5e:68:cc:0a:b7:21:80:d4:c3:
24:8c:ac:e5:ed:94:26:42:49:77:3f:65:b7:62:f1:cf:be:30:
c9:05:26:31:7c:9f:a1:0e:40:e8:18:cc:49:96:ea:3c:7a:96:
92:38:3f:ed:69:64:af:4a:d7:91:5c:ba:b3:c7:5a:e6:df:cf:
fc:1b:c6:3e:56:2a:0e:ca:cd:19:fa:e8:aa:2f:1f:3d:b3:ae:
e0:be:6f:e2:9d:65:a3:74:36:6d:46:a6:ca:40:d6:a3:f0:02:
b9:75:5b:ad:7f:bf:44:43:0c:58:dd:24:8e:2c:a0:ba:e9:da:
39:6c:83:80:1c:2e:e0:15:99:89:f9:ef:4f:e5:c5:e2:c3:e4:
37:b9:dc:e9:51:f8:6f:54:b8:0c:95:36:79:fb:e3:3e:43:07:
cf:03:87:98:5d:f6:4d:1a:ea:c6:93:a3:22:77:50:cf:ad:1d:
6d:30:14:dd:92:aa:75:c2:4c:ee:0f:83:bd:7c:8e:7a:98:6a:
91:4f:15:35:dd:a5:28:c5:ba:2c:c6:53:51:8e:70:67:3d:a7:
5e:dc:da:31:dd:c6:17:59:b1:3a:fe:37:49:51:42:c0:2a:c4:
8b:03:a9:b9:1e:74:37:5d:d2:c0:d3:d5:fc:ab:3d:e6:ef:25:
63:29:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:23 2026 by rpki-client