
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa
File: fb7a217d-e822-3be1-b05d-382454b43eb4.roa (raw, json)
Hash identifier: PD35qiRxWxm+iR0o3kiAbKW//diUoHqLeAKoTlAqlbg=
Subject key identifier: 7A:E5:55:D5:3D:F5:23:87:ED:E4:10:0C:68:32:C6:B3:54:A2:78:23
Certificate issuer: /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial: 010D0C9F4328584F1CC79DA01F3B7EACEF7FB680
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 9025
IP address blocks: 153.46.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:9d:a0:1f:3b:7e:ac:ef:7f:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=fc5fc75b-37b9-4bdb-8153-a5980dd75c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:04:3b:36:aa:fa:2b:5e:9a:47:f6:07:e5:
19:6c:90:6b:b1:41:e5:21:ae:16:6a:66:05:e3:04:
e5:d8:20:6a:91:c1:61:05:68:ef:e5:77:5f:60:b4:
93:e5:aa:9b:f2:00:22:fb:55:c0:c7:a6:2c:dd:2f:
a9:fa:c7:a2:a8:a4:bf:75:6a:d8:71:2e:6b:ba:b9:
aa:80:ed:27:0a:cd:5b:85:cc:02:eb:80:d9:4c:36:
f6:01:10:dc:f2:57:16:68:cf:cb:2c:1f:9e:98:2e:
44:93:59:47:46:d9:e5:0e:e2:c0:d4:84:bb:62:38:
c2:38:a0:b1:14:cb:20:85:75:38:dd:fa:fe:1a:1d:
05:bd:47:6d:26:12:8c:6b:c7:c9:48:15:b7:b6:86:
72:d3:a4:2e:62:1a:ed:fe:2d:80:99:47:f5:1b:b6:
00:0b:38:e6:f7:74:54:ea:57:95:21:bd:80:fe:3e:
01:ac:e5:53:62:b0:96:4d:6b:81:b7:f4:fe:fe:d4:
da:41:47:83:0a:73:43:94:dc:36:ae:70:13:16:d0:
bd:a6:45:16:e2:2f:f3:24:3f:7a:f4:2a:32:76:b7:
75:a1:46:dc:ce:a5:a4:8a:c3:b3:19:8a:e3:3b:62:
26:6d:98:13:5a:a4:fa:a8:07:0d:7d:f6:28:72:3f:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:55:D5:3D:F5:23:87:ED:E4:10:0C:68:32:C6:B3:54:A2:78:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
X509v3 Authority Key Identifier:
keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
sbgp-ipAddrBlock: critical
IPv4:
153.46.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:43:e8:0c:f0:75:f5:ed:50:d6:5e:f0:70:2b:c5:6f:6a:81:
00:3d:09:8a:4d:06:e0:cf:ef:86:06:04:7c:81:7f:6a:b3:ee:
24:a0:a9:dd:8b:da:c1:13:6e:39:8b:81:5e:b8:0d:7f:9e:dc:
ae:7d:70:1c:76:16:ba:54:29:42:0e:4b:2e:af:98:37:49:10:
10:e0:2d:79:c5:fb:7e:f6:09:43:8a:3d:7b:bb:0e:9c:78:c2:
2c:11:6e:ea:fe:d8:87:94:d3:8e:91:d6:6c:05:8f:ea:7d:a8:
67:6b:a9:75:fc:e9:7b:34:19:76:18:85:29:b0:de:78:9f:3c:
1b:b3:99:b4:3a:87:14:12:e8:a0:8e:8c:8a:5c:80:fa:8f:3d:
7e:0b:aa:eb:b5:56:50:ab:15:5c:42:5b:c4:57:f5:ed:9c:cc:
32:80:16:ac:a9:d8:94:72:ba:bd:c6:dc:74:24:d8:53:97:9c:
6d:71:99:64:ed:a5:f0:5d:58:92:44:b3:8e:d6:61:af:9a:be:
c3:60:44:6e:78:a6:7c:59:bf:6a:e6:d4:bb:71:72:bf:f1:b7:
5b:02:8a:f9:cf:b1:44:ed:c9:da:0b:9d:95:51:21:41:77:61:
1d:1e:53:d9:b7:14:b7:fd:59:72:84:a2:fb:e7:89:60:5c:7c:
3f:0c:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:56:05 2026 by rpki-client