
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
File: cfbac226-9694-3b77-98b0-76526b389042.roa (raw, json)
Hash identifier: SU4Mkrkv6o3qch7q1jUG/1r4zddQfdKm+JCmEwz7SJM=
Subject key identifier: B5:20:8B:3A:E0:EE:F4:43:F7:4E:5C:18:4B:5D:F0:1B:17:2D:F5:06
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F4328584DCAFB07A261179C693B254040
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 25697
IP address blocks: 209.151.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:07:a2:61:17:9c:69:3b:25:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=8dd92c20-6ceb-4645-99e8-3be855e91653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:08:09:00:b7:0f:9e:e7:6f:7b:61:41:ea:
8b:09:80:16:e6:f5:68:b9:e6:d9:6e:18:d4:42:95:
bd:d6:aa:ca:68:c0:72:7c:3b:a4:ed:4b:82:f6:96:
2a:2e:d3:d3:5a:51:15:86:39:2a:d8:ac:86:07:f8:
10:03:63:0b:ad:c7:25:2c:35:00:4b:c0:9c:95:5a:
db:64:9b:ac:43:6e:43:3c:4d:86:0d:b9:5a:48:01:
b6:26:ad:13:16:0c:51:c9:d8:4d:ec:e2:48:c0:13:
30:ad:65:8c:1b:54:64:73:10:d6:84:28:49:aa:4b:
ad:ff:75:77:17:a2:c9:34:b0:78:69:4b:1d:19:31:
4e:d2:54:f1:34:60:f8:24:a5:20:33:99:4a:e5:99:
e3:02:14:16:c6:d4:64:cc:c1:30:d1:f1:7d:cf:0a:
86:eb:8d:a4:25:23:5e:c4:48:b8:06:c3:73:18:80:
b5:00:96:98:a2:71:11:84:d7:ea:5e:ab:2b:b0:c1:
87:41:29:d4:89:5e:d1:78:27:07:db:51:80:00:64:
5f:e2:40:16:45:1b:0d:58:c0:f9:27:21:25:20:e9:
d4:74:22:d6:23:d8:e5:f0:0c:63:c9:c9:5b:e0:3a:
b7:93:f4:15:01:24:4b:7f:0b:0f:72:a5:d3:b7:09:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:8B:3A:E0:EE:F4:43:F7:4E:5C:18:4B:5D:F0:1B:17:2D:F5:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:cf:ba:86:f8:14:45:94:c7:ef:ca:79:e2:e9:02:74:b7:3b:
05:ba:59:3f:d7:30:c0:64:6b:b7:54:b5:1a:f8:c3:a0:25:23:
d7:1b:7a:5c:41:57:c5:da:97:46:b3:dd:0f:20:65:a5:4b:2a:
0e:76:9b:d2:b1:93:ce:77:13:28:ab:91:2b:96:61:c5:ba:59:
91:9f:a5:56:aa:51:73:07:2e:f3:35:53:f6:e7:b3:75:71:16:
b1:d2:fc:99:da:65:0b:4c:b9:72:46:b3:0d:db:66:75:03:2c:
53:14:25:6d:52:34:b2:08:7b:41:9a:04:73:a8:af:fa:a2:d5:
ed:ed:a4:c3:c3:12:cf:44:e6:db:42:bb:86:00:af:ab:46:2d:
12:38:e0:9b:81:d3:be:29:43:23:9a:0b:dc:a9:4a:3a:75:c9:
cf:87:36:51:75:d6:fd:5b:57:a5:06:7f:bb:22:8b:63:6b:2a:
69:8f:29:80:89:5f:21:df:38:0b:59:fb:5d:25:6f:6c:55:e3:
c2:bc:ce:73:3c:6c:c7:8e:78:7a:d7:8f:33:7c:c0:5e:d0:5c:
d3:b1:b4:fe:c6:8c:c7:42:33:0e:60:4b:ec:00:14:ab:e8:16:
dc:ac:b5:f2:7e:9f:42:7b:c4:1f:88:e5:bb:8b:48:0b:91:e2:
d7:93:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:19 2026 by rpki-client