
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1c3b2377-45b0-3216-93d2-15439d31bb0b.roa
File: 1c3b2377-45b0-3216-93d2-15439d31bb0b.roa (raw, json)
Hash identifier: XN6j7zxG6ckUI+NoP26V8/eH9zMGqAkU6cW0xWOCL2g=
Subject key identifier: 47:C4:37:24:17:1A:F3:C0:7B:0D:45:35:27:9F:71:A8:19:0F:AC:66
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584F4C3D4F14921B243761014E10
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1c3b2377-45b0-3216-93d2-15439d31bb0b.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 23473
IP address blocks: 153.33.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:4f:14:92:1b:24:37:61:01:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=4a1d09b6-638d-4f31-9210-857be79b5eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:76:e4:0a:0c:df:7b:b1:d0:ec:71:e5:ad:
14:f2:c6:b1:04:5c:e3:cc:a0:35:41:52:ab:6b:74:
f6:48:e4:db:45:f3:f8:10:c7:3e:bf:75:0f:46:c9:
6e:39:d8:c7:f7:39:fb:79:05:47:7a:6b:67:ab:77:
48:ac:67:73:5d:94:b4:ec:81:fa:0c:f5:a2:a6:9a:
9d:91:5c:4b:aa:7f:ad:0a:73:6d:c8:32:ce:29:57:
5d:9f:25:58:bc:45:fe:78:02:d2:d4:66:65:65:bc:
b5:ca:b9:f2:00:c8:5d:ef:fe:41:81:94:52:5c:0f:
4b:81:9c:0f:45:f4:ec:83:a6:a2:f8:1d:20:b9:88:
cb:2f:a9:63:f0:a1:8c:ea:52:b1:42:b0:1e:84:92:
1a:7c:58:1f:06:e2:0f:44:c9:68:32:e8:e7:a1:89:
34:9c:60:dc:cb:f1:18:f6:6d:71:f2:0e:1b:5c:bb:
a3:6a:78:c1:25:a8:db:cf:aa:9c:3a:36:a7:7f:71:
36:ca:1f:12:ab:e9:54:26:e5:5c:93:8d:1e:62:07:
93:43:c5:df:8c:a6:b7:37:cc:4f:c9:5d:fe:92:72:
e0:90:06:50:20:09:ec:d5:48:4e:13:2e:fe:e9:9e:
26:d8:79:6f:a5:b3:db:05:6d:c0:07:91:c5:9f:b7:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:37:24:17:1A:F3:C0:7B:0D:45:35:27:9F:71:A8:19:0F:AC:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1c3b2377-45b0-3216-93d2-15439d31bb0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:93:17:ce:08:0e:66:d8:84:9e:ca:f0:53:a6:49:05:93:85:
74:c4:d7:a6:45:45:b9:5f:47:35:a3:83:9a:99:20:7d:5d:cd:
79:37:bd:76:31:26:b3:4e:08:d5:7b:a1:f6:3b:e1:b2:2c:c4:
5b:9a:0d:60:43:88:33:30:ff:d0:c8:c3:62:d7:20:f1:7b:f5:
47:e5:36:ea:bc:53:bb:a3:2a:2f:a9:a8:fb:2f:51:33:f4:17:
45:75:a7:d3:30:ab:55:f9:60:21:f1:32:67:c4:21:07:85:ed:
dc:3f:10:9b:35:82:e5:08:a0:ee:71:ea:be:be:50:d1:0d:47:
53:7b:4c:d9:26:2f:c9:6d:18:d4:58:63:cb:01:33:48:51:3a:
c8:8b:cc:4d:96:19:ec:2f:83:8d:cd:49:23:09:ed:8f:dd:20:
d1:50:60:09:7d:01:dc:00:e3:69:40:5a:34:42:a0:f1:2c:d6:
a3:10:f6:79:8f:dd:7f:f3:34:47:3c:49:b5:33:d9:03:1f:3a:
b0:4d:c1:0b:3a:44:6f:a5:9e:e6:e3:b2:a2:11:35:26:f7:92:
95:4a:3b:49:b9:e9:e0:c8:d6:06:58:38:dd:e0:35:aa:36:33:
a3:0c:71:75:42:f8:9b:bb:dc:f1:bd:1a:4d:97:9b:74:18:ac:
b4:68:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:26:37 2026 by rpki-client