
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa
File: 0bac6c3d-c4d0-3185-9107-292db0efe582.roa (raw, json)
Hash identifier: 22fGImWgRNLFBdy1GAOIomYvxQLNtxKdNNdsBFH/ESE=
Subject key identifier: 27:2E:2F:1F:AA:92:D4:25:3B:CD:27:9A:76:7C:78:0D:85:5A:B2:D7
Certificate issuer: /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial: 010D0C9F4328584F497579D7F7BE43E3EDD0BDC0
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397898
IP address blocks: 67.159.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:79:d7:f7:be:43:e3:ed:d0:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=81e7d1ed-6026-40b8-8d30-3e89ed10621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:97:cd:86:10:14:3b:90:06:df:2c:85:d8:
9a:a1:a5:d4:16:88:76:95:4a:a7:13:ea:0b:85:ec:
9a:3c:f7:f1:57:23:20:8e:6e:40:44:b9:fa:da:a8:
87:88:f3:48:9a:8d:f5:6e:93:11:e3:98:5e:f8:c8:
0a:0b:48:b1:47:c3:be:e8:c3:11:49:d9:26:14:57:
86:3a:70:24:be:f2:9a:a2:cd:c6:2f:97:33:ec:9b:
57:d7:e5:23:a7:8a:13:4a:ef:44:c7:45:9d:00:15:
26:3b:70:81:2e:d7:1c:b2:d7:dd:ef:04:45:94:44:
ef:e3:8c:00:1b:59:af:66:6c:3b:06:8b:fc:dd:b3:
30:4c:f1:be:35:a9:2e:be:74:e1:46:71:31:05:75:
89:cb:4d:cf:9a:d0:20:2c:16:d3:10:69:1a:7c:a4:
92:3e:61:98:26:0b:f6:ac:7e:3a:8e:b8:c2:29:bc:
58:54:7b:8a:f2:ba:e7:8f:1a:f3:98:6b:e2:1b:56:
d0:f4:26:77:70:6c:0c:b6:a5:7b:69:bb:a4:94:ba:
e5:fe:b0:f1:ed:29:70:b5:ce:b8:18:cd:a2:92:c7:
d4:7f:94:d5:a8:56:5a:f0:53:c8:fa:17:dc:82:19:
82:d9:94:74:0c:f5:9a:99:4f:07:83:43:26:1f:64:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:2F:1F:AA:92:D4:25:3B:CD:27:9A:76:7C:78:0D:85:5A:B2:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
X509v3 Authority Key Identifier:
keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c1:14:16:e0:5e:1f:fb:e4:fb:53:27:7a:95:b9:bf:64:9f:
d0:db:b2:f4:08:fe:c4:6a:97:12:dc:c5:70:47:30:9b:b3:dc:
a3:30:bc:f9:00:93:f3:92:79:19:5b:08:86:dd:b3:bc:a8:bb:
e4:5d:bb:64:4d:d0:2c:f7:16:10:fc:f6:64:4d:ae:a4:16:7c:
9d:a7:68:b5:3e:dc:91:aa:f5:e7:f5:a9:15:0c:b5:1f:cf:12:
02:ec:01:52:d0:f4:d9:7e:d7:05:3d:2b:36:96:e9:e5:e6:31:
15:19:75:7b:cb:d6:24:5d:d9:3e:da:8e:d4:7e:70:fa:e2:fa:
4b:65:2e:1c:85:b3:9a:36:25:d9:1d:cb:14:cd:57:b0:44:b4:
b6:82:6b:0e:1c:4a:4a:e0:92:5f:a7:5f:e6:a1:8f:6a:1b:80:
01:ca:99:9b:d0:31:71:20:fa:0d:be:42:dc:40:ef:74:5d:78:
8f:28:12:a9:c0:36:3d:b7:83:c6:f6:0e:80:5a:cf:fd:0e:37:
df:50:41:9f:69:c4:a5:1d:7b:45:4c:c7:b4:cb:e5:ed:30:f2:
44:78:04:c7:6c:3e:70:ca:5f:78:04:fd:d4:64:a4:2a:83:a6:
19:e0:ae:95:8f:27:9c:29:be:68:46:60:16:09:9e:dd:bb:51:
76:32:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:47:22 2026 by rpki-client