
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
File: 3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa (raw, json)
Hash identifier: dOulm92nuaON/i4TJj+9Ovi41IICNyRN9EFlQGDaaJU=
Subject key identifier: E7:EC:FD:85:01:C1:EB:A7:E9:D8:53:67:5B:23:09:53:69:A0:A9:ED
Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial: 010D0C9F4328584D9A200EAF5A64428915B8F140
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 16509
IP address blocks: 164.153.128.0/24 maxlen: 32
164.153.129.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:0e:af:5a:64:42:89:15:b8:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=082a921e-2b50-4dc1-b55f-b9ac5dd28acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:c5:44:1b:cf:b8:7a:32:aa:be:b1:b1:b6:
7a:e6:55:c6:58:85:ef:85:dc:54:9f:8a:67:e0:d6:
1a:f0:31:2f:4d:ef:75:06:d3:0e:b7:cf:ce:9f:f2:
69:d3:77:3b:8e:50:d2:0b:cc:61:13:d5:e1:0f:c9:
08:0e:3e:ca:97:fe:53:66:ce:0f:fb:86:f9:de:ad:
ac:bd:17:94:65:4a:96:3c:4b:7e:62:60:6d:b6:74:
ca:6c:39:3c:04:85:f6:6d:47:1b:3c:1b:17:04:b3:
5d:96:cd:9c:88:a6:2b:16:3c:84:47:f3:fd:06:a8:
26:a7:ea:bd:a4:27:bd:43:36:16:e3:89:c1:67:7d:
8b:46:56:8b:75:67:53:30:7f:15:bf:25:75:f5:3e:
b8:44:d5:cd:66:15:bf:a3:7e:09:d6:90:30:d2:ce:
61:bc:ab:02:ea:88:c2:44:0c:f1:bf:c4:4c:52:68:
33:af:f0:31:31:2d:b7:d1:37:d9:61:2c:be:02:6e:
6d:41:83:ba:c6:45:0b:22:ca:28:d7:a9:99:50:2b:
ca:7d:4b:5e:39:6f:b2:36:89:56:d4:df:42:e7:eb:
5a:ed:0e:52:86:2b:1f:cb:e4:f8:e0:5f:c3:1f:c2:
da:a7:1c:fa:85:78:0d:c4:09:69:d6:30:58:9a:d0:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:FD:85:01:C1:EB:A7:E9:D8:53:67:5B:23:09:53:69:A0:A9:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
X509v3 Authority Key Identifier:
keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:31:74:78:85:ee:c7:e4:d8:c0:46:e5:76:95:a4:9e:45:fc:
89:3a:c1:13:51:01:6b:13:06:43:e5:ec:c1:3c:9d:f3:95:d5:
61:62:c4:aa:7a:5b:e8:c9:52:33:f2:80:13:cd:85:52:04:68:
29:f7:64:78:7d:b3:54:c7:4f:07:49:63:ea:45:e8:14:eb:84:
ad:cc:aa:e5:f3:ba:21:ae:0c:09:6b:b7:f2:f1:c1:7e:3b:b0:
b3:83:a7:a9:30:53:9c:41:81:3a:f2:1b:58:fd:d7:ae:82:71:
1a:f6:13:04:7f:96:41:4d:18:bc:9e:53:9c:b4:04:38:47:82:
82:a8:05:36:bd:2b:18:b9:c7:bd:e6:f8:62:20:4d:ca:57:d5:
02:86:ec:6b:a3:d5:30:7c:71:4c:41:0e:20:4d:7b:04:01:b2:
15:9c:db:42:37:dd:64:24:b1:cc:46:c9:cc:46:11:99:92:dd:
a2:77:17:c3:0e:2c:ce:49:a6:aa:4a:b8:8c:9e:ab:40:cd:de:
b4:05:9d:45:68:a2:0b:97:11:d8:30:2c:b6:da:2b:89:e4:47:
72:49:2c:1a:f1:6f:4c:58:5b:d9:e8:2d:3c:68:71:8b:47:96:
0f:87:40:29:0e:4d:0c:b2:e8:5a:93:eb:61:8b:14:e8:fb:11:
8c:72:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:06 2026 by rpki-client