
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
File: 3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa (raw, json)
Hash identifier: LeCHZWppxj9/GdJGVZVpWXNRqBUcVbCqVY2TixgiCTM=
Subject key identifier: 6B:83:80:D4:53:0E:01:CE:A1:C2:EC:D2:EF:50:67:C0:71:3A:44:58
Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial: 010D0C9F4328584F1CC79E2D104FC96C505B5540
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 16509
IP address blocks: 164.153.128.0/24 maxlen: 32
164.153.129.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:9e:2d:10:4f:c9:6c:50:5b:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=ec2c03bc-27a5-4b4e-bdcd-e560a3c9ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:ff:d8:64:d0:3d:41:81:87:99:a1:2c:8b:
57:69:88:c6:eb:ff:98:16:81:2a:b6:c6:8e:ee:64:
62:d3:d6:a0:d4:98:66:b2:14:99:64:41:3d:85:f4:
f7:50:f3:56:1a:fd:3a:37:9b:b5:bd:8f:3d:df:46:
25:cf:a3:72:a9:3a:a1:a4:4d:7d:44:f1:5d:cc:32:
d4:5a:c7:09:fb:0e:a7:c0:6e:3d:20:c3:18:c2:cb:
e8:24:c6:af:ce:bf:30:1d:2d:61:05:e9:ee:0c:ea:
55:a4:ea:b7:34:56:fb:0c:81:4d:4d:36:f4:a4:8f:
04:76:89:47:db:f4:92:a5:9e:4d:58:95:d1:a0:cc:
2a:cd:16:6a:1d:29:fd:d2:10:cd:8d:7d:43:4e:b1:
3a:72:93:ac:6d:9a:5a:24:2a:51:79:78:e5:fd:c7:
9e:21:d3:c7:88:21:da:d5:5e:83:55:e7:d5:08:4b:
3e:6f:e6:ad:19:d7:80:c9:e2:d7:f7:65:4c:38:cd:
64:26:ee:b4:3c:1f:af:31:82:71:39:99:52:c8:d7:
49:a3:2a:45:8c:5d:b5:7e:3b:18:52:24:c2:1c:01:
6d:13:15:19:af:29:51:5b:cf:70:5f:07:1a:c2:5e:
f4:08:11:72:14:f3:4b:57:62:c8:5b:e2:45:22:3d:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:80:D4:53:0E:01:CE:A1:C2:EC:D2:EF:50:67:C0:71:3A:44:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
X509v3 Authority Key Identifier:
keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:4d:b6:f0:c7:bd:67:25:49:91:6f:b9:72:c6:a6:06:89:7e:
bb:c2:f1:b3:32:d9:88:24:0d:ab:c8:c7:8d:b5:ce:bc:22:e5:
d6:41:09:8d:1d:ba:8f:bd:73:17:0d:d0:6a:be:1b:6b:5a:7a:
80:72:e0:6a:2e:c7:aa:82:b1:ac:fa:24:42:45:d8:42:cd:49:
0a:21:78:11:80:b9:8c:82:9e:27:67:b3:39:86:24:94:bb:d4:
bd:a2:e5:96:04:ef:4f:c9:32:e2:7d:cc:32:36:d6:1f:87:35:
15:01:e2:f3:a6:67:31:8a:fb:0c:63:02:d0:7a:2f:81:7b:e1:
8f:16:d5:af:2f:c0:ef:f4:5b:53:c9:3f:fa:d7:14:19:ef:23:
9c:aa:4e:e9:13:87:62:10:45:f6:4e:e7:1f:39:c1:98:f9:8d:
77:f3:8c:61:69:1b:df:24:9e:9a:e8:3d:15:87:00:4e:3a:29:
74:1c:48:98:bb:bc:33:0d:71:8f:a3:31:08:37:18:3b:76:38:
c4:b0:fd:fb:9a:71:46:3d:7f:84:ba:04:e0:50:ae:fc:98:d6:
70:38:38:42:e9:18:6e:cc:ce:e4:e5:19:d4:03:11:25:dd:ad:
39:70:9b:1b:d5:aa:a7:15:8d:9f:c2:ae:7c:42:66:2a:44:c8:
b2:97:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:46:14 2026 by rpki-client