
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15d150b3-8c08-34dc-a8bf-1a103575837f.roa
File: 15d150b3-8c08-34dc-a8bf-1a103575837f.roa (raw, json)
Hash identifier: e4zY5FghFYWs2sZTcF2k0PngVyvQSmu+78EzLGmFAak=
Subject key identifier: 80:5D:B1:56:E2:DA:90:70:6F:0D:8D:BA:A6:4B:E0:81:FD:5D:F6:2A
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584F4973594BF813C1A03D55C380
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15d150b3-8c08-34dc-a8bf-1a103575837f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16740
IP address blocks: 167.254.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:59:4b:f8:13:c1:a0:3d:55:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fbd0f752-982a-48ad-9389-3caaffe15322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:bf:34:99:c4:6a:1f:a5:98:41:fb:4f:51:
30:bc:bd:97:2f:63:fd:fb:ff:92:15:a0:a7:09:70:
08:87:13:e1:58:2a:58:20:da:2a:5e:92:0e:db:37:
bb:85:b5:bc:00:a9:48:76:5d:af:90:6c:bb:8f:20:
31:dc:94:d1:be:44:a1:01:65:df:30:5b:d5:2e:67:
26:52:08:6a:0c:bc:ae:6e:d2:f6:23:3b:c4:27:05:
60:56:6f:e1:93:b8:76:c1:b9:55:05:29:dd:53:0c:
ee:71:15:25:88:dc:22:3d:b6:9c:e6:76:ed:29:6a:
15:c7:08:80:b1:f2:ff:fb:5e:1e:31:7d:d7:2e:e4:
08:a5:9a:22:e0:4e:2f:56:eb:5a:40:cf:4c:4d:5b:
98:b0:d2:de:c9:c2:01:a5:73:29:e8:56:fc:8d:78:
d5:09:8f:d7:d7:ac:ab:c9:2f:87:b8:d0:25:76:5b:
d1:d7:4c:96:b5:47:92:99:47:4a:83:f0:a9:e3:f4:
73:7b:51:f2:b1:bc:04:fa:c0:2e:7b:25:40:94:57:
84:6a:3d:19:d5:e5:7d:64:5b:2c:3b:d9:41:98:ea:
03:9f:a6:cd:c9:e2:64:75:d6:58:5c:60:d2:45:c0:
87:28:8b:6d:0b:02:37:53:ba:02:be:d5:d6:b9:a8:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:B1:56:E2:DA:90:70:6F:0D:8D:BA:A6:4B:E0:81:FD:5D:F6:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15d150b3-8c08-34dc-a8bf-1a103575837f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
167.254.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:f8:3c:7e:62:3c:45:bc:aa:0a:fb:b1:0c:cf:39:75:f5:e5:
fb:66:07:f4:c0:0b:7b:3c:60:32:b4:d6:89:21:90:41:66:a7:
16:92:9c:83:1e:14:69:10:67:0c:dc:54:25:6a:18:77:c1:fe:
78:1e:81:88:97:8e:c9:d9:c6:93:83:98:38:1e:0d:46:55:12:
e7:a5:a4:a2:e3:47:d2:7f:95:b8:d4:68:a9:46:d2:6a:75:b7:
fd:1c:09:99:03:26:35:74:51:5d:82:17:2b:7d:1e:03:37:5e:
7c:79:f7:aa:38:c6:3e:c8:b7:43:60:76:67:20:e2:20:96:dc:
76:10:bd:af:00:20:7a:f4:04:6d:44:f8:aa:9d:81:d8:d6:0e:
ae:ca:5e:fc:7e:2b:3c:ad:d8:93:b0:5c:59:99:37:cd:c5:d7:
76:ed:ff:fa:04:c1:01:da:62:27:ba:9b:0b:09:10:5c:5f:b4:
73:29:54:bf:d6:12:99:b1:87:b3:8a:5b:42:5d:7e:82:54:3f:
92:5c:a7:e0:b8:dd:94:f1:24:d5:10:4a:71:3c:80:1c:49:6e:
2d:8f:22:f6:b8:97:0d:68:59:25:c2:69:ec:27:82:2a:c7:05:
cb:08:ce:24:11:49:44:95:18:d5:c0:e2:77:09:2d:a4:f5:89:
13:10:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:57:58 2026 by rpki-client