
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fe9fbdbc-da1d-3bb6-8588-823f564ed885.roa
File: fe9fbdbc-da1d-3bb6-8588-823f564ed885.roa (raw, json)
Hash identifier: G3a7gEJLhka+gozWgVrrNWeoVTowB3Mt9lC6FYXw524=
Subject key identifier: E5:FC:B8:36:62:31:D3:BD:1E:1C:DF:46:12:78:E9:D4:D7:C1:48:04
Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial: 010D0C9F4328584D3F64CC850038A0EBF6C78600
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fe9fbdbc-da1d-3bb6-8588-823f564ed885.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 62943
IP address blocks: 209.152.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:cc:85:00:38:a0:eb:f6:c7:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=6afc7bce-47f9-49fc-98c3-387b69094c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:c1:ed:cf:64:e7:91:91:f1:dc:1b:9d:42:
e4:03:1f:b5:83:f1:3e:ff:34:91:ed:6e:23:ac:4f:
78:6b:a7:ab:ce:e2:0a:a4:25:f8:77:3d:63:92:b2:
c1:78:87:79:9c:7b:df:f6:cf:db:45:9f:e4:4b:e9:
c3:0a:a4:32:e4:e7:cc:36:a3:9c:52:59:55:c7:61:
2b:42:23:98:0b:66:2f:5e:86:fb:72:20:27:08:76:
ea:e7:e0:23:55:f6:5a:43:c3:b4:ad:05:f1:94:34:
b8:26:f7:f3:66:9b:f1:39:83:a1:44:ef:12:63:df:
3f:39:29:59:c0:35:9a:23:27:a5:1a:d4:54:9d:f6:
d8:20:1b:87:6d:b7:6a:1c:58:36:11:af:a7:66:43:
db:fa:f5:de:a2:1e:2b:db:fe:5b:a7:bc:99:b8:34:
a9:46:2e:23:2d:fe:a7:e4:cf:c0:40:35:77:1b:c4:
2b:e0:c6:5e:4a:05:8f:34:d9:89:d7:e3:ac:9a:85:
43:41:a4:36:0d:01:17:3c:76:d7:0e:39:9f:72:67:
ba:64:75:dc:05:f1:44:4b:e1:20:2f:83:7f:f6:df:
ee:ba:07:b1:c7:34:e9:6d:16:55:e0:e2:25:86:88:
16:f8:32:8b:70:10:b7:a3:0f:57:c9:25:bd:16:4f:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:B8:36:62:31:D3:BD:1E:1C:DF:46:12:78:E9:D4:D7:C1:48:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fe9fbdbc-da1d-3bb6-8588-823f564ed885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
X509v3 Authority Key Identifier:
keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.152.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:db:aa:eb:b0:03:17:21:7a:59:d1:6d:3c:21:83:d8:e6:3e:
1a:e4:eb:c8:93:75:d1:0f:8d:83:c5:b1:cf:d8:2d:0d:59:f7:
9d:6a:55:9e:df:42:f5:ef:71:93:82:2c:0a:a2:3b:2e:b3:1b:
b5:33:e0:30:05:f0:22:71:73:01:28:77:86:86:44:80:39:7c:
60:e8:8e:c3:ad:8b:aa:16:98:31:b3:47:7a:27:62:d7:71:79:
93:2c:50:4b:fe:16:c6:78:08:96:b9:28:4f:74:bb:0d:88:16:
a0:dc:71:0c:1c:38:cc:d4:3e:1f:a6:a5:dd:6b:cc:3b:44:87:
85:d7:6d:e9:19:77:2a:6d:fc:19:1d:96:d4:98:d8:9e:26:82:
73:df:e7:07:39:90:c3:43:7a:34:2b:47:4d:7f:cd:c7:66:15:
1a:58:a2:88:bd:47:16:db:6f:83:fc:0c:c3:59:55:d0:65:41:
4d:f9:11:52:a8:d5:f5:81:63:5d:19:d5:ac:2b:ee:ed:bb:c2:
b4:23:13:8b:e7:a8:57:37:c9:f7:0b:10:f1:b3:81:b2:90:7c:
66:6e:c0:c7:d9:9b:db:8c:7d:97:40:31:2b:ac:fd:a7:03:5a:
19:ee:65:40:f9:88:1f:53:18:e3:b5:3c:7e:90:d1:31:50:e2:
82:98:d5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:44 2026 by rpki-client