
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa
File: 3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa (raw, json)
Hash identifier: lcy3bCyeM8M+pNouNjs0U2TsmadrbY94jsUQpEI6XG0=
Subject key identifier: 14:C0:71:37:3D:B2:BD:53:6E:A9:C2:B2:16:51:F0:AE:7B:C3:18:CA
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584EA787741E790EF30EAA904240
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30103
IP address blocks: 149.137.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:74:1e:79:0e:f3:0e:aa:90:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a1388bed-8320-4b12-82fa-aa8cce637994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:4c:39:83:67:0d:9a:ab:a5:27:65:0b:aa:
e8:ab:fb:3c:0c:ce:b8:15:79:21:5e:04:ca:f8:95:
1e:a7:60:da:04:f6:53:24:43:e4:a9:1f:33:b6:ce:
52:6a:91:cd:fc:cf:b6:60:00:3a:ad:bc:15:ad:45:
39:c9:29:4a:bd:68:56:9c:d7:61:d5:b8:67:f1:04:
d2:6c:07:d9:a9:fc:b7:79:eb:6d:08:1f:8f:06:1e:
f9:52:2f:95:ef:8f:cd:82:09:f9:01:aa:52:ab:59:
20:2f:0b:6f:fb:d4:06:c8:b9:f1:69:e8:63:98:a2:
5f:c8:4e:1d:2b:48:85:17:49:ae:ba:04:02:9c:c1:
f1:d7:30:2a:3a:4e:fb:52:21:45:50:eb:06:6d:97:
b5:84:a3:07:cc:ee:6d:e1:95:24:b5:7b:52:b1:ca:
b1:41:0d:4b:54:d9:e0:01:b7:77:7f:a5:38:79:f0:
f2:7f:fb:e5:3b:fe:75:49:70:2f:e3:9d:0e:45:07:
a7:ec:39:ca:3a:95:86:1f:7e:4d:e9:d1:f3:f1:1a:
0b:dd:f1:11:be:36:ca:a6:4f:5a:2e:c4:b1:64:b9:
2a:23:69:ed:a8:c9:4f:17:f8:77:89:25:d4:8b:0b:
53:bb:3d:81:09:c1:ed:e7:0c:18:77:11:e7:c9:33:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:71:37:3D:B2:BD:53:6E:A9:C2:B2:16:51:F0:AE:7B:C3:18:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
149.137.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:63:dc:a3:2a:ca:91:ad:89:81:52:f4:b3:ca:d7:9c:4b:0a:
b7:58:90:57:c9:1b:c8:94:38:ec:c4:7c:6a:1f:b2:04:37:5f:
80:60:01:b0:ce:d4:e3:cb:a2:f7:b6:87:dd:36:b7:e4:c7:e1:
2a:b3:5a:08:14:b0:62:76:10:16:4d:35:0a:8f:00:5f:76:d9:
d2:6d:3a:74:bd:59:d8:f4:d8:85:51:c1:af:ee:1e:63:a9:75:
81:7a:ca:f3:01:a2:0c:a3:18:b9:7b:a8:29:55:25:6c:51:85:
6e:d0:29:8a:27:1b:86:d8:bb:fe:ff:b6:af:b6:c5:07:6f:93:
a7:57:77:ac:6a:2c:b2:f8:86:0d:a1:34:3e:87:27:1e:81:f9:
24:df:17:09:11:ad:f4:b4:f4:ff:77:75:55:ce:b7:04:12:c6:
94:19:d1:9b:e5:88:0a:c8:d0:04:e9:e0:20:94:2f:c8:69:1d:
34:2f:63:f3:77:9a:0f:07:a6:76:8f:3c:d6:d3:bb:6b:61:c0:
cd:46:05:b4:c5:69:74:07:d6:77:a7:4d:5a:1a:f1:f9:f2:93:
50:bc:35:a1:de:e4:dc:ad:10:ef:22:91:32:68:81:72:2f:c5:
90:4a:c7:ac:97:a1:d3:fe:d1:af:15:b3:0f:dd:75:dc:6b:36:
9a:9f:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:32:44 2026 by rpki-client