
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa
File: 0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa (raw, json)
Hash identifier: FxhgGWigPuhIG+WbTAMURMaGX/oBd0FhBOYuVN+VAmk=
Subject key identifier: 1E:B9:E0:23:0E:80:97:AA:28:FF:CB:D3:2E:ED:A5:3D:7E:E8:37:98
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F4328584C602BDAA576CE4EF3C205BD80
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 33442
IP address blocks: 157.235.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:da:a5:76:ce:4e:f3:c2:05:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=1725be63-3160-4a51-8371-468466ebf8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:af:44:4a:88:ea:79:66:a8:98:d6:66:05:
ff:c9:ae:c6:88:c1:01:e1:61:b0:ab:0e:bc:e7:d0:
e1:c4:8b:00:62:6a:91:95:82:6a:c7:98:54:24:a3:
4c:3e:99:d1:42:2b:8a:15:9e:43:f4:2e:71:1a:5b:
9c:28:8e:b8:75:fd:25:92:ff:88:88:b8:2e:8b:05:
aa:38:89:42:de:08:93:af:56:57:bc:34:c7:61:ef:
21:c3:3e:eb:52:16:3a:08:4a:99:fa:6c:e7:7f:1c:
de:68:7e:d7:83:95:51:3e:64:f2:8a:8e:6a:2b:3f:
f4:6b:9e:2e:7f:62:a2:d2:49:45:8c:90:03:bb:ce:
19:a7:af:1b:6d:e1:ad:a4:8c:c5:8d:dc:c3:40:f4:
10:1f:d2:cd:f1:b6:fb:e9:11:86:9d:18:32:01:47:
c9:33:d7:ac:62:fd:d6:67:53:e9:43:2f:65:ab:6f:
1d:40:be:14:96:0f:e2:48:fd:34:10:73:aa:49:88:
3e:6e:8d:e4:ee:d4:1d:e9:8e:c7:bf:54:6f:02:66:
e3:d0:95:d4:51:f0:b8:aa:91:e8:1b:b9:e3:7c:37:
69:9d:29:3a:53:a4:c9:3d:90:76:19:9a:c4:ea:bf:
01:fe:fa:29:39:7d:c7:46:3f:c0:e3:45:ac:74:6a:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:E0:23:0E:80:97:AA:28:FF:CB:D3:2E:ED:A5:3D:7E:E8:37:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
157.235.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:e6:b6:91:d9:99:bc:df:8c:3a:a6:4b:29:91:37:28:9c:5a:
8f:af:e9:a3:dd:6a:16:85:ac:61:d3:06:f5:51:53:d5:b2:78:
f5:66:6d:53:b3:1b:a1:a3:34:eb:d3:11:42:ee:63:7d:f0:df:
17:c5:17:3a:08:93:a5:65:ae:cd:92:59:3f:6e:14:dc:ce:f5:
07:f5:a5:11:73:f6:7b:da:7b:c1:94:85:d2:d1:af:3d:b9:68:
31:3f:b9:20:8f:06:1c:da:86:9e:1b:76:59:e5:9b:d7:0e:93:
31:29:37:c3:17:ad:25:64:de:c3:8f:3a:f3:7c:cd:7d:c9:94:
89:c8:e0:8b:3d:ac:ef:fe:bb:9c:f2:c0:ec:b2:df:9f:21:56:
4b:f9:01:c6:a4:a6:fd:6d:8a:1e:55:e9:69:26:43:bc:ab:05:
98:e7:da:99:c6:e0:b1:d3:e9:7d:39:9e:a9:b6:ec:42:aa:b6:
08:ed:35:cd:29:53:d9:a0:53:28:bf:ab:be:b1:d4:61:39:4b:
e0:2e:42:5e:71:2d:b1:68:e2:47:00:4b:42:65:13:83:52:0c:
27:0e:71:4d:59:f9:bf:04:00:27:de:d6:bd:72:f2:b2:25:e3:
7b:d8:3e:32:bc:27:fb:cf:03:fc:32:75:e4:0a:70:23:99:5d:
1b:3e:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:27:50 2026 by rpki-client