
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa
File: bef358d3-0363-30e8-aa38-d97259f0f8bc.roa (raw, json)
Hash identifier: Fu7VpgBSA65v0fumP5s25c49qY2e8rx8iTg0xCnqXmY=
Subject key identifier: 72:9E:F9:8C:42:77:14:CB:55:19:A1:1E:AE:30:23:1B:DE:76:F1:47
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F4328584C4E06866588157C05AC814F00
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa
Signing time: Thu 25 Dec 2025 14:00:39 +0000
ROA not before: Thu 25 Dec 2025 14:00:39 +0000
ROA not after: Wed 25 Mar 2026 13:00:39 +0000
asID: 33442
IP address blocks: 157.235.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4e:06:86:65:88:15:7c:05:ac:81:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Dec 25 14:00:39 2025 GMT
Not After : Mar 25 13:00:39 2026 GMT
Subject: CN=c69c88b0-8741-47dc-9eb1-5bf93f561471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:95:43:83:ac:79:ea:fd:93:b9:fa:de:77:
80:a2:a8:92:e3:e8:67:b0:02:5e:56:7b:a6:9d:75:
03:2b:0b:10:c3:6e:83:30:7b:00:29:b5:a4:0b:94:
36:fd:9c:77:6e:ad:1e:48:a1:8e:c0:ed:49:cc:20:
cb:08:1d:a2:74:39:82:55:24:97:9a:6b:67:f3:87:
93:5a:7b:92:af:0f:93:e5:70:e3:9f:86:7f:25:41:
fb:53:19:db:28:f1:2d:12:68:8b:ca:8b:c7:5e:03:
09:30:b5:3d:e7:e3:6a:8a:f0:aa:c7:56:b8:ef:48:
ae:31:38:d2:c2:05:d6:33:07:73:7f:8c:15:b1:d9:
e5:70:6a:e1:ba:b6:d9:ba:bb:1c:44:07:9c:b1:ac:
b9:bd:dc:6e:86:01:f4:62:26:c2:43:bd:1c:09:ed:
42:39:34:a1:61:43:4d:78:25:c0:23:f7:e7:87:e3:
ab:21:84:63:94:9c:01:bb:03:c2:97:0b:f1:9c:d0:
a3:51:56:de:a2:bb:36:d0:cd:08:a5:58:5c:26:c5:
87:3c:ac:cd:fd:14:23:3b:d1:f7:c4:c3:77:c9:0d:
71:a5:5a:d4:38:3a:78:02:67:09:f5:2a:03:04:ee:
dd:22:cf:5f:b5:57:90:af:45:0a:b4:62:e4:cd:ee:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:F9:8C:42:77:14:CB:55:19:A1:1E:AE:30:23:1B:DE:76:F1:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
157.235.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:64:31:8e:f9:4e:90:f0:fe:7a:52:5d:77:f4:ca:9e:50:f0:
3e:09:31:e6:43:1b:30:cf:22:b4:e2:35:fe:cd:5e:eb:6d:95:
b2:66:4a:cb:66:b7:d8:9a:37:b7:bf:14:0a:2c:57:0d:c8:e8:
06:f7:90:12:3d:8f:8d:0d:79:09:cf:da:7c:e8:fa:df:0c:ed:
74:0e:3b:be:df:d6:20:0f:38:bb:7b:d7:fd:82:1b:26:8c:e7:
ed:26:6a:3c:51:8b:10:51:38:01:ef:5e:cf:51:22:2f:c8:75:
f7:b6:b4:28:2a:73:00:e0:d6:cc:b8:5b:46:d6:dd:97:b0:92:
88:0b:e7:a5:28:9e:e2:21:58:0f:1e:16:af:cb:66:9a:a8:48:
cb:cf:a3:32:ad:12:99:a8:af:51:b7:d0:93:d7:40:b2:36:9a:
c7:0c:3a:55:53:97:ed:04:0f:14:c6:04:8e:92:a2:cb:31:53:
a3:1e:a5:d6:61:51:31:f8:e6:2d:2a:42:09:ef:ff:ae:b2:58:
81:23:d1:86:fb:44:62:87:b5:a4:52:f1:65:cc:49:c4:67:6e:
12:be:a2:16:47:72:6d:6a:88:e6:1b:69:55:32:99:ab:7e:79:
ed:82:9f:92:20:e0:f4:bc:fb:ac:4f:f8:d0:ac:22:93:6b:1a:
14:b7:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:27:52 2026 by rpki-client