
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa
File: bef358d3-0363-30e8-aa38-d97259f0f8bc.roa (raw, json)
Hash identifier: UPW9xKDWOqkHDFtcKq2SmZVDNdOUdNFbQV1YAFhhHR0=
Subject key identifier: F6:5A:EE:DC:EE:BF:43:6C:1C:FC:AD:F7:82:09:9C:B6:3B:9D:0F:E7
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F4328584EAFE6F5CF62EE4AEF6C4C9A80
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 33442
IP address blocks: 157.235.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:f5:cf:62:ee:4a:ef:6c:4c:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=3244462a-3dd7-41c4-aaf1-4062f42a0c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:55:76:06:7d:8b:44:5c:d0:80:1f:b4:74:ed:
71:89:cb:47:fd:94:9b:10:f7:57:70:08:9a:c6:ae:
9a:15:eb:a1:ba:35:c9:eb:3a:6b:b7:43:c0:37:55:
42:0a:9d:51:73:d3:71:d2:05:fb:72:16:ec:3e:5c:
5f:6d:8f:b3:c1:9f:b8:3f:26:f0:46:f9:11:07:61:
f8:0e:95:e1:5b:e7:e4:11:0a:26:4e:aa:9c:e5:f2:
a1:48:cd:8d:ba:fe:9d:86:33:5b:5b:5b:7a:58:27:
6f:5f:b8:6d:d9:c7:aa:57:00:af:9a:36:2a:54:df:
b1:68:33:5f:25:db:1c:b4:51:c0:1c:47:ed:bd:b2:
cd:ac:27:cc:c1:72:a5:9c:8e:9f:54:55:c1:ef:24:
c8:b1:f2:57:5b:1c:b8:bf:71:73:eb:4e:67:82:bf:
0f:65:f7:f2:79:4f:2f:b7:39:fc:9f:8c:11:5b:cf:
cc:50:e7:71:38:ea:d0:6c:47:f5:37:e6:87:23:1c:
6a:df:65:36:5b:6d:b9:67:ca:58:88:21:a5:7a:96:
0f:80:33:5a:30:21:58:81:4e:9d:a0:f1:01:33:9c:
91:1a:46:b0:1c:c7:14:ad:23:38:4b:65:e3:04:69:
6a:f8:4a:c7:e3:77:ab:35:ad:c2:d6:2b:a2:0c:8c:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:EE:DC:EE:BF:43:6C:1C:FC:AD:F7:82:09:9C:B6:3B:9D:0F:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
157.235.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:6d:c2:10:02:88:04:96:87:54:0f:8e:42:79:f8:fc:e0:0b:
60:45:d5:1b:b8:c3:cc:8a:c3:42:19:d1:a4:ff:40:e2:a1:1c:
25:63:3d:7a:22:6a:2e:fa:14:83:90:08:1a:d1:97:5e:3e:7b:
41:01:35:56:43:72:cd:99:f0:6d:a8:aa:3f:94:fb:3b:49:88:
e0:92:81:51:44:c0:32:91:3a:e3:c0:a6:10:05:9d:43:b6:88:
3c:ac:f3:0e:ae:ea:71:8e:c4:1d:cf:3a:7e:41:45:04:6d:ad:
03:42:cd:38:ad:af:e7:e9:d6:2e:81:62:9f:6d:c6:9e:0c:9e:
7b:d6:77:57:f9:05:af:fe:c8:46:c9:9c:73:2b:0d:a0:7e:a7:
be:12:94:2c:d2:1e:72:a4:2f:6c:0c:1f:20:ca:33:df:d9:01:
75:79:07:6b:d9:ec:c4:ca:da:04:26:bf:72:ad:76:e3:0d:58:
00:ae:e3:68:ec:1b:7b:8c:59:a2:53:95:3c:6f:f3:bb:15:dc:
f4:57:a3:3a:8d:b9:e1:fe:6d:33:c3:0a:39:d1:d0:01:c8:8b:
46:b1:01:9b:d8:22:63:03:50:2a:f1:ec:5a:65:f2:71:90:3f:
4f:ee:52:f1:8c:81:d7:68:0a:48:d7:a6:67:af:ab:21:55:f7:
7f:a4:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:11:32 2026 by rpki-client