
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
File: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (raw, json)
Hash identifier: mPZXIXLoMi9A2LIFqfdJrV9jvS3cc3vnxgodQLjVqD4=
Subject key identifier: 59:03:BB:F3:E7:2D:9E:42:2E:67:FE:04:87:46:4E:66:08:66:1E:0D
Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
Certificate serial: 010D0C9F4328584F7782F150EC062A4AC87EBA80
Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 996
IP address blocks: 167.253.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:82:f1:50:ec:06:2a:4a:c8:7e:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=433eeb62-0d50-4e08-9543-139f1c8a5457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:8a:af:ff:72:c5:76:93:38:e5:2b:5d:f6:
12:e2:0e:b7:0d:7e:bd:98:19:10:cd:6b:68:9d:b3:
a3:e3:54:43:37:85:5e:5c:99:33:a2:ea:55:3d:74:
f1:eb:47:50:22:74:45:fd:1c:3a:fa:2a:c6:9e:33:
c5:f2:8e:f2:4b:8b:3d:02:d5:4b:70:a4:0d:64:90:
53:c9:0e:c1:7c:18:d4:4b:15:d0:b7:d9:5e:ef:68:
42:58:43:ab:2f:e6:ba:c0:e6:45:5f:69:e5:c3:c6:
67:a4:b9:d4:86:07:95:25:2b:85:b0:78:cd:00:d8:
d9:0e:05:d2:ae:37:0c:87:f2:b7:44:d9:00:b9:f7:
94:ed:8e:10:b6:0d:fd:e5:07:f5:f7:0c:65:9b:77:
29:32:3d:1d:1d:a0:6c:a3:17:34:dc:9d:eb:df:86:
6d:46:12:4e:dd:44:31:19:4a:dc:c4:e6:e3:0a:7f:
42:89:1f:5a:6a:62:81:f3:f6:a7:22:44:56:4b:15:
6b:ec:2c:3c:ac:ea:ea:2e:a5:f6:33:d2:5b:ea:c4:
01:08:12:ad:81:aa:64:a8:37:ea:24:6f:90:20:92:
6a:b3:63:9f:4b:de:f4:da:0d:35:9c:67:8d:b3:f1:
9b:10:cf:56:0f:05:b1:a1:de:5d:92:54:76:04:29:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:BB:F3:E7:2D:9E:42:2E:67:FE:04:87:46:4E:66:08:66:1E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl
X509v3 Authority Key Identifier:
keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:84:89:4e:ab:d3:af:22:4c:94:d1:32:73:7e:62:23:94:c1:
24:89:8d:b6:9e:90:74:c9:26:5d:d9:cd:13:9e:9f:f7:61:2d:
ac:01:50:65:86:b6:b2:ef:6c:47:6e:1c:87:86:45:e2:94:f7:
d9:f3:1a:f9:b7:43:b8:dc:9c:a9:78:2b:51:02:12:43:7b:af:
ab:26:e4:bc:33:5b:34:df:c3:a9:d1:af:2a:e2:a8:5b:a2:27:
25:fc:f1:1b:6e:3f:ef:02:0b:35:95:70:50:c3:e1:53:9a:16:
76:5e:cc:ce:ba:51:ba:db:06:6d:19:93:a3:a6:55:2e:96:1c:
b8:1a:4d:65:ab:d9:5d:fc:00:29:6c:75:9d:32:3a:a3:9b:11:
5b:38:ee:09:83:24:9b:86:03:97:d4:40:2b:88:19:90:c2:92:
7f:59:36:d7:cd:14:a4:45:2e:83:75:8e:20:33:df:a2:81:11:
7d:e7:dd:23:55:22:13:0c:a9:e2:01:59:bb:3c:1a:df:47:30:
b6:b7:d8:92:bd:3b:f9:1f:78:e3:27:5b:03:4e:1f:39:be:be:
6f:51:a4:32:ad:55:af:9e:8b:f2:ce:75:00:88:00:28:8f:7b:
5b:4f:84:59:8a:0a:dd:ae:e1:a7:3d:be:a4:1b:9a:ee:43:fe:
88:22:69:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvFQ7AYqSsh+uoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk
ZjhhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
NDMzZWViNjItMGQ1MC00ZTA4LTk1NDMtMTM5ZjFjOGE1NDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuquKr/9yxXaTOOUrXfYS4g63DX69mBkQzWto
nbOj41RDN4VeXJkzoupVPXTx60dQInRF/Rw6+irGnjPF8o7yS4s9AtVLcKQNZJBT
yQ7BfBjUSxXQt9le72hCWEOrL+a6wOZFX2nlw8ZnpLnUhgeVJSuFsHjNANjZDgXS
rjcMh/K3RNkAufeU7Y4Qtg395Qf19wxlm3cpMj0dHaBsoxc03J3r34ZtRhJO3UQx
GUrcxObjCn9CiR9aamKB8/anIkRWSxVr7Cw8rOrqLqX2M9Jb6sQBCBKtgapkqDfq
JG+QIJJqs2OfS9702g01nGeNs/GbEM9WDwWxod5dklR2BCmywQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkDu/PnLZ5CLmf+BIdGTmYIZh4NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm
YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvN2RmYTYyYjctZDNiMS0z
YmQxLTkyNDYtMzFiMDBmMDNkODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk
NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy
ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj
MzEwMmRmOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/09MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2EiU6r068iTJTRMnN+YiOUwSSJjbaekHTJJl3ZzROen/dhLawBUGWG
trLvbEduHIeGReKU99nzGvm3Q7jcnKl4K1ECEkN7r6sm5LwzWzTfw6nRryriqFui
JyX88RtuP+8CCzWVcFDD4VOaFnZezM66UbrbBm0Zk6OmVS6WHLgaTWWr2V38ACls
dZ0yOqObEVs47gmDJJuGA5fUQCuIGZDCkn9ZNtfNFKRFLoN1jiAz36KBEX3n3SNV
IhMMqeIBWbs8Gt9HMLa32JK9O/kfeOMnWwNOHzm+vm9RpDKtVa+ei/LOdQCIACiP
e1tPhFmKCt2u4ac9vqQbmu5D/ogiaRo=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:31:31 2026 by rpki-client