
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/db5568ac-2d37-3970-8c62-5d0ca6ac31d3.roa
File: db5568ac-2d37-3970-8c62-5d0ca6ac31d3.roa (raw, json)
Hash identifier: dQ8sfQSwmnBat7xV+CXLP3DNUduoKJH7RLoPE2XlTZ0=
Subject key identifier: DC:23:F4:11:CF:D7:DE:89:DE:B0:2B:F9:58:80:0E:43:8B:5C:DB:73
Certificate issuer: /CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa
Certificate serial: 010D0C9F4328584FAB10C309725F840EA21595C0
Authority key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/db5568ac-2d37-3970-8c62-5d0ca6ac31d3.roa
Signing time: Fri 30 Oct 2026 00:12:27 +0000
ROA not before: Fri 30 Oct 2026 00:12:27 +0000
ROA not after: Thu 28 Jan 2027 01:12:27 +0000
asID: 13860
IP address blocks: 148.159.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Nov 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:ab:10:c3:09:72:5f:84:0e:a2:15:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa
Validity
Not Before: Oct 30 00:12:27 2026 GMT
Not After : Jan 28 01:12:27 2027 GMT
Subject: CN=2b40f190-ddda-4860-b311-82f2f089d1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:d9:ef:c2:79:33:30:81:23:8a:09:58:b7:
5c:fb:80:bb:34:21:57:2c:2c:3b:90:b8:36:82:36:
93:05:93:5a:f7:09:d7:7a:d6:ce:cb:46:f9:d5:2b:
85:07:13:4a:ef:18:f0:16:e3:c3:33:16:d6:4e:63:
df:3e:0c:ee:64:60:65:76:ab:05:65:b0:c3:d4:25:
7c:86:8f:01:e9:3b:70:81:c3:f6:06:22:1f:ae:5e:
f6:45:c9:da:cd:4a:05:35:c8:ed:70:9d:f5:37:ce:
f7:dc:ff:86:a7:c5:44:ef:6a:50:2e:ff:d5:ea:6a:
ba:5d:09:fa:ea:85:97:f9:16:4a:3a:d9:2e:f1:24:
c8:9b:12:e7:5d:16:87:1e:3f:d0:b1:c2:99:1f:db:
fd:b9:6a:7c:2c:bf:81:1f:20:85:15:a7:cf:1c:28:
da:ca:9e:ec:30:4d:0e:08:a0:dc:f1:4d:0c:c7:96:
7b:59:4c:6d:c8:96:1c:7d:92:ac:b3:0e:3b:c4:43:
c2:d2:03:d8:9a:8a:48:f7:3d:7f:2f:c9:d9:1a:ac:
1a:11:ca:e6:5f:80:93:b8:af:0f:fb:1f:91:cd:e4:
f1:c6:9f:c7:7b:4f:c1:cb:34:68:39:ff:00:43:06:
b3:15:b2:3b:ce:1b:41:66:bb:2d:c0:9d:ec:d0:b8:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:F4:11:CF:D7:DE:89:DE:B0:2B:F9:58:80:0E:43:8B:5C:DB:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/db5568ac-2d37-3970-8c62-5d0ca6ac31d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl
X509v3 Authority Key Identifier:
keyid:FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.159.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:5a:88:27:e6:38:62:50:4f:4c:5b:e8:99:8b:3b:76:24:a5:
2b:74:a3:d0:5c:d7:49:34:51:2f:5e:86:5a:07:39:c7:a5:71:
9e:3b:20:c4:2b:e2:94:27:52:3c:5e:04:4d:76:0b:fc:ab:f9:
7b:a5:57:e7:d9:1e:f2:a8:ad:69:36:83:21:2a:f5:e6:ee:f9:
76:8d:6f:ff:a9:98:4e:a2:be:06:42:56:10:9e:00:c8:3f:1c:
80:c7:59:8a:25:17:53:00:83:e1:76:63:d5:ed:bd:75:2b:27:
22:cc:c2:6d:69:91:20:92:30:8b:04:be:1c:25:04:88:20:81:
c9:7f:c6:4f:52:17:09:44:2f:39:50:28:1b:4d:8f:82:c0:5a:
23:28:d2:14:e2:d7:ef:51:d2:ff:3b:08:92:8a:c2:4a:db:ff:
fc:49:a0:82:d7:dd:b3:02:ac:56:24:9e:13:09:42:4c:89:23:
a0:b5:7a:b8:46:24:ad:a5:45:a0:91:b2:a5:50:bf:3e:59:c8:
3b:82:0e:72:28:06:ab:96:0a:15:09:8f:01:87:af:99:80:ad:
a4:42:05:98:2b:0e:1c:ca:35:f2:21:ec:8b:c6:b3:40:2a:ae:
7a:c5:88:51:f6:99:96:ff:6e:b3:27:bd:eb:e8:d9:d0:eb:09:
56:f0:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:01 2026 by rpki-client