
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c/d7a4fd9c-e1cf-364e-90ad-5ee5464a61da.roa
File: d7a4fd9c-e1cf-364e-90ad-5ee5464a61da.roa (raw, json)
Hash identifier: JKTPaKMXeTqv1l1OHyQLeVl3RAZn0W1t6ZxPVpmGQdU=
Subject key identifier: 2B:9F:34:B1:81:4A:F8:A0:DF:93:39:38:F6:7E:03:A4:B3:25:C4:22
Certificate issuer: /CN=dd1511f2-e43d-4721-8974-e5ea55194d3c
Certificate serial: 010D0C9F4328584F801BF41584D9E58E3520B080
Authority key identifier: 15:3C:79:96:59:03:D5:1C:A2:B6:69:17:42:E1:CE:38:8E:9B:76:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c/d7a4fd9c-e1cf-364e-90ad-5ee5464a61da.roa
Signing time: Wed 14 Oct 2026 14:55:14 +0000
ROA not before: Wed 14 Oct 2026 14:55:14 +0000
ROA not after: Tue 12 Jan 2027 15:55:14 +0000
asID: 396326
IP address blocks: 141.193.2.0/24 maxlen: 24
208.103.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c/dd1511f2-e43d-4721-8974-e5ea55194d3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c/dd1511f2-e43d-4721-8974-e5ea55194d3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:80:1b:f4:15:84:d9:e5:8e:35:20:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1511f2-e43d-4721-8974-e5ea55194d3c
Validity
Not Before: Oct 14 14:55:14 2026 GMT
Not After : Jan 12 15:55:14 2027 GMT
Subject: CN=67641996-add8-4ce8-8eb5-fac477fe4dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:20:fd:6b:e5:65:ed:02:87:cb:fb:d3:23:b7:
36:25:53:5c:2f:91:aa:63:36:93:63:db:9f:a9:86:
95:b1:3e:6f:c1:f5:f7:2c:f5:fd:7f:e2:08:3f:d5:
72:61:57:35:25:b6:0d:f4:99:64:bf:38:78:29:5f:
4e:6f:8e:d8:66:4b:6c:92:b4:73:5a:00:0e:33:67:
de:4d:cf:bb:e5:31:32:17:a0:0d:da:51:28:87:88:
f5:d3:b3:f8:af:02:d7:ec:d1:b7:51:11:df:9a:9d:
57:08:e0:ae:47:a4:42:a9:ed:9d:14:c2:dd:85:70:
54:5b:78:27:ba:3b:5a:e4:18:c4:65:38:75:fc:6f:
96:9e:9e:53:1b:05:e3:8e:47:49:dd:7e:cd:bb:11:
7d:b3:75:57:1d:8e:c5:1c:ab:5f:16:49:e4:85:4b:
38:79:21:d7:d8:4a:94:1b:5f:ae:06:9f:0c:ca:20:
88:37:fd:56:63:e9:1b:a1:c0:16:0c:80:e3:34:9d:
53:62:13:82:1d:c8:e1:51:f9:b0:3d:0b:0d:d9:23:
c7:c8:ab:8a:19:13:f2:7a:41:93:46:20:85:7a:fd:
7c:0c:86:55:d7:c4:e4:a7:46:1f:79:df:43:80:cc:
d1:8b:73:57:ba:4a:9d:49:b1:48:0e:cc:2a:da:c9:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:34:B1:81:4A:F8:A0:DF:93:39:38:F6:7E:03:A4:B3:25:C4:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c/d7a4fd9c-e1cf-364e-90ad-5ee5464a61da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c/dd1511f2-e43d-4721-8974-e5ea55194d3c.crl
X509v3 Authority Key Identifier:
keyid:15:3C:79:96:59:03:D5:1C:A2:B6:69:17:42:E1:CE:38:8E:9B:76:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dd1511f2-e43d-4721-8974-e5ea55194d3c.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.2.0/24
208.103.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:3e:6d:1d:f7:b0:94:ae:bf:e9:f9:a2:16:46:6f:31:df:de:
6a:2c:71:a2:a8:0a:22:99:b9:00:f7:ae:2e:c0:3a:9f:1f:53:
c0:57:55:12:cd:3b:ea:c8:c9:1f:94:75:08:08:2f:fb:2f:18:
e1:7f:13:c7:51:34:24:e7:31:86:cd:2c:6e:30:65:da:84:f7:
d0:5d:de:8d:da:c5:95:c8:f3:f4:49:5f:29:87:09:80:ed:ae:
9d:d8:7f:e7:59:4f:d4:ce:23:1e:d9:24:4a:21:17:7c:73:33:
21:92:7d:d8:c2:a3:ef:4c:ed:62:d3:5e:23:62:af:3f:c9:c6:
f5:c4:cb:f6:d2:35:4a:eb:85:9f:e4:74:47:1c:da:3b:62:93:
ee:22:cd:8f:ce:eb:6c:de:b7:ae:b5:b9:f9:39:54:1f:59:54:
24:80:59:f1:4b:b8:23:87:fa:80:c8:78:8f:ab:23:5d:f5:c4:
95:90:46:b6:d1:ed:94:7d:17:5f:53:1d:62:0d:ea:f8:e3:9d:
a2:72:1b:6d:b8:c4:a0:30:a1:a4:6d:d7:67:ab:ce:86:84:ba:
b9:2a:81:f5:69:76:3e:14:27:45:2e:63:c8:5d:88:3a:ac:9e:
3e:43:ec:36:43:12:4d:ad:9c:04:f6:86:dd:fc:d6:e8:56:dd:
da:49:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:32:49 2026 by rpki-client