
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/89992a05-2cde-37ab-8732-801db872be9d.roa
File: 89992a05-2cde-37ab-8732-801db872be9d.roa (raw, json)
Hash identifier: siKpaU8DLvR+ho0aIXmtQzeViYmL6MYT7Yrqp1Y5ICY=
Subject key identifier: AE:14:52:1F:7C:51:5C:16:7C:4D:78:58:CE:F0:13:7A:8F:36:48:CB
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328584D15A268598ADB695EA3842300
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/89992a05-2cde-37ab-8732-801db872be9d.roa
Signing time: Sat 07 Mar 2026 02:00:32 +0000
ROA not before: Sat 07 Mar 2026 02:00:32 +0000
ROA not after: Fri 05 Jun 2026 01:00:32 +0000
asID: 18013
IP address blocks: 107.151.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:15:a2:68:59:8a:db:69:5e:a3:84:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 7 02:00:32 2026 GMT
Not After : Jun 5 01:00:32 2026 GMT
Subject: CN=128472aa-7e89-4c0c-b411-b81f7451e6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:eb:9b:e4:1f:3d:eb:59:f4:16:36:fb:35:34:
15:73:84:69:f8:f8:40:c0:4d:5e:a3:bc:ae:4e:9d:
4f:fc:b4:88:5f:9b:4c:78:6d:77:2f:7b:d2:6e:b4:
cf:b1:b1:4b:ae:5f:24:be:39:e2:83:2e:3d:08:f9:
5d:35:6b:ee:c5:97:ce:16:06:cd:c4:00:26:77:b5:
bb:f6:cb:ad:fc:af:8c:53:2a:95:ac:1e:9a:96:c7:
d7:e9:ed:5f:7d:a7:67:a3:dd:0c:41:b3:89:b1:8b:
5d:ad:b5:54:89:26:e5:9a:84:25:fe:9e:d1:2f:5d:
41:a1:c3:a0:1f:2c:bd:59:d9:a8:f4:07:1b:40:76:
81:4e:84:9d:31:ab:0f:20:5e:81:21:99:ab:e3:8c:
6e:1b:37:3b:79:53:51:3d:1f:c0:55:46:3e:cb:81:
2c:94:3c:28:db:02:3c:18:fb:9d:d2:fb:6b:74:a5:
b4:39:a3:96:f0:96:2e:32:42:16:ba:fd:51:d3:ea:
67:fa:05:1a:54:cf:a3:1e:7d:8f:46:d5:86:f9:79:
a5:c0:50:f9:b6:6c:12:e7:54:88:e7:c7:e3:6b:57:
73:ea:a6:73:88:60:e8:32:2d:04:50:e6:c5:67:a5:
6c:38:cd:7e:60:7a:cd:c8:cc:7a:36:ca:52:2e:60:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:14:52:1F:7C:51:5C:16:7C:4D:78:58:CE:F0:13:7A:8F:36:48:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/89992a05-2cde-37ab-8732-801db872be9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:73:d4:d8:13:99:dc:34:09:0a:50:28:f5:7c:d6:4d:a8:cb:
73:d3:31:10:9f:47:9e:4f:f8:4c:af:e5:77:d1:3e:b4:29:61:
f4:e9:27:6f:e3:29:81:6b:ea:66:5b:bc:b7:66:ac:ac:bc:0c:
d9:f1:22:0b:0f:d0:c7:57:78:bc:5e:40:74:90:e8:a7:38:a3:
41:e7:95:a9:31:f7:9a:48:cc:a9:76:49:97:9b:76:a0:d3:7e:
7f:3e:66:29:73:93:04:2a:22:7b:ed:c4:ed:b2:c7:41:71:ec:
21:b4:ed:c8:b1:75:a1:d3:b6:84:fc:16:63:e1:4f:31:9e:ae:
f7:86:e0:40:49:67:a4:f8:e9:7c:8b:cb:d0:8a:fc:2e:e6:67:
3a:4d:f7:73:9e:f9:96:4a:d9:51:61:3c:51:34:8b:ea:49:07:
62:a1:4f:15:38:25:26:4a:30:26:6c:d1:69:fd:d7:10:b0:2e:
7f:e7:f6:1b:f2:e7:cb:0e:12:6e:81:1f:22:10:06:23:47:7f:
8f:86:8c:96:d2:a3:b8:30:bd:b9:62:da:83:ae:06:68:b0:09:
f2:36:cf:86:72:28:0d:a4:88:a2:0c:e2:b4:77:fd:92:8e:9b:
1a:b0:69:1d:ab:cc:a5:7c:eb:d9:62:fd:73:fe:8f:02:08:2e:
7b:c2:7b:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomhZittpXqOEIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
MTI4NDcyYWEtN2U4OS00YzBjLWI0MTEtYjgxZjc0NTFlNmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOub5B8961n0Fjb7NTQVc4Rp+PhAwE1eo7yu
Tp1P/LSIX5tMeG13L3vSbrTPsbFLrl8kvjnigy49CPldNWvuxZfOFgbNxAAmd7W7
9sut/K+MUyqVrB6alsfX6e1ffadno90MQbOJsYtdrbVUiSblmoQl/p7RL11BocOg
Hyy9Wdmo9AcbQHaBToSdMasPIF6BIZmr44xuGzc7eVNRPR/AVUY+y4EslDwo2wI8
GPud0vtrdKW0OaOW8JYuMkIWuv1R0+pn+gUaVM+jHn2PRtWG+XmlwFD5tmwS51SI
58fja1dz6qZziGDoMi0EUObFZ6VsOM1+YHrNyMx6NspSLmDEwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4UUh98UVwWfE14WM7wE3qPNkjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODk5OTJhMDUtMmNkZS0z
N2FiLTg3MzItODAxZGI4NzJiZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZz1NgTmdw0CQpQKPV81k2oy3PTMRCfR55P+Eyv5XfRPrQpYfTpJ2/j
KYFr6mZbvLdmrKy8DNnxIgsP0MdXeLxeQHSQ6Kc4o0Hnlakx95pIzKl2SZebdqDT
fn8+ZilzkwQqInvtxO2yx0Fx7CG07cixdaHTtoT8FmPhTzGerveG4EBJZ6T46XyL
y9CK/C7mZzpN93Oe+ZZK2VFhPFE0i+pJB2KhTxU4JSZKMCZs0Wn91xCwLn/n9hvy
58sOEm6BHyIQBiNHf4+GjJbSo7gwvbli2oOuBmiwCfI2z4ZyKA2kiKIM4rR3/ZKO
mxqwaR2rzKV869li/XP+jwIILnvCewA=
-----END CERTIFICATE-----
Generated at Sat Mar 7 07:43:55 2026 by rpki-client