
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a737c27e-8732-3c4b-bee9-d2b250988d00.roa
File: a737c27e-8732-3c4b-bee9-d2b250988d00.roa (raw, json)
Hash identifier: hRSNSELJuKe+u1DmgWli14amCjT7MCSj2HCttGMfWF4=
Subject key identifier: 4D:45:5D:25:90:D7:3B:24:E9:44:F4:D8:94:7C:F1:4B:4E:BC:E2:B2
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328584F8148430B0799B43BFC0626A0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a737c27e-8732-3c4b-bee9-d2b250988d00.roa
Signing time: Thu 15 Oct 2026 01:00:12 +0000
ROA not before: Thu 15 Oct 2026 01:00:12 +0000
ROA not after: Wed 13 Jan 2027 02:00:12 +0000
asID: 154321
IP address blocks: 107.151.244.0/22 maxlen: 24
198.44.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:81:48:43:0b:07:99:b4:3b:fc:06:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Oct 15 01:00:12 2026 GMT
Not After : Jan 13 02:00:12 2027 GMT
Subject: CN=f165d344-e6d5-4e89-9bd4-88ca0bd56fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:74:ea:56:a3:ee:b3:22:5e:e8:f8:81:9b:
69:9b:64:32:9f:f3:dc:03:eb:e9:72:46:7a:62:35:
38:02:0c:af:46:da:e7:ee:67:17:90:0a:33:96:1b:
c4:25:06:74:32:7e:62:24:db:43:09:a8:fa:66:9a:
e6:08:3d:ef:3a:30:e5:55:3d:b1:38:0f:e3:cf:a3:
43:43:bf:1c:fa:3b:73:97:14:79:49:79:ef:fc:a4:
0d:7a:77:35:a6:64:b5:71:09:e7:b5:68:29:83:a5:
53:b5:0d:09:a1:30:e1:8b:96:28:67:d3:3d:37:cc:
0b:3d:ca:1b:e7:7c:91:b8:39:8d:f4:4a:ce:fa:e0:
5e:c1:ec:be:54:68:52:ed:e5:91:84:a9:2b:aa:16:
21:3e:9c:0b:23:af:01:eb:7e:2d:f2:e8:50:cd:5d:
1a:00:80:cb:58:82:65:27:25:16:bc:a9:ea:ca:f7:
7e:2b:96:3d:44:4d:26:ac:c2:b7:12:9e:73:dc:86:
df:d4:14:86:c2:16:5e:6d:d5:6a:37:22:57:f0:68:
21:e5:81:76:85:60:35:aa:90:93:fd:0d:95:6b:68:
dc:31:12:e2:54:0b:b6:71:7d:ec:9c:35:43:65:68:
27:f6:fd:2f:4a:c8:3a:85:06:da:d7:f6:9f:34:ca:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:45:5D:25:90:D7:3B:24:E9:44:F4:D8:94:7C:F1:4B:4E:BC:E2:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a737c27e-8732-3c4b-bee9-d2b250988d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.244.0/22
198.44.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:0b:40:7a:b4:a1:b8:9e:a3:98:3e:79:a0:ec:9f:3d:cf:1b:
f5:00:17:c6:77:dd:6c:46:b4:6f:22:6e:77:78:00:62:d7:90:
e2:a2:71:c8:8e:e3:4b:05:5a:03:64:e8:58:a5:37:73:40:c7:
67:cd:a3:1b:86:1e:de:24:f2:81:f1:6e:77:45:54:27:6b:f1:
88:96:5d:35:4a:63:ac:68:b3:ae:de:91:fe:86:f8:de:0b:bf:
5c:25:b4:21:f0:af:69:1d:99:fb:00:21:9e:33:85:25:ae:56:
bf:b7:4f:85:58:dd:b9:db:d4:1d:68:a2:09:b9:8f:35:8c:3c:
7e:29:df:90:59:49:45:60:4b:87:73:41:c6:5c:4f:9a:52:6b:
28:8b:d4:ca:ff:05:90:61:cb:eb:6b:d8:05:a7:f1:b7:a8:8c:
11:99:f6:4d:f0:be:f2:0f:13:b7:f0:0a:f0:2b:6d:bf:9e:88:
e5:1c:06:a7:b9:13:2a:90:46:f4:9e:79:4e:ef:5c:54:d8:63:
22:dc:82:59:d0:66:cb:73:4b:ff:76:d8:3b:5b:fc:c9:c4:36:
1e:f5:c5:ba:aa:10:f9:a3:80:38:f2:29:16:27:c9:66:a5:e5:
d9:8b:4e:60:af:bb:6a:90:05:58:2f:ef:36:fc:95:0c:22:2a:
24:3a:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:05:07 2026 by rpki-client