
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
File: 7539456a-1ede-30db-a5cf-fe160402f89e.roa (raw, json)
Hash identifier: QAwF/4Rc3jbykzymBR0GkN9jEJPBc7IMFRx5PNxNvS8=
Subject key identifier: D9:28:4B:E8:2E:42:CA:64:29:D7:F9:7E:80:A5:EA:08:A7:90:83:F3
Certificate issuer: /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Certificate serial: 010D0C9F4328584F2EED0FA3CF7641BFDA56C2C0
Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
Signing time: Tue 15 Sep 2026 13:00:12 +0000
ROA not before: Tue 15 Sep 2026 13:00:12 +0000
ROA not after: Mon 14 Dec 2026 14:00:12 +0000
asID: 198949
IP address blocks: 198.177.154.0/24 maxlen: 24
204.52.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2e:ed:0f:a3:cf:76:41:bf:da:56:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Validity
Not Before: Sep 15 13:00:12 2026 GMT
Not After : Dec 14 14:00:12 2026 GMT
Subject: CN=64880931-c8c9-4283-81b1-774ffc556dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:89:e5:87:54:55:cc:ae:93:f2:ec:08:42:
81:eb:c4:0e:2b:3d:55:7c:9e:19:ea:d5:bc:92:75:
9e:0a:a1:5d:d9:08:a4:6e:ad:c5:79:e8:82:27:1d:
e4:4f:7c:7d:52:81:d1:3b:96:06:98:ac:23:96:e5:
75:ff:77:22:86:4b:1d:8f:97:57:56:e6:d3:02:96:
1f:65:3a:59:3d:94:74:33:1f:00:fa:9a:8c:5a:ee:
bd:9e:52:58:e7:04:27:9f:5e:e2:c6:23:e8:56:37:
d4:47:7b:3e:1f:6c:31:67:ef:32:55:7b:7c:7d:87:
55:98:a1:77:b6:91:5a:bc:07:91:f8:c5:7f:3f:96:
9d:67:67:4a:07:7f:d4:df:20:0e:46:47:7b:93:6d:
7b:d5:0a:8a:bb:6f:7a:e0:e6:03:1d:c7:c4:b7:df:
fc:20:ee:54:35:4f:31:c7:36:42:17:15:13:7e:da:
ba:02:4a:b3:7c:92:85:da:3e:ab:12:ab:52:50:82:
35:5e:ea:cb:e3:91:ab:25:de:57:41:78:4a:8e:d5:
65:63:98:ab:59:eb:b2:d1:ff:ec:ce:68:9b:e2:8e:
7f:12:a6:5e:6a:35:22:e9:25:8f:1b:88:92:9c:f7:
a1:5d:69:91:7b:b9:25:92:f7:e1:f5:91:5d:88:af:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:28:4B:E8:2E:42:CA:64:29:D7:F9:7E:80:A5:EA:08:A7:90:83:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl
X509v3 Authority Key Identifier:
keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.177.154.0/24
204.52.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:a8:5f:0d:f3:a3:f1:a3:ef:77:e1:c7:44:20:5b:5c:2b:73:
cb:6a:38:38:c6:f5:69:b7:7e:dc:d3:30:22:72:6e:99:92:37:
2c:ea:ac:78:4d:97:2b:a4:d7:18:0b:04:35:46:c0:6d:90:89:
70:f5:a8:26:6e:8b:21:f7:51:3b:bb:88:00:5f:6b:57:c1:f9:
33:6f:5c:a0:41:cb:31:b7:09:e5:1d:84:48:57:e2:59:ca:32:
8d:dc:95:c7:8d:e0:ad:5f:4a:66:4f:bd:4e:01:53:d7:8a:4a:
4c:29:f4:21:5e:92:d0:2c:64:02:f2:79:e7:64:7b:26:c2:74:
c2:cd:7a:d6:98:94:9f:28:84:8f:2b:91:8d:aa:e7:31:d5:cf:
5b:81:d1:d7:76:f0:1f:fe:b8:0f:33:71:ca:ca:e1:3a:d2:22:
23:dd:6d:76:83:b4:51:99:14:71:eb:72:bf:d6:0c:df:1e:52:
a3:2d:fa:c8:7e:f5:6d:bd:f6:51:68:30:2e:bc:bb:f0:a5:27:
b0:b9:dd:32:2d:a2:ab:c4:3d:c3:62:ea:68:94:77:50:05:7e:
91:b5:08:45:a4:4e:8c:c4:b2:3c:56:85:93:d6:1c:71:b6:c5:
b6:52:8b:ef:2f:d7:ca:a9:c9:62:7f:ba:29:ba:47:f2:dc:cc:
79:6d:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:11:14 2026 by rpki-client