
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa
File: dd0f35f7-5560-3486-967e-db25d4288162.roa (raw, json)
Hash identifier: Jkpg7dHeVwCT6YVQ/GjMBnTNkYUPyjXcfwe2avctVp0=
Subject key identifier: CB:ED:67:0B:05:3A:24:CB:C6:80:33:9E:BB:03:F4:25:04:04:31:CD
Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial: 010D0C9F4328584D67DFC490F1760AA36975EE80
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 5744
IP address blocks: 151.207.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:c4:90:f1:76:0a:a3:69:75:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=dc457b27-7f2c-49a7-945a-ecfd69cf8228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:51:9b:b3:b9:3c:33:90:4b:f7:81:03:03:
f7:26:59:ef:b0:c7:fa:f1:e1:52:2b:37:10:04:6a:
f3:fe:11:15:63:c4:d3:80:9f:d5:da:1a:99:ad:74:
40:14:e6:c1:79:e4:78:a5:ee:a6:c6:13:dc:6f:b8:
81:b8:d9:cb:69:e5:bf:b5:51:2f:0c:30:7a:92:13:
94:58:dc:ed:04:2a:50:df:b1:38:6f:1d:ec:fa:6d:
7d:7f:8f:06:2d:f3:44:72:29:0a:1f:78:ec:83:d9:
67:fa:43:d7:c2:79:92:11:99:10:f3:58:4c:c9:58:
6a:7f:27:26:d2:5e:5f:e1:25:61:62:59:1a:56:2e:
98:cd:52:83:d6:05:f8:10:df:cc:5f:ce:6f:79:3d:
cb:32:28:af:bf:98:e4:09:75:9a:d7:8a:f8:29:82:
44:5a:dd:b2:80:8c:e8:6a:25:6a:84:30:29:bc:c9:
86:1e:e4:e2:fd:25:3d:56:32:13:57:41:64:2d:96:
5f:80:71:b1:a8:e4:53:3b:70:ae:15:d5:52:86:d0:
ab:45:a2:f8:92:49:1e:4e:75:89:b7:5c:22:d5:5e:
51:86:26:33:b8:a3:cb:97:a7:e4:29:6e:28:72:86:
7a:49:a8:81:e6:cd:ad:5b:ca:0c:26:00:16:d9:70:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:67:0B:05:3A:24:CB:C6:80:33:9E:BB:03:F4:25:04:04:31:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
X509v3 Authority Key Identifier:
keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
sbgp-ipAddrBlock: critical
IPv4:
151.207.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:4c:f6:e7:12:a4:6d:94:c6:6d:9a:db:fd:3f:95:b6:3f:93:
4a:88:07:02:1d:de:d6:b1:02:eb:c2:98:a0:4f:86:c8:da:db:
33:e6:a9:87:08:a2:e9:52:d9:c7:98:2b:44:13:70:9f:e9:25:
14:2b:2d:86:d3:73:af:92:74:e4:a4:08:69:12:a0:14:66:e3:
95:dd:98:52:d2:fd:5a:83:57:c9:53:fd:d5:fe:cb:a4:03:2b:
03:22:36:c1:09:ea:78:6b:e1:4d:4c:34:ba:4a:6c:05:3a:27:
ab:1c:42:1a:e2:87:a1:4a:23:06:8c:e4:33:71:62:81:cc:be:
6d:3a:ab:9c:07:42:31:2a:f2:7a:bf:e2:2f:5e:7c:f5:06:35:
07:93:76:95:c5:af:9c:55:b7:c1:2f:dc:c0:77:a7:44:48:49:
5a:00:f7:1e:e0:c6:cd:ae:69:fa:e9:42:ea:04:44:d2:e3:62:
1e:22:ba:28:b3:be:f3:eb:69:49:c8:75:78:ec:7a:1e:7a:f2:
b1:ec:68:00:6f:aa:fe:06:7a:cd:4e:a5:94:3a:a4:74:6c:47:
f7:97:1f:c3:4d:ea:a6:a6:cf:40:a4:44:77:ef:92:50:d3:8a:
5b:f6:0c:cb:c0:fd:01:3d:d0:66:ed:20:f7:d7:20:5c:80:36:
08:bb:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:09 2026 by rpki-client