
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/74f1ff7c-d951-3863-a22d-ed7c70449249.roa
File: 74f1ff7c-d951-3863-a22d-ed7c70449249.roa (raw, json)
Hash identifier: DpU7MSCI2ncs7sSLFlzpVxm2c+dwERK1LTCwaPhMtYk=
Subject key identifier: 1B:4C:43:48:AB:54:7E:2E:47:80:42:28:11:F2:E8:9D:6D:3C:A3:D5
Certificate issuer: /CN=dc538d34-7317-4797-a396-38a8bb1a4da3
Certificate serial: 010D0C9F4328584CF60E996D9147E6BAEF35DBE0
Authority key identifier: AF:34:29:86:4E:0D:FC:D7:23:A2:E7:57:BD:30:D8:92:94:0C:A9:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/74f1ff7c-d951-3863-a22d-ed7c70449249.roa
Signing time: Mon 23 Feb 2026 18:32:54 +0000
ROA not before: Mon 23 Feb 2026 18:32:54 +0000
ROA not after: Sun 24 May 2026 17:32:54 +0000
asID: 401674
IP address blocks: 161.108.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/dc538d34-7317-4797-a396-38a8bb1a4da3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/dc538d34-7317-4797-a396-38a8bb1a4da3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:0e:99:6d:91:47:e6:ba:ef:35:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc538d34-7317-4797-a396-38a8bb1a4da3
Validity
Not Before: Feb 23 18:32:54 2026 GMT
Not After : May 24 17:32:54 2026 GMT
Subject: CN=8f3cc917-9967-4723-b4b8-d22388c1064f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:e7:32:21:94:04:7e:1c:82:54:09:ca:35:
4f:f3:74:14:7b:1b:b7:f4:7e:9d:ee:02:03:4f:83:
e7:ec:f9:09:e2:c3:ad:fd:cf:ff:99:2c:6b:8d:ca:
3c:cf:23:0f:af:23:6d:a3:dc:37:fe:93:d5:68:be:
54:2a:b1:26:f9:71:40:90:45:dc:7b:76:e8:80:c8:
fc:9b:85:49:ef:e8:72:a3:73:e8:5c:9f:77:a4:04:
1e:59:b0:f6:db:95:78:5a:d6:36:e2:c4:8f:0b:48:
a8:46:64:d9:77:01:1e:01:a5:9b:70:12:ab:ff:b5:
00:73:1e:b9:b3:4c:c8:b5:96:f7:e7:d5:bd:f0:3f:
34:40:5c:67:b3:c0:1a:76:c4:28:ec:f8:9e:ff:43:
e5:e6:51:71:72:73:ed:7e:eb:45:fd:d4:ed:45:29:
cb:f4:97:75:b2:b3:b2:f9:8b:08:bc:8b:b4:10:97:
18:dd:ea:38:b0:2c:ba:37:d6:70:cc:2d:cd:5c:c2:
b2:ef:bc:1e:16:3d:65:7f:56:5f:6b:c1:cd:c7:03:
62:5b:42:9b:42:21:97:67:2f:b1:25:c1:b6:18:3d:
60:e1:64:9c:88:67:46:d3:a4:49:66:32:a3:5e:d4:
a0:56:7b:06:a9:16:c2:a2:66:fb:57:88:24:b4:b5:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:43:48:AB:54:7E:2E:47:80:42:28:11:F2:E8:9D:6D:3C:A3:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/74f1ff7c-d951-3863-a22d-ed7c70449249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/dc538d34-7317-4797-a396-38a8bb1a4da3.crl
X509v3 Authority Key Identifier:
keyid:AF:34:29:86:4E:0D:FC:D7:23:A2:E7:57:BD:30:D8:92:94:0C:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3.cer
sbgp-ipAddrBlock: critical
IPv4:
161.108.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:b1:26:4a:a8:9c:f8:76:da:fb:56:6d:83:6c:ae:8a:96:16:
32:05:c0:5e:5f:7d:b4:d1:b2:e6:29:2f:b4:e5:92:b4:8b:6b:
8f:71:a7:df:36:2a:40:dd:b5:b3:54:3c:86:21:b0:21:72:46:
d0:bb:84:60:bd:14:65:a5:0f:74:8c:07:5b:bb:3a:59:62:b5:
bd:f3:20:14:97:5f:7b:01:b5:07:06:f8:74:2b:c4:eb:2c:af:
ab:07:60:3e:4c:10:a1:b1:b6:3b:68:65:a7:7c:e8:99:f2:a2:
6d:86:3a:2d:31:25:5b:49:b4:56:e9:ce:8e:04:d4:ee:99:7f:
f9:d8:1f:ce:ef:62:21:ee:0d:f0:c0:e0:8a:0c:c8:32:cb:0e:
7a:61:50:f0:45:de:5d:4f:eb:7f:13:b4:46:5d:c0:fe:07:94:
71:d3:bf:7b:5f:b3:18:55:1a:8a:c8:fd:fa:ed:d2:a2:a8:0e:
82:13:94:b1:90:29:c3:c5:10:d4:33:c8:ff:4d:74:ff:b1:3b:
be:fe:78:d8:66:06:6e:18:c3:38:09:ca:e4:81:96:37:59:8a:
bd:31:d3:96:d1:3f:10:d6:63:1b:36:65:31:c6:1e:84:9a:b2:
70:82:86:88:d8:2e:cc:ec:87:44:59:a4:bf:d0:bf:bd:72:63:
a4:d1:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:18 2026 by rpki-client