
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc3490c2-288f-34a0-95d6-1d11756238e0.roa
File: dc3490c2-288f-34a0-95d6-1d11756238e0.roa (raw, json)
Hash identifier: +prAcaxJV5QnthRr1STbFVRAcfN/cgfk+BZF2kaEVCI=
Subject key identifier: FC:8F:5A:D0:89:E4:2C:BE:41:02:5B:9E:D6:3A:A8:D1:3F:AE:D2:83
Certificate issuer: /CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
Certificate serial: 010D0C9F4328584F4D84227D62186508E19F6DE0
Authority key identifier: A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc3490c2-288f-34a0-95d6-1d11756238e0.roa
Signing time: Sat 26 Sep 2026 11:58:56 +0000
ROA not before: Sat 26 Sep 2026 11:58:56 +0000
ROA not after: Fri 25 Dec 2026 12:58:56 +0000
asID: 3356
IP address blocks: 170.137.223.0/24 maxlen: 24
198.160.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4d:84:22:7d:62:18:65:08:e1:9f:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
Validity
Not Before: Sep 26 11:58:56 2026 GMT
Not After : Dec 25 12:58:56 2026 GMT
Subject: CN=c5576d99-30fd-4453-a293-643edda3b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:9e:5b:d3:80:f9:3e:1a:32:59:1f:19:82:
29:ca:9c:24:91:63:ed:2e:ab:b3:ed:8b:af:f1:51:
1d:0b:09:5d:9d:27:0e:09:10:2c:46:85:35:5d:fc:
51:90:1f:85:26:78:c3:f7:87:1f:95:cf:f2:a6:a5:
96:e9:ec:31:c8:49:ba:e0:22:10:47:7a:0f:6b:b2:
f9:6b:1d:7b:76:11:fe:ba:a5:78:f0:60:61:d0:8f:
a7:cc:20:6c:51:61:34:e3:b2:c5:f3:ce:58:b1:e4:
6c:c2:43:29:b5:51:83:1b:31:2f:f4:b8:5e:75:41:
7c:a6:5f:f0:20:65:8f:f5:b5:f7:6b:a9:ab:17:96:
f0:e0:7f:17:4e:f8:69:7e:48:25:4c:a6:06:fe:7a:
22:c2:e5:e6:85:48:69:03:d4:3f:2f:22:d1:3c:0c:
87:e1:c3:23:9f:ce:a3:0e:cc:d3:ed:b9:2c:e4:9b:
d6:9e:8c:41:f6:08:d1:75:8d:94:5a:4b:94:87:65:
6b:e0:48:9b:ec:ca:b6:04:1e:84:04:66:db:7e:b9:
cc:33:37:0a:69:13:74:91:d7:51:23:0c:01:51:ca:
6b:be:4f:f6:22:05:fb:96:03:7e:ee:77:6c:e1:4e:
2b:03:82:43:b0:80:bc:9c:62:d3:3b:37:f6:90:ac:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:5A:D0:89:E4:2C:BE:41:02:5B:9E:D6:3A:A8:D1:3F:AE:D2:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc3490c2-288f-34a0-95d6-1d11756238e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl
X509v3 Authority Key Identifier:
keyid:A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
sbgp-ipAddrBlock: critical
IPv4:
170.137.223.0/24
198.160.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:9f:2b:30:13:18:3e:98:63:f0:29:88:9e:de:0b:a1:3b:f2:
94:8d:5a:d2:f4:45:54:53:be:c9:ff:ec:26:ed:aa:4e:fd:fd:
d3:75:34:0a:9a:5b:c9:d8:7a:77:d4:e8:59:16:ab:87:db:16:
26:9e:21:67:33:75:75:cf:36:e9:e0:9a:ed:40:7b:1e:90:46:
08:0b:03:e3:a8:04:63:b7:92:d9:14:32:18:19:95:c5:97:98:
2f:ec:68:31:54:8e:ff:84:3b:27:d8:c6:3a:fc:b7:db:ee:42:
86:41:36:d8:bc:c8:a1:b3:67:db:43:d7:0e:46:00:37:8f:29:
ea:ab:7e:82:13:62:ff:58:bb:a6:8a:26:23:e5:44:59:37:75:
83:fa:c8:4e:d0:22:f5:99:8c:31:ca:fa:ea:ac:b5:7f:75:8e:
9d:7c:87:8f:06:f6:ba:fc:85:79:6a:c2:16:3e:bc:e4:d1:ac:
ae:8b:55:be:4d:8e:12:8c:bd:1f:05:6d:cd:a4:37:17:06:8d:
a6:f6:f0:4c:b6:04:24:51:2f:db:06:56:2c:97:07:56:99:8f:
cb:47:92:cd:8e:08:92:34:31:4b:eb:85:97:45:6e:68:35:ea:
1a:87:31:9c:12:eb:f2:3f:ca:12:e9:53:89:b2:e5:ce:b1:a8:
60:8d:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:03 2026 by rpki-client