
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/650e7fa0-f090-38a8-9392-5e6f1b8881ce.roa
File: 650e7fa0-f090-38a8-9392-5e6f1b8881ce.roa (raw, json)
Hash identifier: i5f2xV2yFp4jwJuY1Y50JpvbaIst+i4ed63U5tEMpec=
Subject key identifier: 7F:BC:B2:86:42:D2:66:AA:AB:B6:12:44:A9:4A:C1:C5:6F:8D:D3:E8
Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
Certificate serial: 010D0C9F4328584EF01CE18E01A5F893A97693D0
Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/650e7fa0-f090-38a8-9392-5e6f1b8881ce.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 46606
IP address blocks: 149.47.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:e1:8e:01:a5:f8:93:a9:76:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=3b7c7b41-7970-466f-9f4e-3e6b39731dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:31:b2:43:3e:de:5c:4d:87:73:59:a1:38:
ea:33:55:61:31:68:d7:34:ca:a1:af:cb:94:48:1a:
60:0a:16:35:6a:00:e8:32:2e:3e:63:61:7f:62:68:
5d:e3:85:79:25:09:46:25:df:e1:29:8a:98:91:00:
ed:ca:7d:84:56:bf:bb:2f:dc:a6:cd:f8:76:e5:9f:
b0:fe:2b:b4:f1:39:92:82:50:73:01:5c:bc:aa:12:
88:d9:d2:4b:38:98:c1:ae:e3:fc:c6:38:19:9d:70:
a0:01:22:94:b6:2a:d5:e3:56:f9:e5:6e:71:46:66:
07:e0:21:33:0a:41:1f:56:d9:df:03:16:ec:a3:70:
b0:98:22:14:24:04:61:32:ab:13:dc:23:56:bc:81:
15:51:ef:a5:20:c9:95:83:98:31:59:ca:b4:91:f4:
54:2b:92:de:b7:68:68:83:9e:87:fb:6e:b3:f7:3e:
e0:d6:22:87:41:59:d0:9a:d3:cc:83:75:0f:09:04:
32:10:84:7b:e3:05:18:fc:07:d9:d4:c5:d7:a5:2d:
c8:77:2b:ea:a1:e0:9e:d4:a8:f6:d2:72:0c:b5:48:
a2:2b:c2:0a:d4:cc:ff:1c:25:c8:f5:80:2b:83:a0:
1a:b9:da:4f:89:e1:42:1e:2c:bd:c3:3d:8b:bd:b3:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BC:B2:86:42:D2:66:AA:AB:B6:12:44:A9:4A:C1:C5:6F:8D:D3:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/650e7fa0-f090-38a8-9392-5e6f1b8881ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl
X509v3 Authority Key Identifier:
keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
sbgp-ipAddrBlock: critical
IPv4:
149.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:84:ad:ab:1d:1f:39:21:d0:c3:3e:b0:a2:f3:0c:df:d1:04:
3e:cd:32:c1:66:4c:cb:31:af:4d:f6:2d:c9:8a:8c:40:81:f8:
a0:d0:4a:fd:4a:4a:c6:4d:d3:69:6b:aa:8f:53:8a:4a:96:30:
b1:02:06:4b:6a:71:1d:b3:88:f4:f1:d7:46:8a:40:ea:2b:7a:
80:62:7d:c4:c6:a0:59:d4:e8:a4:be:8a:12:b1:bb:c5:52:c3:
9f:94:d4:19:49:35:77:be:77:66:c2:5e:be:c5:a7:7a:0d:39:
90:7a:70:ea:db:28:e2:91:6a:52:99:f5:63:53:5a:dd:01:0c:
c9:9d:ba:b7:71:d2:ea:c0:f8:b4:ea:20:87:c2:07:d5:5b:1b:
d3:f1:55:c8:4a:37:b2:a5:6f:0b:df:96:41:2a:69:29:d3:d0:
40:27:0a:04:c7:9b:50:72:62:eb:38:4e:93:da:22:da:2b:ce:
3b:02:00:f2:87:33:4b:24:df:3f:c9:86:11:5c:f1:df:d8:f3:
7b:e6:15:8f:36:00:93:70:39:d6:1a:2a:aa:d1:25:3f:ca:de:
4b:36:cc:47:a6:83:35:83:37:87:a4:67:58:0b:7c:e4:d1:aa:
9b:fa:80:2f:0c:80:5b:b7:28:27:db:c2:1f:2d:d6:85:fc:28:
f6:a7:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:24:09 2026 by rpki-client