
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa
File: cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa (raw, json)
Hash identifier: wGOXmNkqfFgOcORQ1tLU4hxoIQeHEC7pRWe2H0dhpCc=
Subject key identifier: ED:28:49:80:D1:4E:BB:15:09:19:A5:40:D9:58:3A:BA:12:87:86:07
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F400A943052CECC6562ACD180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa
Signing time: Mon 21 Sep 2026 16:08:30 +0000
ROA not before: Mon 21 Sep 2026 16:08:30 +0000
ROA not after: Sun 20 Dec 2026 17:08:30 +0000
asID: 3257
IP address blocks: 107.158.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:40:0a:94:30:52:ce:cc:65:62:ac:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 21 16:08:30 2026 GMT
Not After : Dec 20 17:08:30 2026 GMT
Subject: CN=c94cf251-ce96-407a-9ee0-b943f074ef6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:81:b2:35:2e:3b:e0:17:65:7b:54:ca:6d:
43:2a:8a:06:bc:a9:f6:af:dd:f9:5b:a9:55:f3:68:
32:37:14:6f:ff:32:f3:7f:11:5c:b0:99:03:7c:ee:
11:08:1f:2c:76:99:a8:3e:38:f0:fc:f0:e7:0e:b8:
57:1a:cb:e7:0f:2d:89:36:16:79:e0:d7:22:28:04:
ff:67:eb:33:70:33:41:24:be:14:b3:fa:e3:86:79:
73:7f:b1:82:4d:0a:ef:e6:29:65:3f:7b:7b:df:2f:
3f:90:27:e4:2e:e9:77:04:de:8f:ce:08:4b:60:00:
47:55:77:7c:69:b8:7b:fe:49:0e:bb:84:3d:85:6a:
08:b0:42:0c:b6:59:29:62:40:82:5a:e6:89:03:c6:
b1:a6:bb:74:52:a5:42:82:11:84:77:ea:3e:8e:db:
f1:f6:79:f3:2e:11:ec:71:87:27:46:35:9a:38:c6:
2f:44:e8:06:97:0e:1b:d1:e2:de:42:ff:62:e9:66:
26:c4:fb:42:7d:c8:92:46:a8:52:10:a8:81:36:e9:
ec:68:b4:cc:5a:64:8e:37:fd:25:7a:7a:56:d1:3d:
fe:f9:3e:43:33:82:cf:b3:4f:ab:0b:81:09:2b:cb:
7d:e2:39:54:58:0d:55:7b:dc:c2:30:26:dd:59:18:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:28:49:80:D1:4E:BB:15:09:19:A5:40:D9:58:3A:BA:12:87:86:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
107.158.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:5b:fe:56:02:e5:d0:75:69:3b:45:a5:bf:35:60:a8:68:bf:
74:64:2e:f5:89:8f:e0:53:76:cd:e6:69:b3:e5:e4:94:a0:1c:
da:07:ab:4c:d9:6d:59:82:eb:55:79:8b:b7:31:51:52:0f:2b:
39:96:42:b6:78:06:f5:99:07:34:4b:a4:35:9b:63:22:82:51:
94:23:94:55:a9:03:ef:07:94:15:fc:01:cf:53:cd:d0:24:26:
4f:ad:d0:f6:b3:84:b4:fd:38:25:e9:3b:15:2d:dc:ba:dc:9f:
69:69:1e:28:97:27:60:a2:c8:4d:46:52:e4:7c:18:f3:64:cf:
e5:c1:da:bf:22:47:6c:59:46:f6:d3:3a:05:45:2a:08:c2:a7:
98:7a:c9:e4:20:0d:f7:78:84:f6:29:89:9c:de:df:69:43:00:
34:1f:55:18:98:07:38:03:15:f5:96:b2:1e:43:10:1a:f0:2b:
bb:ea:d7:3d:47:4c:e2:c9:5d:ab:c2:bf:70:a4:9e:44:ce:29:
35:b9:12:d0:a6:21:03:d2:e5:18:dc:a9:57:f1:31:93:2a:92:
25:d9:f6:fc:87:f7:72:fe:43:21:65:de:63:90:9c:59:7a:8d:
df:b0:c5:03:ea:eb:ed:37:c6:11:e1:88:e2:74:4d:ff:63:61:
38:95:e6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:46:03 2026 by rpki-client