
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/ce1ec351-7bbd-3a84-8f24-8cb74c9565f4.roa
File: ce1ec351-7bbd-3a84-8f24-8cb74c9565f4.roa (raw, json)
Hash identifier: W84+o9dwTHSBeaHnEnBefYh/EvnCjzow0wVob1XAIok=
Subject key identifier: B3:84:78:4A:3C:04:05:87:FB:D3:84:75:1D:AF:F8:41:32:E4:A2:9C
Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial: 010D0C9F4328584F268CFF46DDBBD7A1305E1800
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/ce1ec351-7bbd-3a84-8f24-8cb74c9565f4.roa
Signing time: Sat 12 Sep 2026 13:00:13 +0000
ROA not before: Sat 12 Sep 2026 13:00:13 +0000
ROA not after: Fri 11 Dec 2026 14:00:13 +0000
asID: 26879
IP address blocks: 167.253.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:26:8c:ff:46:dd:bb:d7:a1:30:5e:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Validity
Not Before: Sep 12 13:00:13 2026 GMT
Not After : Dec 11 14:00:13 2026 GMT
Subject: CN=969f88c5-a9a8-4939-8fb6-b7f8c91e7fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:63:0f:a5:9a:96:41:08:fb:77:fc:c0:8d:
c4:31:1c:8b:9c:4f:24:7f:cb:b5:b8:b2:c9:d6:d8:
ca:42:bd:7e:56:e0:2f:a8:bc:29:99:ca:0d:59:2b:
79:bc:74:fa:42:b0:62:6f:27:1f:cb:89:25:0a:19:
cd:5f:b6:6f:c7:9e:2f:a7:c6:14:5c:7c:3c:04:65:
63:38:ab:e8:79:82:c3:d0:47:73:88:1b:6d:27:5a:
34:f6:57:a8:ef:59:69:a9:0d:10:ea:03:db:66:b8:
29:76:76:ad:9e:29:c7:e3:40:5f:2c:5e:2e:a8:13:
ac:21:51:68:29:05:aa:50:ee:20:68:ca:b9:2c:c2:
9d:f6:2e:43:11:54:9b:00:67:e9:f8:3e:9b:cb:07:
7c:d4:19:30:9d:84:78:fd:eb:85:3c:48:02:f7:78:
e6:cc:bc:17:71:0d:86:02:30:a0:21:44:0e:63:99:
cc:38:1f:ba:59:87:75:b5:ed:da:b4:5a:46:ba:36:
60:b1:e8:35:62:64:62:23:91:3a:c9:df:e5:ba:cf:
72:d7:17:36:5b:d9:fa:93:2f:24:74:91:be:26:b8:
75:83:9c:3f:a0:23:9f:a6:f8:b9:98:3c:95:ee:cd:
14:64:2c:8c:e1:86:09:0f:c9:35:9a:f0:cc:31:fd:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:84:78:4A:3C:04:05:87:FB:D3:84:75:1D:AF:F8:41:32:E4:A2:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/ce1ec351-7bbd-3a84-8f24-8cb74c9565f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
X509v3 Authority Key Identifier:
keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7d:cd:f8:2a:f0:97:e9:59:57:c2:49:33:f6:4f:57:a1:26:
00:fc:3e:0e:e8:98:f9:f2:e4:ff:04:2e:b8:d1:f8:78:be:04:
01:c4:09:2d:a9:5b:a1:c3:4d:c8:da:28:6c:0e:b5:dc:64:14:
1b:79:ea:ca:b0:70:e1:4b:b8:af:b4:ba:a5:5e:91:10:0c:ae:
28:9b:97:47:88:66:8b:40:dd:34:5b:86:3b:d2:91:95:da:b6:
b1:0c:c7:a0:68:97:6a:45:9b:3f:03:e9:cb:ed:5e:a9:1f:88:
8c:ae:2b:df:80:73:11:af:c0:6a:1b:af:53:bd:4b:e3:fa:2f:
4b:7b:04:3b:28:d5:b1:b0:1e:63:ec:d0:3a:b4:3b:a2:80:44:
6f:81:46:28:ed:0b:2e:c3:c7:58:cb:60:2a:dc:28:ad:87:90:
b8:0d:cf:65:cd:fe:60:d3:8f:a1:42:c9:16:25:51:bf:91:b7:
5d:c8:f1:04:eb:42:af:b8:88:37:b9:fa:c5:51:84:f4:ee:bc:
b2:f4:11:a4:a9:dc:bd:96:71:58:f9:7f:5a:db:f6:d7:29:11:
67:0d:42:e6:58:b2:02:b9:2a:64:58:43:73:61:44:01:ef:bc:
17:a1:3b:3b:1c:f4:06:9f:f8:f9:e8:3a:2d:c4:79:15:66:ce:
5b:6f:8c:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjP9G3bvXoTBeGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2
NzE3MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk
OTY5Zjg4YzUtYTlhOC00OTM5LThmYjYtYjdmOGM5MWU3ZmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn79jD6WalkEI+3f8wI3EMRyLnE8kf8u1uLLJ
1tjKQr1+VuAvqLwpmcoNWSt5vHT6QrBibycfy4klChnNX7Zvx54vp8YUXHw8BGVj
OKvoeYLD0EdziBttJ1o09leo71lpqQ0Q6gPbZrgpdnatninH40BfLF4uqBOsIVFo
KQWqUO4gaMq5LMKd9i5DEVSbAGfp+D6bywd81BkwnYR4/euFPEgC93jmzLwXcQ2G
AjCgIUQOY5nMOB+6WYd1te3atFpGujZgseg1YmRiI5E6yd/lus9y1xc2W9n6ky8k
dJG+Jrh1g5w/oCOfpvi5mDyV7s0UZCyM4YYJD8k1mvDMMf39TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOEeEo8BAWH+9OEdR2v+EEy5KKcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk
MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvY2UxZWMzNTEtN2JiZC0z
YTg0LThmMjQtOGNiNzRjOTU2NWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm
MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl
NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx
NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/1iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC59zfgq8JfpWVfCSTP2T1ehJgD8Pg7omPny5P8ELrjR+Hi+BAHECS2p
W6HDTcjaKGwOtdxkFBt56sqwcOFLuK+0uqVekRAMriibl0eIZotA3TRbhjvSkZXa
trEMx6Bol2pFmz8D6cvtXqkfiIyuK9+AcxGvwGobr1O9S+P6L0t7BDso1bGwHmPs
0Dq0O6KARG+BRijtCy7Dx1jLYCrcKK2HkLgNz2XN/mDTj6FCyRYlUb+Rt13I8QTr
Qq+4iDe5+sVRhPTuvLL0EaSp3L2WcVj5f1rb9tcpEWcNQuZYsgK5KmRYQ3NhRAHv
vBehOzsc9Aaf+PnoOi3EeRVmzltvjPE=
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:35:12 2026 by rpki-client