
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ea2f37f-49c6-3804-a40b-41fa8693b4e6.roa
File: 8ea2f37f-49c6-3804-a40b-41fa8693b4e6.roa (raw, json)
Hash identifier: ENdMlAhUxHdJcHmK2k7hjRmaPMZzw9JfTrpyCcu1YiE=
Subject key identifier: FD:23:EC:A7:2E:26:D7:2C:BD:4D:CA:12:6D:8B:9C:08:0D:5A:8A:F3
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584E3B946A715C877A0B35D93380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ea2f37f-49c6-3804-a40b-41fa8693b4e6.roa
Signing time: Sat 20 Jun 2026 09:00:13 +0000
ROA not before: Sat 20 Jun 2026 09:00:13 +0000
ROA not after: Fri 18 Sep 2026 09:00:13 +0000
asID: 22616
IP address blocks: 170.85.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3b:94:6a:71:5c:87:7a:0b:35:d9:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Jun 20 09:00:13 2026 GMT
Not After : Sep 18 09:00:13 2026 GMT
Subject: CN=75c0a563-d5c5-4107-88c5-9bc2104d8472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:57:c8:ce:7b:78:5c:c6:b8:14:12:25:fc:
8d:4d:ea:9a:08:b8:13:fd:17:01:f1:eb:23:b2:b2:
9f:fa:e1:21:a4:8e:55:2c:ea:d6:bb:c6:53:6b:82:
29:57:f0:56:a7:39:5d:86:46:e5:3f:a7:27:6a:40:
e3:41:02:9c:52:78:f3:59:9a:3c:6b:6b:05:20:68:
5c:e2:d7:6f:f4:a2:4b:10:cf:24:8c:bc:97:c0:3c:
a5:b2:b5:d1:7f:57:84:65:99:c3:27:31:78:d6:93:
5a:8b:cc:a4:4d:9d:33:81:cb:3a:96:a5:a7:d2:8e:
cd:19:b6:93:f9:39:6f:1d:56:36:52:6c:ce:ed:6d:
90:69:c9:47:f6:56:97:b6:e3:c0:68:6e:39:d4:17:
29:96:1b:d2:58:d9:45:0a:2c:59:64:a2:e2:aa:59:
88:22:bf:1a:c8:f2:42:1b:57:fc:ec:94:56:2c:ac:
7d:e7:bc:42:80:ce:20:c9:d1:e4:d9:b3:30:b3:a3:
f0:af:3b:43:98:2e:14:fc:ef:04:2f:74:d0:75:5e:
a5:09:d4:2f:bb:19:3d:3e:f6:5b:f0:d4:41:33:21:
c0:93:7a:94:53:18:77:6d:17:ce:67:ef:be:dd:96:
e8:2d:28:75:2e:f6:2a:98:6c:05:b0:a4:73:03:77:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:EC:A7:2E:26:D7:2C:BD:4D:CA:12:6D:8B:9C:08:0D:5A:8A:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ea2f37f-49c6-3804-a40b-41fa8693b4e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:dd:6e:5c:ff:74:21:b0:7d:e6:b5:c2:bf:0b:b6:5f:4e:56:
69:dd:4e:db:29:86:07:2f:04:30:ac:ae:0d:44:89:6f:0d:8d:
b4:aa:cc:9f:0d:30:c8:e6:26:22:89:1b:16:90:74:f2:f1:70:
20:6f:e0:ea:1d:22:d5:89:fa:8b:bd:67:8a:61:33:01:a3:6c:
23:bf:e9:31:43:66:e1:19:d2:6b:bd:98:5e:a2:83:0c:c8:10:
b7:78:9f:5b:14:5f:4a:21:10:cc:de:e4:e3:d0:b3:39:54:4f:
81:18:d7:a3:07:76:88:2a:e9:48:df:c5:cb:15:c0:42:4d:5d:
00:a4:3d:4d:22:7e:2e:d6:2f:f3:e9:39:65:ae:29:70:ba:38:
26:8c:bc:de:5b:e2:c7:39:ca:04:96:52:c5:f1:5f:23:5b:75:
22:98:68:bc:c3:e7:9d:3f:6a:c1:66:6a:a1:30:87:a8:98:1b:
43:e0:c6:6e:ad:be:95:57:67:c0:bb:c1:44:44:8b:2a:69:9c:
62:c3:ab:73:74:ea:5f:97:f6:3e:8d:be:74:4f:0c:15:16:5a:
13:b4:3b:84:40:d8:e3:c6:de:46:81:91:c1:7e:68:62:32:b5:
9e:1b:ae:cb:37:1b:5a:e5:3c:eb:01:6d:ce:89:43:41:11:aa:
9e:d0:b7:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lGpxXId6CzXZM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
NzVjMGE1NjMtZDVjNS00MTA3LTg4YzUtOWJjMjEwNGQ4NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtxXyM57eFzGuBQSJfyNTeqaCLgT/RcB8esj
srKf+uEhpI5VLOrWu8ZTa4IpV/BWpzldhkblP6cnakDjQQKcUnjzWZo8a2sFIGhc
4tdv9KJLEM8kjLyXwDylsrXRf1eEZZnDJzF41pNai8ykTZ0zgcs6lqWn0o7NGbaT
+TlvHVY2UmzO7W2QaclH9laXtuPAaG451BcplhvSWNlFCixZZKLiqlmIIr8ayPJC
G1f87JRWLKx957xCgM4gydHk2bMws6PwrztDmC4U/O8EL3TQdV6lCdQvuxk9PvZb
8NRBMyHAk3qUUxh3bRfOZ+++3ZboLSh1LvYqmGwFsKRzA3cMrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0j7KcuJtcsvU3KEm2LnAgNWorzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOGVhMmYzN2YtNDljNi0z
ODA0LWE0MGItNDFmYTg2OTNiNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlV+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrdblz/dCGwfea1wr8Ltl9OVmndTtsphgcvBDCsrg1EiW8NjbSqzJ8N
MMjmJiKJGxaQdPLxcCBv4OodItWJ+ou9Z4phMwGjbCO/6TFDZuEZ0mu9mF6igwzI
ELd4n1sUX0ohEMze5OPQszlUT4EY16MHdogq6UjfxcsVwEJNXQCkPU0ifi7WL/Pp
OWWuKXC6OCaMvN5b4sc5ygSWUsXxXyNbdSKYaLzD550/asFmaqEwh6iYG0Pgxm6t
vpVXZ8C7wUREiyppnGLDq3N06l+X9j6NvnRPDBUWWhO0O4RA2OPG3kaBkcF+aGIy
tZ4brss3G1rlPOsBbc6JQ0ERqp7QtzM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:47 2026 by rpki-client