
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa
File: 35ac0cb4-1492-3672-87c8-e934c1ffc305.roa (raw, json)
Hash identifier: A4nuZR051qo9ypzeXRo/5ZNLRDpzQiXLx5anadQpnTY=
Subject key identifier: FD:BB:1B:DC:66:41:65:38:AA:83:EF:49:7D:F4:97:58:6E:2C:EC:2E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584F506D5767ABC8A7E77239FF80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa
Signing time: Sun 27 Sep 2026 13:00:12 +0000
ROA not before: Sun 27 Sep 2026 13:00:12 +0000
ROA not after: Sat 26 Dec 2026 14:00:12 +0000
asID: 1299
IP address blocks: 198.66.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:6d:57:67:ab:c8:a7:e7:72:39:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Sep 27 13:00:12 2026 GMT
Not After : Dec 26 14:00:12 2026 GMT
Subject: CN=84b875bf-2053-4fe0-bcfa-2369ebe908b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:2e:7c:c0:f3:47:07:98:16:4b:52:8b:91:
3d:fa:3c:92:c7:c6:78:3f:8f:a5:af:7c:15:08:6a:
f2:db:80:04:b4:50:01:0e:8f:3e:43:3b:3f:74:33:
84:cc:1f:0b:ec:55:b0:d3:f8:b4:2a:c0:4a:81:d2:
79:3a:44:26:a0:47:90:bf:12:43:67:39:8a:54:94:
b9:52:17:84:53:fb:ce:ff:5d:aa:5a:48:4e:f8:17:
80:2b:b4:b0:74:28:a1:22:f1:b4:cc:aa:d9:84:ee:
30:61:c1:7c:0b:f5:c4:2f:08:da:09:fd:17:ca:6e:
08:07:f0:15:56:da:c7:eb:04:c3:48:b7:aa:f6:e3:
5f:2d:40:9c:c3:d0:88:74:ac:11:36:c1:ea:00:e1:
ff:98:78:68:bb:ab:09:60:4e:92:f3:e5:a6:34:d7:
b5:6d:01:1a:3b:97:26:48:69:28:b4:f3:20:e7:00:
12:3f:74:0d:6e:c2:7e:cf:bb:5d:98:24:97:9e:b0:
87:e4:25:8a:a3:31:ef:98:b3:8c:17:34:3d:12:cf:
03:58:6f:0b:62:44:2b:bc:60:b2:a2:68:b8:6a:ac:
87:10:45:d9:bf:36:80:f9:48:27:15:5b:46:72:64:
63:7f:fe:8b:39:c2:d5:9e:81:c3:be:f6:a3:52:28:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:1B:DC:66:41:65:38:AA:83:EF:49:7D:F4:97:58:6E:2C:EC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:2a:9b:c1:34:72:2c:46:f3:0a:ce:48:62:dd:5f:ed:9f:fd:
25:59:6a:f8:1a:20:0d:eb:0b:59:cb:63:f0:70:21:65:34:38:
70:c5:80:57:53:3a:80:48:57:ac:bd:10:b1:e3:43:a5:10:8d:
22:16:0c:9c:8b:4f:77:72:f9:17:b1:62:f9:87:2d:3e:6f:7a:
5b:18:87:6a:cc:4c:51:c5:ff:ec:dd:4e:d7:7e:4a:1d:65:c7:
a3:d0:6a:ab:3d:7b:fb:54:c8:35:34:31:20:65:50:80:69:60:
10:98:a6:59:aa:6a:fa:91:91:e9:c4:f3:47:43:60:0b:90:17:
5e:aa:8b:3f:5a:78:7c:f8:b6:ca:ff:f6:52:9c:72:71:c7:b4:
bc:d8:5a:36:2c:1d:4b:30:53:87:6d:50:89:34:2a:e7:8b:63:
1f:80:94:fc:dd:c5:01:b4:e7:f3:cd:4a:35:87:21:c3:e3:2b:
22:41:77:49:81:aa:65:23:54:89:9a:ea:a0:be:5f:49:70:72:
65:aa:65:b4:24:6f:97:de:b7:e1:c0:90:b5:d6:1b:52:74:6c:
e8:db:48:7e:5f:0c:5f:ca:c5:30:35:7e:b4:01:b2:70:be:e4:
43:29:78:a5:99:7f:4f:3f:07:9a:26:0b:d1:07:28:9a:3b:46:
ea:42:ac:dd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9QbVdnq8in53I5/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk
ODRiODc1YmYtMjA1My00ZmUwLWJjZmEtMjM2OWViZTkwOGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDwufMDzRweYFktSi5E9+jySx8Z4P4+lr3wV
CGry24AEtFABDo8+Qzs/dDOEzB8L7FWw0/i0KsBKgdJ5OkQmoEeQvxJDZzmKVJS5
UheEU/vO/12qWkhO+BeAK7SwdCihIvG0zKrZhO4wYcF8C/XELwjaCf0Xym4IB/AV
VtrH6wTDSLeq9uNfLUCcw9CIdKwRNsHqAOH/mHhou6sJYE6S8+WmNNe1bQEaO5cm
SGkotPMg5wASP3QNbsJ+z7tdmCSXnrCH5CWKozHvmLOMFzQ9Es8DWG8LYkQrvGCy
omi4aqyHEEXZvzaA+UgnFVtGcmRjf/6LOcLVnoHDvvajUigTNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP27G9xmQWU4qoPvSX30l1huLOwuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzVhYzBjYjQtMTQ5Mi0z
NjcyLTg3YzgtZTkzNGMxZmZjMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmCqbwTRyLEbzCs5IYt1f7Z/9JVlq+BogDesLWctj8HAhZTQ4cMWAV1M6
gEhXrL0QseNDpRCNIhYMnItPd3L5F7Fi+YctPm96WxiHasxMUcX/7N1O135KHWXH
o9Bqqz17+1TINTQxIGVQgGlgEJimWapq+pGR6cTzR0NgC5AXXqqLP1p4fPi2yv/2
Upxycce0vNhaNiwdSzBTh21QiTQq54tjH4CU/N3FAbTn881KNYchw+MrIkF3SYGq
ZSNUiZrqoL5fSXByZapltCRvl9634cCQtdYbUnRs6NtIfl8MX8rFMDV+tAGycL7k
Qyl4pZl/Tz8HmiYL0QcomjtG6kKs3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:55:09 2026 by rpki-client