
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa
File: ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa (raw, json)
Hash identifier: gFULAv9p8fFkYq0WxsHzrFOMekxjSNB6nHs36x2ylLU=
Subject key identifier: 41:5F:9D:25:A2:61:6C:6F:D0:2A:63:23:85:86:AA:E4:03:47:B9:5B
Certificate issuer: /CN=576def10-b142-4ece-9211-731e3adac706
Certificate serial: 010D0C9F4328584F331D30FFA0215C31D7233900
Authority key identifier: BF:EE:50:EA:4A:1D:ED:50:5D:6D:39:88:7F:AB:E4:E2:0B:11:D9:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa
Signing time: Thu 17 Sep 2026 01:00:11 +0000
ROA not before: Thu 17 Sep 2026 01:00:11 +0000
ROA not after: Wed 16 Dec 2026 02:00:11 +0000
asID: 402443
IP address blocks: 216.71.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/576def10-b142-4ece-9211-731e3adac706.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/576def10-b142-4ece-9211-731e3adac706.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:33:1d:30:ff:a0:21:5c:31:d7:23:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576def10-b142-4ece-9211-731e3adac706
Validity
Not Before: Sep 17 01:00:11 2026 GMT
Not After : Dec 16 02:00:11 2026 GMT
Subject: CN=35c39744-6b44-4e23-9a19-783b6cc52bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:8d:f6:b7:9d:4f:db:3e:9e:c3:10:b2:e4:
c9:5c:c1:0c:18:0e:e0:35:bf:04:d8:b6:3f:5c:8d:
e4:fa:c5:51:fc:8d:6e:81:2d:d5:f0:46:cd:5b:1b:
c4:53:cc:65:dd:91:b0:29:0b:5d:58:82:1a:82:29:
57:8b:ea:40:6b:55:c4:a5:7c:02:a8:59:f2:eb:82:
a0:76:3b:18:2f:d3:4e:54:83:86:18:0d:48:a5:ea:
fd:f4:2f:a4:3d:35:b9:fa:26:9d:28:6f:5a:86:61:
b3:a8:d0:d3:1c:ef:64:86:20:99:43:9f:bf:d8:aa:
d5:84:fe:f9:b4:5e:79:fa:85:31:be:56:15:e9:fd:
9e:42:9e:e4:8b:85:0a:7a:c3:80:eb:c4:b2:b0:8e:
d8:dd:e8:c5:e2:bd:4a:da:4b:4b:1b:2d:43:0f:cb:
01:c0:fe:fd:dd:9e:c7:6f:25:0b:b5:4e:02:9f:7a:
dd:0e:0b:9a:c2:be:28:f2:ce:04:10:ef:a5:b2:e5:
3e:12:6f:d5:bb:f0:b5:f4:6c:17:24:36:32:e1:04:
84:f3:b4:d3:d0:fd:2b:53:e2:0a:09:6d:95:a5:e6:
73:d8:af:cd:b5:07:5c:69:81:16:8d:29:37:4a:46:
e3:4b:d2:d9:07:c5:11:fc:b9:fd:b4:2f:b5:28:8e:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:9D:25:A2:61:6C:6F:D0:2A:63:23:85:86:AA:E4:03:47:B9:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/576def10-b142-4ece-9211-731e3adac706.crl
X509v3 Authority Key Identifier:
keyid:BF:EE:50:EA:4A:1D:ED:50:5D:6D:39:88:7F:AB:E4:E2:0B:11:D9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:d2:1c:b5:8c:d3:a7:9c:7b:36:6a:06:b7:2e:df:de:8b:ee:
52:0e:83:98:28:21:f9:ab:4b:23:57:d0:0b:3d:ed:aa:a7:e3:
32:b9:3b:b1:c9:d2:2d:f5:db:2a:d7:1e:97:4e:04:52:7d:79:
fe:2c:83:83:11:69:36:a2:6f:96:10:8c:f0:5a:7c:e3:d3:8c:
12:45:da:ba:b4:6f:75:42:1e:10:36:9c:90:4e:6c:54:21:d9:
43:97:e8:5d:1a:19:20:2b:a0:97:84:67:87:c4:51:42:02:a7:
d8:68:f5:2f:ea:d0:fe:0b:2b:a9:b0:6d:aa:19:b7:39:99:48:
e7:59:b0:ea:bb:7b:00:79:ea:87:9c:e9:a6:d0:61:2c:34:4d:
16:9d:48:e7:22:b3:57:63:ce:82:ea:70:0f:9e:1a:30:9c:99:
3c:9d:b0:31:e4:96:b0:42:2a:94:99:90:0c:5c:8f:1d:cc:df:
9f:81:8a:63:46:9c:69:47:bc:d4:19:25:2e:85:e3:0a:91:0d:
90:89:c9:11:95:f5:41:79:99:92:a9:2e:75:62:a9:5f:07:2f:
24:36:b5:d7:b9:6e:68:6b:05:8a:69:af:b1:ce:03:7a:06:26:
29:03:6c:17:c3:9c:75:c7:94:e6:4c:15:38:14:c4:8d:42:6c:
a4:56:e4:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHTD/oCFcMdcjOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc2ZGVmMTAtYjE0Mi00ZWNlLTkyMTEtNzMxZTNhZGFj
NzA2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk
MzVjMzk3NDQtNmI0NC00ZTIzLTlhMTktNzgzYjZjYzUyYmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhuN9redT9s+nsMQsuTJXMEMGA7gNb8E2LY/
XI3k+sVR/I1ugS3V8EbNWxvEU8xl3ZGwKQtdWIIagilXi+pAa1XEpXwCqFny64Kg
djsYL9NOVIOGGA1Iper99C+kPTW5+iadKG9ahmGzqNDTHO9khiCZQ5+/2KrVhP75
tF55+oUxvlYV6f2eQp7ki4UKesOA68SysI7Y3ejF4r1K2ktLGy1DD8sBwP793Z7H
byULtU4Cn3rdDguawr4o8s4EEO+lsuU+Em/Vu/C19GwXJDYy4QSE87TT0P0rU+IK
CW2VpeZz2K/NtQdcaYEWjSk3SkbjS9LZB8UR/Ln9tC+1KI6dawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFfnSWiYWxv0CpjI4WGquQDR7lbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NzZk
ZWYxMC1iMTQyLTRlY2UtOTIxMS03MzFlM2FkYWM3MDYvZmZjNzMyMGUtZjVmNC0z
MjhkLTk3NmMtZGM3ZDgzYWI5MDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTc2ZGVmMTAtYjE0Mi00ZWNlLTky
MTEtNzMxZTNhZGFjNzA2LzU3NmRlZjEwLWIxNDItNGVjZS05MjExLTczMWUzYWRh
YzcwNi5jcmwwHwYDVR0jBBgwFoAUv+5Q6kod7VBdbTmIf6vk4gsR2cYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi81NzZkZWYxMC1iMTQyLTRlY2UtOTIxMS03MzFl
M2FkYWM3MDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ed8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzSHLWM06ecezZqBrcu396L7lIOg5goIfmrSyNX0As97aqn4zK5O7HJ
0i312yrXHpdOBFJ9ef4sg4MRaTaib5YQjPBafOPTjBJF2rq0b3VCHhA2nJBObFQh
2UOX6F0aGSAroJeEZ4fEUUICp9ho9S/q0P4LK6mwbaoZtzmZSOdZsOq7ewB56oec
6abQYSw0TRadSOcis1djzoLqcA+eGjCcmTydsDHklrBCKpSZkAxcjx3M35+BimNG
nGlHvNQZJS6F4wqRDZCJyRGV9UF5mZKpLnViqV8HLyQ2tde5bmhrBYppr7HOA3oG
JikDbBfDnHXHlOZMFTgUxI1CbKRW5Pk=
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:23:12 2026 by rpki-client