
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa
File: 973766df-850f-388b-aa20-592987be5996.roa (raw, json)
Hash identifier: KMa8v9LHtlnEIqyYxYJ+qJHVik9NGEnCH1fZzSFtu7I=
Subject key identifier: 65:E5:60:5B:7B:96:5E:0A:B7:37:7F:91:9F:38:47:9A:FE:87:8F:02
Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial: 010D0C9F4328584EFE1227C80ED428BF16C382A0
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 22135
IP address blocks: 173.242.0.0/24 maxlen: 24
173.242.1.0/24 maxlen: 24
173.242.4.0/24 maxlen: 24
173.242.5.0/24 maxlen: 24
173.242.6.0/24 maxlen: 24
173.242.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:27:c8:0e:d4:28:bf:16:c3:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=6c08c75d-d729-42ac-9fc0-608af65e7c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:48:b5:f4:a9:b7:22:19:46:f8:85:e6:39:
b4:30:68:1a:2c:e7:58:37:f7:c1:60:95:8d:95:9b:
ed:98:83:d6:5f:90:1f:48:8e:aa:52:d3:ba:a7:69:
b6:02:66:fa:53:36:14:40:69:65:1b:98:6f:0f:27:
bd:34:7c:97:5c:58:5b:78:8a:f1:2b:24:0c:e5:e6:
97:5b:c9:73:9a:9a:38:e2:f3:0a:4b:1a:6a:fc:17:
ff:3e:df:4f:eb:77:e4:79:51:e1:b9:e3:4c:7c:64:
9a:90:f3:92:6a:fe:c8:b4:18:39:c9:32:5e:e4:39:
28:dc:7f:57:66:93:53:e1:cf:c3:d6:fa:ba:9e:12:
fd:d0:dc:5c:09:7b:7d:d2:43:a4:5b:bb:0b:d9:dd:
6a:ec:93:55:5c:6c:80:c8:d7:a7:1b:00:f5:28:43:
f0:7a:57:e3:0e:0c:ab:46:33:cb:d7:4c:bb:e9:fc:
5d:60:cd:2e:a7:30:b1:e2:c7:ac:5a:56:55:ac:9f:
6a:cb:71:d7:4e:66:f4:8b:9b:cd:fb:57:f2:1f:0c:
49:b3:cb:77:af:3c:34:8d:42:f8:14:75:ee:3a:58:
f7:bc:dd:2b:37:b8:2e:ac:e3:77:b4:b9:89:a3:24:
80:d7:69:23:af:ab:8f:85:59:ff:c9:89:af:ba:f5:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:60:5B:7B:96:5E:0A:B7:37:7F:91:9F:38:47:9A:FE:87:8F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
X509v3 Authority Key Identifier:
keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
sbgp-ipAddrBlock: critical
IPv4:
173.242.0.0/23
173.242.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:4b:b7:7d:c8:ab:e8:24:b0:47:8e:f1:e5:e1:1a:c6:a6:5c:
af:bb:b4:17:b0:e6:12:c0:22:fa:ec:cc:36:78:c2:6e:87:a8:
85:fc:89:3b:fb:ac:07:0e:19:18:62:10:60:5c:46:19:d4:c8:
d1:65:fd:ca:e7:18:70:ce:54:57:f5:99:b1:c3:9f:bf:f6:5b:
02:c6:85:c8:e5:83:0a:22:58:ef:e0:33:3b:02:58:f0:6a:de:
56:59:cb:e2:75:77:0c:9a:8e:d6:58:e5:03:9e:6b:43:00:da:
ad:34:98:1e:94:c4:b6:6c:37:1a:fa:e5:46:88:26:6d:d9:b7:
70:d1:13:9d:35:ba:44:19:25:52:1d:22:db:78:4a:0b:f7:b8:
2e:d2:12:1e:8c:1c:e5:16:44:14:50:41:9e:0d:2e:30:30:2c:
6e:3c:9c:df:c7:d9:60:3c:e6:c4:0c:89:d4:de:57:7c:17:c1:
e9:8e:8d:95:e2:71:8a:e7:12:cc:ef:3a:89:0c:56:f9:a6:22:
1c:e7:99:3c:02:f7:e1:aa:2d:86:82:3e:60:0e:3b:eb:9d:44:
f8:23:14:14:b1:46:ca:b1:51:4f:f1:3e:e2:90:3c:46:a2:7c:
07:cc:a3:f6:f8:2d:1c:42:3f:73:6e:81:90:62:40:83:13:08:
f1:75:67:a5
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7+EifIDtQovxbDgqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx
YzY0MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
NmMwOGM3NWQtZDcyOS00MmFjLTlmYzAtNjA4YWY2NWU3YzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq5ItfSptyIZRviF5jm0MGgaLOdYN/fBYJWN
lZvtmIPWX5AfSI6qUtO6p2m2Amb6UzYUQGllG5hvDye9NHyXXFhbeIrxKyQM5eaX
W8lzmpo44vMKSxpq/Bf/Pt9P63fkeVHhueNMfGSakPOSav7ItBg5yTJe5Dko3H9X
ZpNT4c/D1vq6nhL90NxcCXt90kOkW7sL2d1q7JNVXGyAyNenGwD1KEPwelfjDgyr
RjPL10y76fxdYM0upzCx4sesWlZVrJ9qy3HXTmb0i5vN+1fyHwxJs8t3rzw0jUL4
FHXuOlj3vN0rN7gurON3tLmJoySA12kjr6uPhVn/yYmvuvWy+QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGXlYFt7ll4Ktzd/kZ84R5r+h48CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0
OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvOTczNzY2ZGYtODUwZi0z
ODhiLWFhMjAtNTkyOTg3YmU1OTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz
YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy
MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz
ZTE0MjFjNjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrfIAAwQC
rfIEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAI1Lt33Iq+gksEeO8eXhGsamXK+7tBew5hLAIvrszDZ4wm6H
qIX8iTv7rAcOGRhiEGBcRhnUyNFl/crnGHDOVFf1mbHDn7/2WwLGhcjlgwoiWO/g
MzsCWPBq3lZZy+J1dwyajtZY5QOea0MA2q00mB6UxLZsNxr65UaIJm3Zt3DRE501
ukQZJVIdItt4Sgv3uC7SEh6MHOUWRBRQQZ4NLjAwLG48nN/H2WA85sQMidTeV3wX
wemOjZXicYrnEszvOokMVvmmIhznmTwC9+GqLYaCPmAOO+udRPgjFBSxRsqxUU/x
PuKQPEaifAfMo/b4LRxCP3NugZBiQIMTCPF1Z6U=
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:08:45 2026 by rpki-client