
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa
File: a8d50708-183d-32fa-8e34-b0e93ebefc17.roa (raw, json)
Hash identifier: b9iRFS6/7NF4niVHGLmkx1hDA2RwysOgUVXCCwwiYJM=
Subject key identifier: 98:CF:42:B5:85:9E:FF:9E:87:72:8B:B6:E0:79:B3:73:31:FA:57:27
Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Certificate serial: 010D0C9F4328584EED521BD0E898D6CD261407C0
Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 394111
IP address blocks: 64.147.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:1b:d0:e8:98:d6:cd:26:14:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=16a33fce-11d2-45fa-b1ba-bd4ab92b6679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:74:32:07:02:1b:2b:77:59:b6:d0:b5:bc:
b9:f8:6e:b5:c2:06:cb:09:7e:b6:24:34:2f:5a:e2:
44:d7:ad:40:71:c4:ff:c4:f1:5f:0f:3e:ab:07:8f:
e6:c4:f5:47:b7:83:e1:d2:f5:40:7b:7d:a0:73:ba:
a8:f3:fc:31:b0:18:fc:03:51:b4:40:ab:28:80:f6:
e3:e4:10:e0:df:9a:eb:ae:92:be:77:b9:d7:8d:37:
93:f0:8e:60:52:9f:41:37:d8:4a:41:d2:4d:91:1d:
c4:b8:81:42:34:0a:d8:46:2c:60:3f:98:88:38:52:
3f:cc:9d:ba:d5:45:ea:40:58:cf:0f:08:b0:2f:4b:
a9:e4:fd:51:7c:f6:97:f3:7f:35:42:b4:3b:1d:67:
7e:73:a8:55:47:74:5a:14:44:e6:55:a0:a6:95:6e:
e6:b5:ac:1b:d6:b8:d4:77:db:6d:7e:7e:d9:ce:81:
45:bb:e7:4d:d8:0a:f7:d6:c3:2c:dc:e1:b0:71:53:
94:27:6a:8d:3d:e8:57:0b:6d:31:ba:7b:42:00:a9:
7e:ca:ed:1d:dc:e4:2a:b9:88:5e:9d:1b:ce:0c:bf:
c9:52:80:61:6f:88:c1:1a:08:60:f1:bb:51:a3:80:
97:4a:da:2c:32:05:60:10:a3:05:72:53:31:da:4e:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:42:B5:85:9E:FF:9E:87:72:8B:B6:E0:79:B3:73:31:FA:57:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl
X509v3 Authority Key Identifier:
keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.147.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:43:0c:e0:1a:a2:e3:e5:b1:0d:4a:18:a7:61:cf:21:dd:7d:
25:da:bc:fe:5a:d4:9b:63:62:2f:71:27:65:7a:95:95:89:d1:
91:e4:71:b1:4b:3f:1f:5b:32:04:cb:14:25:e5:8d:b8:95:6f:
75:e0:da:ac:82:3e:fe:0d:a9:02:a6:fc:37:68:49:c5:a7:a4:
17:d7:ad:e0:5d:84:b9:af:89:41:35:37:77:05:77:39:f8:14:
74:85:4b:56:ad:eb:e1:76:df:d8:c1:65:79:f6:3a:2a:d1:a0:
c5:43:f6:f4:61:32:68:63:19:85:d2:a9:71:10:1d:f3:32:e4:
34:84:22:71:24:1c:be:46:c0:65:d3:eb:52:16:47:99:ae:e4:
b9:2e:b3:36:17:21:31:3c:07:fd:5c:be:36:3d:fe:a1:cb:69:
45:b6:b0:a5:7b:a0:59:8b:7f:36:ed:75:0b:4b:64:36:ea:74:
78:a0:8b:53:2e:8b:5c:09:9b:9f:83:eb:7f:32:b8:29:52:b9:
e5:21:0b:a7:98:5b:02:57:a6:b2:34:8b:b1:97:8d:9b:bb:90:
37:73:8a:a7:25:1d:c8:e6:99:55:fd:d5:a8:15:3c:1e:25:f2:
66:9b:3e:b7:90:14:e9:2d:75:66:82:88:c3:8c:15:4a:ff:06:
6f:bf:2c:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhvQ6JjWzSYUB8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5
YWI3MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
MTZhMzNmY2UtMTFkMi00NWZhLWIxYmEtYmQ0YWI5MmI2Njc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYx0MgcCGyt3WbbQtby5+G61wgbLCX62JDQv
WuJE161AccT/xPFfDz6rB4/mxPVHt4Ph0vVAe32gc7qo8/wxsBj8A1G0QKsogPbj
5BDg35rrrpK+d7nXjTeT8I5gUp9BN9hKQdJNkR3EuIFCNArYRixgP5iIOFI/zJ26
1UXqQFjPDwiwL0up5P1RfPaX8381QrQ7HWd+c6hVR3RaFETmVaCmlW7mtawb1rjU
d9ttfn7ZzoFFu+dN2Ar31sMs3OGwcVOUJ2qNPehXC20xuntCAKl+yu0d3OQquYhe
nRvODL/JUoBhb4jBGghg8btRo4CXStosMgVgEKMFclMx2k4fJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjPQrWFnv+eh3KLtuB5s3Mx+lcnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl
ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYThkNTA3MDgtMTgzZC0z
MmZhLThlMzQtYjBlOTNlYmVmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl
ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll
OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz
ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVDDOAaouPlsQ1KGKdhzyHdfSXavP5a1JtjYi9xJ2V6lZWJ0ZHkcbFL
Px9bMgTLFCXljbiVb3Xg2qyCPv4NqQKm/DdoScWnpBfXreBdhLmviUE1N3cFdzn4
FHSFS1at6+F239jBZXn2OirRoMVD9vRhMmhjGYXSqXEQHfMy5DSEInEkHL5GwGXT
61IWR5mu5LkuszYXITE8B/1cvjY9/qHLaUW2sKV7oFmLfzbtdQtLZDbqdHigi1Mu
i1wJm5+D638yuClSueUhC6eYWwJXprI0i7GXjZu7kDdziqclHcjmmVX91agVPB4l
8mabPreQFOktdWaCiMOMFUr/Bm+/LHU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:08:31 2026 by rpki-client