
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa
File: 620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa (raw, json)
Hash identifier: jks06JpCDzBOCkwtUCq4EplwqHuCGhnC4uoRLwwSgkU=
Subject key identifier: 31:DE:54:32:87:E3:7A:44:71:51:B7:89:E0:63:5E:9F:B8:3A:AF:59
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F4328584F498B8F129ECC9AEC48315D60
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 10794
IP address blocks: 171.158.28.0/23 maxlen: 23
171.158.28.0/24 maxlen: 24
171.158.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:8f:12:9e:cc:9a:ec:48:31:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0a19f7f8-a0b2-4b97-b2f4-b62fbb7c107b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:9f:3a:0a:04:bc:7f:fd:5c:3b:48:8a:0b:
e5:f8:e8:86:e4:f3:d7:ca:e3:ab:c8:cf:f2:c3:c4:
aa:fc:1c:c7:2f:5c:e4:86:87:1a:d8:d6:33:4f:76:
99:99:93:0c:f4:b2:0d:a3:a1:8b:45:f2:da:8d:45:
be:05:7a:c1:bb:72:b5:07:53:ae:f9:a0:05:48:a8:
c5:65:d7:0f:e1:9e:0c:d6:0d:4d:8f:3c:06:a6:56:
6f:f9:76:99:c3:92:a1:47:eb:79:fb:bf:75:22:1b:
7e:b6:46:95:0c:ff:9e:89:7d:70:7f:20:b8:7b:95:
12:20:9d:1a:bd:39:8c:26:96:3a:d5:f5:e9:de:72:
f1:7e:78:4e:10:90:cf:55:25:84:66:7b:91:41:5b:
82:e9:06:6c:12:16:e9:9f:db:54:98:80:35:c0:9e:
a7:af:56:aa:5f:43:bc:6d:9e:69:57:0a:1d:54:52:
de:ff:8a:f0:b8:2b:1a:fb:a2:40:fd:5c:5c:57:b2:
05:64:c9:48:45:92:d3:1f:93:62:b4:e7:7c:b3:04:
c8:52:81:80:b5:4d:bd:c7:d2:cf:d5:e8:a5:0f:67:
f9:1f:34:44:80:6f:fa:31:94:f9:a5:f2:59:e5:ff:
96:23:e2:ce:d5:31:82:d7:3f:e7:37:9a:17:35:05:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DE:54:32:87:E3:7A:44:71:51:B7:89:E0:63:5E:9F:B8:3A:AF:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.158.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:bb:0a:90:69:d7:7d:5f:7c:38:50:3a:dc:66:0a:74:f9:9a:
9d:31:31:f0:ac:11:25:08:20:d5:09:bd:0f:58:9f:36:8f:0a:
6a:5d:d2:a8:11:5c:f2:1e:f5:2f:e8:72:ac:f7:4f:dd:9b:84:
eb:13:3e:a4:f7:d0:6a:36:60:95:30:19:85:2d:ee:a1:15:57:
44:a0:c3:2b:72:74:22:22:bb:6d:aa:85:e0:3d:9d:04:da:90:
35:50:25:a1:59:98:a3:9e:74:9d:bb:58:c6:25:61:d1:48:39:
5d:77:0e:bc:08:48:2d:f8:2a:b1:02:b5:49:d0:b1:59:1a:2f:
0b:c2:c9:ec:ee:0a:5c:7b:8e:bb:9b:c5:be:ca:a3:71:64:fb:
71:f3:0f:b6:97:39:4b:0a:db:52:df:5d:64:7e:4b:10:bf:21:
be:bb:28:8a:51:92:0a:4c:68:91:b9:d7:d8:5d:90:85:df:65:
65:70:ec:eb:bc:24:ad:df:2a:19:47:58:21:71:4d:75:fe:e2:
10:1e:62:ff:93:15:ea:00:9b:67:6e:6f:a2:a9:e6:16:ed:0a:
e7:0a:cf:72:0c:0e:46:49:de:b3:3d:74:1a:54:bf:ee:f8:24:
19:c6:cd:c9:c4:2d:a9:f3:65:33:3b:ea:92:d7:39:51:fa:c1:
0f:de:10:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji48Snsya7EgxXWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGExOWY3ZjgtYTBiMi00Yjk3LWIyZjQtYjYyZmJiN2MxMDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigafOgoEvH/9XDtIigvl+OiG5PPXyuOryM/y
w8Sq/BzHL1zkhoca2NYzT3aZmZMM9LINo6GLRfLajUW+BXrBu3K1B1Ou+aAFSKjF
ZdcP4Z4M1g1NjzwGplZv+XaZw5KhR+t5+791Iht+tkaVDP+eiX1wfyC4e5USIJ0a
vTmMJpY61fXp3nLxfnhOEJDPVSWEZnuRQVuC6QZsEhbpn9tUmIA1wJ6nr1aqX0O8
bZ5pVwodVFLe/4rwuCsa+6JA/VxcV7IFZMlIRZLTH5NitOd8swTIUoGAtU29x9LP
1eilD2f5HzREgG/6MZT5pfJZ5f+WI+LO1TGC1z/nN5oXNQUCowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHeVDKH43pEcVG3ieBjXp+4Oq9ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNjIwYzhkNTYtMjhjNS0z
ODExLTliYTctMDcyN2U4YzZlYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq54cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGG7CpBp131ffDhQOtxmCnT5mp0xMfCsESUIINUJvQ9YnzaPCmpd0qgR
XPIe9S/ocqz3T92bhOsTPqT30Go2YJUwGYUt7qEVV0SgwytydCIiu22qheA9nQTa
kDVQJaFZmKOedJ27WMYlYdFIOV13DrwISC34KrECtUnQsVkaLwvCyezuClx7jrub
xb7Ko3Fk+3HzD7aXOUsK21LfXWR+SxC/Ib67KIpRkgpMaJG519hdkIXfZWVw7Ou8
JK3fKhlHWCFxTXX+4hAeYv+TFeoAm2dub6Kp5hbtCucKz3IMDkZJ3rM9dBpUv+74
JBnGzcnELanzZTM76pLXOVH6wQ/eEJY=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:41:52 2026 by rpki-client