
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/0067ebcb-fc2e-3580-a5c5-d3712116833e.roa
File: 0067ebcb-fc2e-3580-a5c5-d3712116833e.roa (raw, json)
Hash identifier: 1v9+OFRTkDULMFGKGLkpHpswvUap8mm1KjLp4aq5EO4=
Subject key identifier: 1C:58:CD:0A:4E:0E:FF:6C:18:F1:90:51:37:9D:AB:DF:D8:1F:7D:DA
Certificate issuer: /CN=23e8b687-5694-47a8-8a0b-d3828a99b77a
Certificate serial: 010D0C9F4328584F4972B3C1BC492117E7F1B000
Authority key identifier: ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/0067ebcb-fc2e-3580-a5c5-d3712116833e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20206
IP address blocks: 206.168.244.0/22 maxlen: 24
2607:9340::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:b3:c1:bc:49:21:17:e7:f1:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e8b687-5694-47a8-8a0b-d3828a99b77a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=03c13b4a-1e11-423f-9134-43067e98f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:c3:49:28:a8:82:a4:c3:49:20:dc:75:ea:
de:39:8f:f4:f5:0d:e8:29:b6:37:a3:cb:6c:fe:b5:
50:c2:c6:64:7e:89:81:89:05:a4:fc:45:07:92:ed:
06:d1:07:b3:1e:17:86:d2:f7:6a:60:e9:a9:69:7e:
bd:f4:71:d8:2b:36:38:d7:53:e9:9d:50:76:fb:a2:
90:64:83:95:04:3f:db:c9:70:50:8d:26:e4:6a:0a:
93:e6:26:1f:5f:ff:91:58:58:bb:e4:3a:79:7e:7d:
db:78:88:fd:bf:0f:24:c8:68:ce:77:8b:04:86:6a:
11:99:ab:42:6a:e4:1d:7a:0e:e4:ca:95:c8:21:f5:
eb:3e:c5:6b:2d:f2:cd:62:ef:38:3b:e7:a4:ae:31:
2b:d5:db:9a:4d:ea:0c:13:3f:49:d3:aa:02:55:99:
f5:66:50:c5:0c:12:2a:b1:89:9c:c8:27:1a:2f:ef:
d7:29:f4:7b:12:88:8e:76:a9:75:81:b6:92:8c:b0:
9c:ca:9e:c8:22:a9:03:7e:0b:81:9a:8f:c9:2c:a4:
a1:89:3e:55:b0:d1:5b:91:22:58:6f:20:df:f7:42:
cd:f5:8d:74:16:f4:a6:06:d3:72:b4:f6:82:58:57:
b8:6e:79:8d:28:31:d9:f4:e9:8a:86:4e:cf:06:dc:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:CD:0A:4E:0E:FF:6C:18:F1:90:51:37:9D:AB:DF:D8:1F:7D:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/0067ebcb-fc2e-3580-a5c5-d3712116833e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl
X509v3 Authority Key Identifier:
keyid:ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.244.0/22
IPv6:
2607:9340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:20:21:c3:77:7f:27:5a:72:55:22:92:da:98:14:c3:12:3b:
c8:1c:4f:7c:73:8f:d9:22:78:7f:85:8e:31:55:fa:7b:84:cf:
4c:e5:1a:30:76:c5:4c:89:9e:0a:22:68:6a:52:ba:07:47:0f:
c6:c0:87:c3:9c:ce:a4:7f:27:6f:e1:a0:51:1a:0c:0c:96:55:
24:24:0a:fe:e6:4e:88:79:d3:38:7a:74:95:a5:89:c0:b8:dc:
b1:3f:17:8a:52:c1:2f:e9:ed:e1:fa:e2:16:8f:55:f1:51:47:
7e:08:19:b3:1f:ca:8b:c8:fa:60:fd:fd:e6:be:2c:c0:e2:7a:
59:ca:97:85:d9:7a:87:d4:10:c9:93:f8:f7:aa:e6:37:88:6b:
6f:b3:71:1e:72:b6:84:6f:01:88:df:22:44:2c:bd:60:05:11:
04:db:96:54:12:52:22:19:b2:47:9d:93:40:f2:a8:d5:c6:27:
9c:4b:06:e7:53:ca:15:4f:a2:91:83:7f:0c:e4:5f:23:89:f2:
c4:88:60:41:82:78:17:ca:87:6c:47:a5:6f:b1:0a:20:d6:6a:
03:2e:b7:4e:89:75:59:39:e4:07:e3:68:4d:3f:bc:4b:01:f0:
d8:cd:ee:99:13:fd:fe:76:5a:16:b8:6a:00:05:8c:78:55:8e:
ba:fa:c7:03
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9JcrPBvEkhF+fxsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNlOGI2ODctNTY5NC00N2E4LThhMGItZDM4MjhhOTli
NzdhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDNjMTNiNGEtMWUxMS00MjNmLTkxMzQtNDMwNjdlOThmMWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqArDSSiogqTDSSDcdereOY/09Q3oKbY3o8ts
/rVQwsZkfomBiQWk/EUHku0G0QezHheG0vdqYOmpaX699HHYKzY411PpnVB2+6KQ
ZIOVBD/byXBQjSbkagqT5iYfX/+RWFi75Dp5fn3beIj9vw8kyGjOd4sEhmoRmatC
auQdeg7kypXIIfXrPsVrLfLNYu84O+ekrjEr1duaTeoMEz9J06oCVZn1ZlDFDBIq
sYmcyCcaL+/XKfR7EoiOdql1gbaSjLCcyp7IIqkDfguBmo/JLKShiT5VsNFbkSJY
byDf90LN9Y10FvSmBtNytPaCWFe4bnmNKDHZ9OmKhk7PBtxkjQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFBxYzQpODv9sGPGQUTedq9/YH33aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yM2U4
YjY4Ny01Njk0LTQ3YTgtOGEwYi1kMzgyOGE5OWI3N2EvMDA2N2ViY2ItZmMyZS0z
NTgwLWE1YzUtZDM3MTIxMTY4MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjNlOGI2ODctNTY5NC00N2E4LThh
MGItZDM4MjhhOTliNzdhLzIzZThiNjg3LTU2OTQtNDdhOC04YTBiLWQzODI4YTk5
Yjc3YS5jcmwwHwYDVR0jBBgwFoAU7XMh3UdkHfN8vy4KKDWOXDL92EQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yM2U4YjY4Ny01Njk0LTQ3YTgtOGEwYi1kMzgy
OGE5OWI3N2EuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzqj0MA0E
AgACMAcDBQAmB5NAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFUgIcN3fydaclUiktqYFMMSO8gcT3xzj9ki
eH+FjjFV+nuEz0zlGjB2xUyJngoiaGpSugdHD8bAh8OczqR/J2/hoFEaDAyWVSQk
Cv7mToh50zh6dJWlicC43LE/F4pSwS/p7eH64haPVfFRR34IGbMfyovI+mD9/ea+
LMDielnKl4XZeofUEMmT+Peq5jeIa2+zcR5ytoRvAYjfIkQsvWAFEQTbllQSUiIZ
skedk0DyqNXGJ5xLBudTyhVPopGDfwzkXyOJ8sSIYEGCeBfKh2xHpW+xCiDWagMu
t06JdVk55AfjaE0/vEsB8NjN7pkT/f52Wha4agAFjHhVjrr6xwM=
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:29:18 2026 by rpki-client