
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa
File: 8df1d45d-f0f6-331a-aa48-9c48058a3859.roa (raw, json)
Hash identifier: vDGR4DdWcOz1U3Whkcl8gceHiau0lrfDmWJmr6bmNAM=
Subject key identifier: 59:A7:F6:CB:AD:FD:7D:A7:93:49:EA:CB:BC:C2:88:AA:37:A6:45:C0
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F4328584F4977501A8C14A0885618DD80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 213122
IP address blocks: 104.249.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:50:1a:8c:14:a0:88:56:18:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=755d22ad-8414-4db7-8d6a-fcc53cd09a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:fa:bf:1d:71:35:a5:76:13:08:82:08:96:
60:04:b8:7e:ab:fb:29:20:e3:84:fb:e4:e8:1d:53:
fa:65:4d:db:c9:9b:5b:32:78:3b:aa:af:93:f3:78:
00:71:5c:ca:f0:ed:c5:83:fc:d9:c5:27:db:a7:19:
c9:d5:1c:02:64:e8:0e:66:46:6a:c8:92:5c:bf:5e:
43:60:0b:9c:41:41:ab:d4:20:07:46:f3:dc:b7:b8:
94:a3:1a:c1:69:08:02:77:fd:46:b6:cf:fc:43:f9:
6c:05:34:4e:46:c2:1e:6f:69:1f:89:1c:82:be:dc:
e2:1f:2b:ef:fe:4c:3f:3b:c5:32:49:38:07:d4:6d:
26:80:21:25:b7:5c:e7:5a:c6:04:33:ea:99:23:73:
81:89:d5:6c:e2:1e:ea:9d:3d:ba:c7:a9:59:bc:6a:
93:16:97:c5:62:34:02:02:03:3c:97:db:12:97:88:
b5:36:11:b5:cd:f2:60:70:46:3c:e8:40:54:af:ba:
57:49:83:10:b8:90:ab:ab:96:c8:11:4d:14:93:bb:
de:3a:77:60:62:3c:8a:20:78:20:ee:0d:b7:44:a7:
1c:02:96:6e:d1:44:13:df:6f:b8:f0:7d:72:0a:50:
3c:5b:64:94:0b:75:4a:3e:38:3c:6d:8e:3b:f3:21:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:F6:CB:AD:FD:7D:A7:93:49:EA:CB:BC:C2:88:AA:37:A6:45:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:5d:d9:f6:03:dc:dd:f2:72:ad:04:36:2b:9e:a5:e4:3d:1f:
81:16:78:b8:09:13:26:da:d7:4d:0a:3e:d5:a2:19:c2:90:6a:
59:dd:b5:59:09:d9:aa:3c:bd:54:c9:a5:dd:80:19:8f:33:f5:
0f:4a:12:47:a9:f5:11:4f:51:75:d6:8b:ff:fa:0a:02:3f:1e:
ca:89:24:c7:60:5a:d3:f6:95:02:5c:8a:c3:70:ce:09:35:7a:
f4:cc:ed:cd:bb:6c:5d:5f:10:73:02:94:a8:05:c7:ab:5b:70:
cf:8d:dd:07:fc:8f:2e:26:2b:27:fe:f2:66:ed:8d:03:1a:c7:
38:f1:97:b5:c7:be:e7:c4:e1:ce:da:f9:98:d2:f2:9a:9a:3d:
99:b0:81:6c:eb:8d:8c:11:bc:d7:cd:bc:2d:f0:6f:9e:92:3c:
0c:69:ad:ff:68:4c:5e:17:c5:dd:09:2d:52:70:0c:17:e7:cb:
cf:2d:ca:53:7b:74:5f:69:04:ae:4d:52:67:65:00:03:b2:c4:
80:3f:57:d0:ea:89:23:12:cc:f4:3a:03:e9:69:81:0c:4b:e3:
dc:0f:6b:21:84:da:09:64:f0:76:3b:43:51:3a:68:c6:4c:3c:
95:88:8b:83:d7:b1:55:45:03:ab:8c:64:51:46:0a:a3:27:49:
52:7a:0c:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1AajBSgiFYY3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzU1ZDIyYWQtODQxNC00ZGI3LThkNmEtZmNjNTNjZDA5YTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIL6vx1xNaV2EwiCCJZgBLh+q/spIOOE++To
HVP6ZU3byZtbMng7qq+T83gAcVzK8O3Fg/zZxSfbpxnJ1RwCZOgOZkZqyJJcv15D
YAucQUGr1CAHRvPct7iUoxrBaQgCd/1Gts/8Q/lsBTRORsIeb2kfiRyCvtziHyvv
/kw/O8UySTgH1G0mgCElt1znWsYEM+qZI3OBidVs4h7qnT26x6lZvGqTFpfFYjQC
AgM8l9sSl4i1NhG1zfJgcEY86EBUr7pXSYMQuJCrq5bIEU0Uk7veOndgYjyKIHgg
7g23RKccApZu0UQT32+48H1yClA8W2SUC3VKPjg8bY478yHs3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmn9sut/X2nk0nqy7zCiKo3pkXAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOGRmMWQ0NWQtZjBmNi0z
MzFhLWFhNDgtOWM0ODA1OGEzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJd2fYD3N3ycq0ENiuepeQ9H4EWeLgJEyba100KPtWiGcKQalndtVkJ
2ao8vVTJpd2AGY8z9Q9KEkep9RFPUXXWi//6CgI/HsqJJMdgWtP2lQJcisNwzgk1
evTM7c27bF1fEHMClKgFx6tbcM+N3Qf8jy4mKyf+8mbtjQMaxzjxl7XHvufE4c7a
+ZjS8pqaPZmwgWzrjYwRvNfNvC3wb56SPAxprf9oTF4Xxd0JLVJwDBfny88tylN7
dF9pBK5NUmdlAAOyxIA/V9DqiSMSzPQ6A+lpgQxL49wPayGE2glk8HY7Q1E6aMZM
PJWIi4PXsVVFA6uMZFFGCqMnSVJ6DJY=
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:32:59 2026 by rpki-client