
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
File: f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa (raw, json)
Hash identifier: Qy967xXgie6twREH7u0py7BV0lmcc1CG4eDsa2cQ6ws=
Subject key identifier: 4B:95:E4:65:63:E2:84:F7:4F:86:82:DF:86:21:48:EA:8E:F7:0A:FC
Certificate issuer: /CN=39fdcce5-d149-4129-97c3-c60e86600fb8
Certificate serial: 010D0C9F4328584F3E47E20D0F9C78AFED89A800
Authority key identifier: 8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 15121
IP address blocks: 66.102.144.0/20 maxlen: 24
198.105.28.0/22 maxlen: 24
2604:a780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:e2:0d:0f:9c:78:af:ed:89:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fdcce5-d149-4129-97c3-c60e86600fb8
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=a689d804-fe24-48ba-be88-4257019a2e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:d3:99:a9:48:73:b2:2c:ba:2e:b5:42:07:
da:c3:74:02:cc:7c:31:3b:d0:0b:63:5e:40:f9:58:
e8:73:8b:da:ae:32:e6:4a:58:d5:2f:30:25:71:00:
25:47:8c:d2:c2:42:75:6a:09:07:c4:17:46:38:c4:
16:83:a0:1d:3f:2e:a8:c2:6b:63:af:e0:27:2a:67:
ec:0a:28:6e:f2:15:27:d4:3d:a9:2d:47:37:96:70:
07:05:f0:43:4d:cc:b9:d6:63:37:3e:d8:df:de:80:
3f:9e:e1:48:c7:0d:51:dd:5c:ed:ba:a2:b2:1d:ba:
e4:ea:4a:ea:f6:68:b7:dc:2f:43:05:8c:70:f6:84:
00:a7:c3:1a:31:19:85:9b:6a:c8:09:88:82:7c:90:
26:da:73:96:79:53:f9:20:15:97:2b:75:67:c6:0d:
34:2f:dc:2e:52:4c:4b:a5:f7:00:68:23:ab:3b:00:
38:db:dd:49:c7:32:02:37:4d:51:8a:4d:ce:4a:11:
6f:71:97:ff:2c:f0:00:7e:11:1e:f5:a0:e9:69:19:
9e:a0:5e:41:73:29:db:87:b8:a5:f0:96:6a:fe:7c:
0c:f2:8c:de:cb:23:38:2d:2d:ff:9c:75:7a:bf:f8:
2b:7c:96:2c:5a:5b:e9:2e:22:f3:88:a3:5c:5c:50:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:95:E4:65:63:E2:84:F7:4F:86:82:DF:86:21:48:EA:8E:F7:0A:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl
X509v3 Authority Key Identifier:
keyid:8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.144.0/20
198.105.28.0/22
IPv6:
2604:a780::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ac:6a:32:ea:55:38:3f:33:92:96:4a:48:a1:5b:27:97:f8:
39:bb:d2:b7:18:44:c3:aa:d5:4a:4b:e7:89:90:72:43:cb:7f:
7a:bc:06:37:a3:7b:24:3e:b4:4c:cd:9b:08:87:5f:67:1f:50:
65:4d:a8:c3:3c:dd:9a:21:90:2a:4c:1f:c3:ec:46:e5:79:8b:
b2:4b:c4:35:31:3d:1c:ec:0a:a7:9f:60:a7:56:75:ea:2a:66:
11:f9:8b:8c:1e:b9:84:c9:30:31:23:fa:e9:3c:a4:ea:20:6c:
29:c4:d4:33:43:7b:61:3d:22:2e:a6:d7:32:7f:94:b4:3b:b5:
ca:dc:cb:ee:1d:14:59:5a:56:0a:5b:2d:bf:21:c5:36:6b:a4:
23:dc:a3:a9:fb:d8:8a:24:f8:30:46:a2:3d:9a:69:66:1b:46:
a7:04:53:f3:82:03:ca:02:29:f3:02:8d:dc:a2:54:0e:58:77:
e4:98:ce:50:39:a0:9e:90:53:f5:7d:30:00:23:c5:a8:c3:fb:
00:40:af:ed:b1:32:98:94:be:2a:c2:4f:e1:45:8f:5a:86:62:
f4:ba:5a:4a:1c:66:55:3f:e7:6c:3f:c5:ea:76:c4:48:38:8f:
c2:3e:31:8e:32:2f:51:55:15:83:fe:1b:ba:b2:39:ab:a2:54:
da:6e:8b:67
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE8+R+IND5x4r+2JqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzlmZGNjZTUtZDE0OS00MTI5LTk3YzMtYzYwZTg2NjAw
ZmI4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
YTY4OWQ4MDQtZmUyNC00OGJhLWJlODgtNDI1NzAxOWEyZTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlujTmalIc7Isui61Qgfaw3QCzHwxO9ALY15A
+Vjoc4varjLmSljVLzAlcQAlR4zSwkJ1agkHxBdGOMQWg6AdPy6owmtjr+AnKmfs
Cihu8hUn1D2pLUc3lnAHBfBDTcy51mM3Ptjf3oA/nuFIxw1R3VztuqKyHbrk6krq
9mi33C9DBYxw9oQAp8MaMRmFm2rICYiCfJAm2nOWeVP5IBWXK3Vnxg00L9wuUkxL
pfcAaCOrOwA4291JxzICN01Rik3OShFvcZf/LPAAfhEe9aDpaRmeoF5Bcynbh7il
8JZq/nwM8ozeyyM4LS3/nHV6v/grfJYsWlvpLiLziKNcXFDTcQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFEuV5GVj4oT3T4aC34YhSOqO9wr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWZk
Y2NlNS1kMTQ5LTQxMjktOTdjMy1jNjBlODY2MDBmYjgvZjk5YjNjNDMtNGIzMy0z
MGZiLTgwYWEtOTg5ZjNlMzlhZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzlmZGNjZTUtZDE0OS00MTI5LTk3
YzMtYzYwZTg2NjAwZmI4LzM5ZmRjY2U1LWQxNDktNDEyOS05N2MzLWM2MGU4NjYw
MGZiOC5jcmwwHwYDVR0jBBgwFoAUjwssUpAdyxtEtPtGAXFwnCkii3EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zOWZkY2NlNS1kMTQ5LTQxMjktOTdjMy1jNjBl
ODY2MDBmYjguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQmaQAwQC
xmkcMA0EAgACMAcDBQAmBKeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGGsajLqVTg/M5KWSkihWyeX+Dm7
0rcYRMOq1UpL54mQckPLf3q8BjejeyQ+tEzNmwiHX2cfUGVNqMM83ZohkCpMH8Ps
RuV5i7JLxDUxPRzsCqefYKdWdeoqZhH5i4weuYTJMDEj+uk8pOogbCnE1DNDe2E9
Ii6m1zJ/lLQ7tcrcy+4dFFlaVgpbLb8hxTZrpCPco6n72Iok+DBGoj2aaWYbRqcE
U/OCA8oCKfMCjdyiVA5Yd+SYzlA5oJ6QU/V9MAAjxajD+wBAr+2xMpiUvirCT+FF
j1qGYvS6WkocZlU/52w/xep2xEg4j8I+MY4yL1FVFYP+G7qyOauiVNpui2c=
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:04:44 2026 by rpki-client