
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
File: 8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa (raw, json)
Hash identifier: K1qZBr9bbBID6+dwqEMc4UVwzcA5QkEMj8C0p/Pt7Zo=
Subject key identifier: 23:18:3E:D9:CD:8A:1D:2A:D5:06:F0:C8:80:A9:AF:80:56:21:41:6C
Certificate issuer: /CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
Certificate serial: 010D0C9F4328584F4972E33D452A619D6A1BDC70
Authority key identifier: 61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30182
IP address blocks: 45.59.172.0/22 maxlen: 24
199.87.88.0/21 maxlen: 24
208.69.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:e3:3d:45:2a:61:9d:6a:1b:dc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=67cc8f5d-f8b0-4ec1-a041-d6ad091403b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:29:b9:3e:80:c2:ee:75:ba:0e:c7:c4:ef:
1b:32:f4:9d:fd:56:f5:c8:16:71:c7:ed:9b:47:a7:
45:ad:7e:f0:e5:0d:ec:3a:35:b6:01:e6:dd:86:e1:
8a:31:d2:7a:c0:65:31:fc:82:42:36:9a:fc:86:85:
4a:45:09:f9:bf:51:62:8d:1d:2a:f2:ce:f0:c3:a6:
56:ce:22:68:fc:31:22:2d:ed:ab:78:20:aa:67:63:
a6:c7:6a:1c:df:27:b1:bc:73:6d:92:3c:ce:84:7f:
bb:7f:30:f8:53:d8:40:09:d1:13:2e:70:de:2b:c7:
58:39:ee:64:4b:ed:1f:86:0c:bd:1e:2c:bb:36:75:
13:da:bc:9a:88:69:da:0a:1a:75:d5:ff:fd:bd:72:
b2:e9:26:82:e6:22:cb:3b:02:9d:41:22:7f:a0:f9:
62:2b:ef:82:e5:6d:aa:ba:24:c0:37:73:77:dc:5f:
d2:e5:91:b8:d4:b2:8b:f7:5e:b9:18:f2:c6:56:93:
70:9d:81:61:c4:83:9f:7f:40:6a:df:3d:95:c8:a3:
9f:4d:38:62:60:b1:80:cc:01:3a:ad:9c:4e:ad:f4:
3b:ee:62:c1:f9:2a:57:fc:ed:f9:0f:f5:23:19:37:
47:d5:f9:dc:1f:4a:52:68:13:0b:cb:24:26:96:2f:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:3E:D9:CD:8A:1D:2A:D5:06:F0:C8:80:A9:AF:80:56:21:41:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl
X509v3 Authority Key Identifier:
keyid:61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.172.0/22
199.87.88.0/21
208.69.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:90:e2:5d:99:81:35:06:21:f9:87:4e:6f:12:2d:99:ba:e2:
7a:e8:12:21:fe:3d:b1:40:a6:dd:b3:97:e8:cf:28:03:8d:a4:
83:fc:56:f5:53:4f:53:32:3e:a8:31:07:88:05:47:2a:fa:b3:
64:e6:b2:be:7a:f1:96:c4:1c:2c:14:8b:ea:b9:cb:b0:d4:b6:
d1:03:01:f4:a6:c4:1c:ea:21:16:c8:d3:d3:7a:e5:1d:61:87:
27:c6:33:6b:c3:3e:86:73:99:ba:98:bd:0f:ed:23:a2:bd:36:
7b:c9:64:09:24:48:fd:52:27:1b:48:ab:77:a0:33:95:8e:0a:
21:81:1a:4f:03:8d:5e:61:50:02:3f:f1:98:6c:05:f7:2f:9a:
4f:ba:83:83:ef:ef:05:04:c5:ce:d0:39:3f:1e:24:7f:cd:e0:
83:03:0d:55:74:6d:03:44:5e:39:35:17:86:c1:ed:f1:4e:8d:
75:7a:0a:81:f0:05:db:93:ba:70:6a:2e:76:03:b4:15:d4:9d:
3a:21:37:96:30:69:4e:02:b7:89:68:7f:a0:10:d6:13:51:e3:
07:f5:8b:e0:47:6d:7c:16:8b:14:87:ac:e4:04:e3:64:6b:f1:
f0:76:8d:9d:c1:c2:61:9c:d4:7e:26:83:6e:0a:95:4a:93:3d:
01:69:cb:be
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JcuM9RSphnWob3HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IwNDRlZDItZjRkYy00NTljLTg2MmMtY2RiMTg2ZTY5
ZWIxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjdjYzhmNWQtZjhiMC00ZWMxLWEwNDEtZDZhZDA5MTQwM2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FQpuT6Awu51ug7HxO8bMvSd/Vb1yBZxx+2b
R6dFrX7w5Q3sOjW2AebdhuGKMdJ6wGUx/IJCNpr8hoVKRQn5v1FijR0q8s7ww6ZW
ziJo/DEiLe2reCCqZ2Omx2oc3yexvHNtkjzOhH+7fzD4U9hACdETLnDeK8dYOe5k
S+0fhgy9Hiy7NnUT2ryaiGnaChp11f/9vXKy6SaC5iLLOwKdQSJ/oPliK++C5W2q
uiTAN3N33F/S5ZG41LKL9165GPLGVpNwnYFhxIOff0Bq3z2VyKOfTThiYLGAzAE6
rZxOrfQ77mLB+SpX/O35D/UjGTdH1fncH0pSaBMLyyQmli/M4QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCMYPtnNih0q1QbwyICpr4BWIUFsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83YjA0
NGVkMi1mNGRjLTQ1OWMtODYyYy1jZGIxODZlNjllYjEvOGQwNDgxMGQtYjNhOC0z
ZDZmLTg0ZGEtODEyOTUwYWMxZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2IwNDRlZDItZjRkYy00NTljLTg2
MmMtY2RiMTg2ZTY5ZWIxLzdiMDQ0ZWQyLWY0ZGMtNDU5Yy04NjJjLWNkYjE4NmU2
OWViMS5jcmwwHwYDVR0jBBgwFoAUYbUo2Z9PQDLqc8VEPz3gE3fsVqQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83YjA0NGVkMi1mNGRjLTQ1OWMtODYyYy1jZGIx
ODZlNjllYjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLTusAwQD
x1dYAwQC0EVIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAK2Q4l2ZgTUGIfmHTm8SLZm64nroEiH+PbFApt2z
l+jPKAONpIP8VvVTT1MyPqgxB4gFRyr6s2Tmsr568ZbEHCwUi+q5y7DUttEDAfSm
xBzqIRbI09N65R1hhyfGM2vDPoZzmbqYvQ/tI6K9NnvJZAkkSP1SJxtIq3egM5WO
CiGBGk8DjV5hUAI/8ZhsBfcvmk+6g4Pv7wUExc7QOT8eJH/N4IMDDVV0bQNEXjk1
F4bB7fFOjXV6CoHwBduTunBqLnYDtBXUnTohN5YwaU4Ct4lof6AQ1hNR4wf1i+BH
bXwWixSHrOQE42Rr8fB2jZ3BwmGc1H4mg24KlUqTPQFpy74=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:43:35 2026 by rpki-client