
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/9aa0718c-c3ac-3f65-adec-7e30be513fad.roa
File: 9aa0718c-c3ac-3f65-adec-7e30be513fad.roa (raw, json)
Hash identifier: 2xyf+mslROILsCNLUSwWhqXD3HPVi5wehn1pREJpodM=
Subject key identifier: 33:46:D0:D6:7C:14:AD:C5:FF:C8:72:C6:17:FE:E1:30:65:CD:06:D0
Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial: 010D0C9F4328584F539137B8D08BF2EC55083800
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/9aa0718c-c3ac-3f65-adec-7e30be513fad.roa
Signing time: Mon 28 Sep 2026 16:00:08 +0000
ROA not before: Mon 28 Sep 2026 16:00:08 +0000
ROA not after: Sat 05 Dec 2026 14:00:12 +0000
asID: 11404
IP address blocks: 107.180.146.0/23 maxlen: 24
206.251.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:53:91:37:b8:d0:8b:f2:ec:55:08:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
Validity
Not Before: Sep 28 16:00:08 2026 GMT
Not After : Dec 5 14:00:12 2026 GMT
Subject: CN=0dc19db2-8bef-4f18-8a95-c5661844519a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:d4:2c:c8:39:1a:eb:a4:e3:03:8f:ca:f4:
6b:0e:e1:f7:73:98:93:10:fc:26:72:86:52:80:30:
67:ef:08:e6:0f:c7:f7:24:48:31:c0:91:cc:b0:b9:
58:cb:e6:fd:78:14:95:65:f5:a6:6b:ff:f8:18:ff:
2e:0d:ee:f5:26:09:00:7f:99:e4:03:69:ea:8b:e9:
f8:72:10:ec:d1:4c:cf:65:8f:83:80:64:9c:bf:a6:
ce:f9:5d:5e:48:27:df:1d:8c:02:d1:7d:51:46:22:
bc:2f:e6:8d:5b:27:f5:ab:c6:45:7a:9f:90:ce:b7:
d2:f0:ae:ac:f7:23:d9:d2:5f:4c:1c:ef:b6:d9:ad:
b1:ec:ea:8c:fa:d8:fe:4c:9c:72:89:bd:48:ed:d9:
93:56:b2:53:7a:ba:52:67:64:5a:52:d7:ac:24:5d:
da:1e:7a:75:03:d4:c8:e5:ea:c5:87:8c:a7:a7:fd:
f9:f1:fe:31:ef:13:f9:b1:3b:43:65:b5:25:97:38:
fc:b4:2a:d8:ba:c4:d9:0a:3e:a9:d9:4d:09:10:c3:
ea:25:a3:72:02:57:7e:17:2a:9b:06:af:f1:5a:8c:
43:c8:46:04:73:ed:6b:51:bc:61:ce:ae:b8:62:a6:
8d:68:d6:24:b3:67:3c:a5:48:ba:c9:59:73:70:69:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:D0:D6:7C:14:AD:C5:FF:C8:72:C6:17:FE:E1:30:65:CD:06:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/9aa0718c-c3ac-3f65-adec-7e30be513fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
X509v3 Authority Key Identifier:
keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
sbgp-ipAddrBlock: critical
IPv4:
107.180.146.0/23
206.251.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d7:14:e6:23:ef:b3:70:e4:d0:b8:2e:c2:5c:f5:f1:7a:18:
77:8f:6f:c7:7e:9d:3d:d0:83:cc:5c:46:1a:a5:7f:25:a4:7b:
88:30:db:4b:fa:56:67:05:5f:16:2a:fc:00:fc:2d:95:0d:af:
0f:0d:4c:2c:eb:f2:bd:23:88:b6:1b:9e:d4:22:e5:5d:ee:0c:
da:ed:8e:d5:b8:d6:db:83:bc:e6:e9:b1:87:30:7c:90:ed:1d:
b6:6d:b5:f6:e8:90:a8:15:3b:30:41:17:27:be:3e:45:e0:20:
df:d9:22:49:d1:d3:01:cb:f6:6e:e4:e4:d8:59:7f:01:c4:22:
b7:ec:a1:b9:3c:c3:1b:0e:90:e7:69:e3:b6:33:bc:08:f3:3e:
dd:dc:90:d9:1c:0a:14:8f:cd:e8:98:b7:b7:ce:f3:53:9a:1a:
3c:e0:8c:3d:a2:4e:d7:17:88:58:ef:98:d4:74:a8:b1:cc:eb:
36:89:2a:d5:76:0a:5b:2b:85:63:b7:58:11:88:c0:d6:25:e4:
43:7b:59:ec:68:23:bc:1f:a4:bc:c0:9d:22:38:b6:4a:97:0a:
bc:5e:95:be:07:01:0c:d1:0e:6f:12:d6:9e:6c:25:35:de:ea:
08:96:e4:e2:48:d8:03:97:d1:37:46:2c:cc:8c:05:1d:bb:5a:
c5:8e:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:13:59 2026 by rpki-client