
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf29e5f3-cd82-359b-9117-28edd38cfa67.roa
File: cf29e5f3-cd82-359b-9117-28edd38cfa67.roa (raw, json)
Hash identifier: YShzhH/798alogRqVAe9W0ZmtQZ6s32awtfU+t4U9Ko=
Subject key identifier: 8D:67:C2:25:1E:8C:B5:CF:51:C1:16:14:73:F4:F8:D7:4E:B2:4F:74
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328584FD25BDE0EB07F3921F8E44680
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf29e5f3-cd82-359b-9117-28edd38cfa67.roa
Signing time: Fri 13 Nov 2026 02:00:14 +0000
ROA not before: Fri 13 Nov 2026 02:00:14 +0000
ROA not after: Thu 11 Feb 2027 02:00:14 +0000
asID: 11404
IP address blocks: 208.53.96.0/19 maxlen: 29
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:d2:5b:de:0e:b0:7f:39:21:f8:e4:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Nov 13 02:00:14 2026 GMT
Not After : Feb 11 02:00:14 2027 GMT
Subject: CN=e140ba79-bd8e-4771-b936-4b64d12c75cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:b0:3d:2d:a6:8e:5c:12:1d:05:2a:79:26:
92:4b:0d:92:28:7f:83:a1:c1:ee:e9:e2:8d:ca:e6:
d5:09:20:18:cb:68:d0:11:e2:a6:4d:21:14:d6:56:
6f:68:bd:50:a7:5d:b6:c4:82:0b:d9:53:39:25:82:
47:a4:d7:0f:5e:b4:78:d5:9a:ed:a5:e5:60:64:7b:
b5:bf:68:68:1a:6b:99:b3:76:34:cf:70:aa:f0:92:
6f:45:05:88:9c:a9:35:12:b4:dd:c2:c3:0a:04:71:
36:3b:4b:a8:c2:58:5c:3a:84:0f:ac:24:df:aa:4b:
fe:84:2b:7e:f9:50:b6:38:d5:36:42:69:bc:fc:fa:
05:75:fc:cf:64:09:de:5c:c9:7a:3a:85:ca:79:74:
cf:fa:90:88:c6:5e:06:87:b8:40:00:82:fd:ef:a1:
6e:eb:02:73:5d:dc:db:5c:d1:a4:b1:b4:bd:be:b3:
e2:20:dc:79:fa:45:26:22:dd:35:0f:a1:a5:fc:3d:
83:8b:0f:f1:b5:96:85:42:87:e7:7b:20:54:9c:db:
f7:2d:be:41:2c:53:2e:60:ae:0a:e4:eb:b4:d1:a8:
a7:8f:12:3c:75:46:fa:66:78:1f:3b:52:f0:19:85:
9d:72:6f:7d:a3:2b:b8:ad:8f:3d:e2:37:35:34:ff:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:C2:25:1E:8C:B5:CF:51:C1:16:14:73:F4:F8:D7:4E:B2:4F:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf29e5f3-cd82-359b-9117-28edd38cfa67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:e2:59:2a:9c:5b:02:79:b3:13:79:42:36:01:11:98:73:f3:
45:1b:81:a1:86:4c:73:ee:e2:da:74:57:06:8e:23:70:f7:d3:
09:41:8b:8c:31:e3:36:6e:d5:b5:85:8a:6a:fa:05:51:7c:4c:
1d:e2:5f:1e:68:8d:df:50:e6:73:c8:d1:90:a2:70:a3:3a:21:
01:fd:6f:10:83:df:91:64:7a:4e:7b:f4:d6:94:cf:6e:2f:5e:
33:d9:cb:b1:0e:9a:3a:fd:f0:4e:f7:ee:39:6e:e2:af:1a:f4:
7a:9a:a8:75:18:2b:95:da:2a:b8:9d:b6:56:d4:6a:65:fa:bf:
4f:7e:e3:c8:e4:ba:ff:37:f3:95:a1:bd:5a:f1:14:51:17:2b:
39:ce:79:86:07:99:9d:c8:8f:06:ff:36:6b:1b:5b:88:73:60:
ea:5b:20:1d:81:af:09:31:22:14:14:8b:92:5c:23:18:06:18:
f3:f8:b3:3c:29:4c:30:b5:4d:d5:f4:20:52:01:46:80:62:5d:
08:4c:eb:b6:9c:a7:34:e6:49:9d:5b:26:3f:1f:68:00:a7:72:
c9:24:2e:4c:e9:08:3f:a8:1b:da:3b:bd:b8:24:b6:0d:44:d6:
d5:75:46:b4:b8:6b:02:89:9c:2a:5e:57:6b:27:bb:05:79:17:
b4:97:cf:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SW94OsH85IfjkRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk
ZTE0MGJhNzktYmQ4ZS00NzcxLWI5MzYtNGI2NGQxMmM3NWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn36wPS2mjlwSHQUqeSaSSw2SKH+DocHu6eKN
yubVCSAYy2jQEeKmTSEU1lZvaL1Qp122xIIL2VM5JYJHpNcPXrR41ZrtpeVgZHu1
v2hoGmuZs3Y0z3Cq8JJvRQWInKk1ErTdwsMKBHE2O0uowlhcOoQPrCTfqkv+hCt+
+VC2ONU2Qmm8/PoFdfzPZAneXMl6OoXKeXTP+pCIxl4Gh7hAAIL976Fu6wJzXdzb
XNGksbS9vrPiINx5+kUmIt01D6Gl/D2Diw/xtZaFQofneyBUnNv3Lb5BLFMuYK4K
5Ou00ainjxI8dUb6ZngfO1LwGYWdcm99oyu4rY894jc1NP/t5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1nwiUejLXPUcEWFHP0+NdOsk90MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2YyOWU1ZjMtY2Q4Mi0z
NTliLTkxMTctMjhlZGQzOGNmYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXiWSqcWwJ5sxN5QjYBEZhz80UbgaGGTHPu4tp0VwaOI3D30wlBi4wx
4zZu1bWFimr6BVF8TB3iXx5ojd9Q5nPI0ZCicKM6IQH9bxCD35Fkek579NaUz24v
XjPZy7EOmjr98E737jlu4q8a9HqaqHUYK5XaKridtlbUamX6v09+48jkuv8385Wh
vVrxFFEXKznOeYYHmZ3Ijwb/NmsbW4hzYOpbIB2BrwkxIhQUi5JcIxgGGPP4szwp
TDC1TdX0IFIBRoBiXQhM67acpzTmSZ1bJj8faACncskkLkzpCD+oG9o7vbgktg1E
1tV1RrS4awKJnCpeV2snuwV5F7SXzys=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:30:55 2026 by rpki-client