
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa
File: cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa (raw, json)
Hash identifier: KerYdQfYyG/HzJYXLZtp2B0pH/HOOwSxuWEqelRDYN8=
Subject key identifier: 5F:D6:F6:D5:D8:B5:59:B6:2D:BE:27:31:67:08:13:D2:B2:74:70:FC
Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial: 010D0C9F4328584E90BA537965C04ED83BFBCE40
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 396533
IP address blocks: 170.149.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:53:79:65:c0:4e:d8:3b:fb:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=9d0c1629-9232-4291-b465-c87167e8b1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:52:7f:05:f8:73:36:c2:de:7b:17:5d:18:
c6:0e:7e:34:34:59:08:94:69:c5:a2:b7:42:a1:1c:
d4:33:75:7c:4c:54:82:c9:7f:91:83:2d:55:06:f6:
5c:8c:2f:39:b8:32:ac:18:c6:85:27:46:88:7e:c8:
e3:06:f1:b0:51:56:53:3b:5e:21:51:fe:8a:d6:08:
52:cc:01:20:09:ac:40:51:4f:74:2a:63:0b:fa:96:
e7:a3:6e:1d:bd:f6:92:e1:6e:b8:7d:f3:ef:c5:21:
8c:b0:a4:dc:43:aa:a3:35:0d:37:87:3e:ff:e8:8f:
0b:d8:8c:d3:5e:6e:98:63:a5:9b:28:88:b1:c6:36:
ab:1f:fa:d7:46:aa:02:56:c4:b5:7b:3e:a5:8e:1e:
20:d5:5a:c9:a3:2b:c2:54:ec:93:b0:64:4b:45:f7:
29:09:f0:3a:f4:c7:ac:2f:43:90:3a:42:db:a4:c5:
5a:47:be:df:1e:fd:64:3f:e2:d9:a9:57:27:c9:9c:
a9:43:a5:6e:e7:b5:93:2e:f4:ca:15:81:03:5c:75:
c7:aa:5a:a2:00:e3:42:bf:2c:93:51:99:3e:01:32:
f8:b5:2f:28:e7:26:64:3e:bf:d3:b2:60:f9:11:5d:
26:65:2b:ec:f4:03:16:c9:7e:d8:39:c8:b6:2b:d2:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:F6:D5:D8:B5:59:B6:2D:BE:27:31:67:08:13:D2:B2:74:70:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
X509v3 Authority Key Identifier:
keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
sbgp-ipAddrBlock: critical
IPv4:
170.149.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:57:08:11:df:ff:81:cc:39:46:d4:43:2b:82:cb:11:84:d3:
9b:99:2e:a1:79:87:78:58:df:cf:12:1a:ee:86:ab:56:65:86:
3b:80:3c:cf:d4:46:c6:52:89:b0:4c:90:51:d5:91:bd:c9:09:
40:dc:26:08:45:f0:6b:92:ee:58:65:16:cd:29:83:85:0a:ee:
67:e9:dc:88:01:b1:25:05:c3:fd:a9:f1:26:e5:0c:3c:be:e1:
ab:c8:c3:e1:d2:c9:66:55:56:eb:f9:b5:83:a9:f7:75:bd:72:
68:13:fe:9c:14:ae:c4:32:13:b3:77:dd:f9:69:32:c7:1a:aa:
2b:43:6e:3b:bb:ff:02:6c:60:8f:ab:20:d1:ea:6e:28:11:96:
68:35:8a:ef:10:14:05:2f:38:6f:c3:03:18:c7:b8:d1:18:e1:
72:80:dd:3b:16:95:12:0d:b9:8e:64:c0:c8:6c:d5:60:7d:0c:
d8:e2:50:ae:7d:66:69:6f:88:98:78:8b:41:4f:d8:01:35:67:
28:97:b9:df:93:90:e5:19:ab:9e:ca:b6:36:85:3a:50:15:6d:
c2:81:b9:98:a9:30:12:41:1b:15:ae:4e:db:d7:cc:c8:40:fc:
3d:7f:5b:4c:cb:c0:91:3e:05:d6:66:9c:0c:6f:70:b8:3a:ea:
eb:d7:be:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulN5ZcBO2Dv7zkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj
NWQ2MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
OWQwYzE2MjktOTIzMi00MjkxLWI0NjUtYzg3MTY3ZThiMWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+lSfwX4czbC3nsXXRjGDn40NFkIlGnFordC
oRzUM3V8TFSCyX+Rgy1VBvZcjC85uDKsGMaFJ0aIfsjjBvGwUVZTO14hUf6K1ghS
zAEgCaxAUU90KmML+pbno24dvfaS4W64ffPvxSGMsKTcQ6qjNQ03hz7/6I8L2IzT
Xm6YY6WbKIixxjarH/rXRqoCVsS1ez6ljh4g1VrJoyvCVOyTsGRLRfcpCfA69Mes
L0OQOkLbpMVaR77fHv1kP+LZqVcnyZypQ6Vu57WTLvTKFYEDXHXHqlqiAONCvyyT
UZk+ATL4tS8o5yZkPr/TsmD5EV0mZSvs9AMWyX7YOci2K9J8/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/W9tXYtVm2Lb4nMWcIE9KydHD8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz
MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvY2YzZDMzMDEtZjk0NS0z
NWM0LTljYjEtMDdmZWU4MmMyYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh
N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky
YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm
MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpXkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBXCBHf/4HMOUbUQyuCyxGE05uZLqF5h3hY388SGu6Gq1ZlhjuAPM/U
RsZSibBMkFHVkb3JCUDcJghF8GuS7lhlFs0pg4UK7mfp3IgBsSUFw/2p8SblDDy+
4avIw+HSyWZVVuv5tYOp93W9cmgT/pwUrsQyE7N33flpMscaqitDbju7/wJsYI+r
INHqbigRlmg1iu8QFAUvOG/DAxjHuNEY4XKA3TsWlRINuY5kwMhs1WB9DNjiUK59
ZmlviJh4i0FP2AE1ZyiXud+TkOUZq57KtjaFOlAVbcKBuZipMBJBGxWuTtvXzMhA
/D1/W0zLwJE+BdZmnAxvcLg66uvXvsA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:52 2026 by rpki-client