
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa
File: 2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa (raw, json)
Hash identifier: Ky0KNfVlNH18AUFmVz9ItHQ5Q+KK3WHaGNPZiW+A+GE=
Subject key identifier: 22:76:68:B2:3A:69:B8:6F:F0:FA:D7:D7:29:60:77:C8:B1:2B:1B:81
Certificate issuer: /CN=a353a6ed-43c3-4996-b762-0b1c02617d17
Certificate serial: 010D0C9F4328584F4975507BABDCEED04F43F380
Authority key identifier: AF:29:9E:36:51:0C:95:3B:AF:12:12:E5:63:37:50:16:EB:3D:8B:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 54307
IP address blocks: 205.207.178.0/24 maxlen: 24
2620:a8:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/a353a6ed-43c3-4996-b762-0b1c02617d17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/a353a6ed-43c3-4996-b762-0b1c02617d17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:50:7b:ab:dc:ee:d0:4f:43:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a353a6ed-43c3-4996-b762-0b1c02617d17
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d6afbb51-1948-4926-81c1-c8a878d0ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:05:79:46:68:88:11:fa:ae:cb:36:13:93:
3c:3a:5e:dd:ac:09:34:d9:7d:5b:86:59:92:a1:1f:
6a:3c:65:6d:32:be:51:14:4f:ee:09:d5:3f:50:5e:
d4:ca:db:ef:90:b7:5c:c9:2f:60:86:cd:5d:2c:99:
0d:18:1a:ee:ac:45:e8:92:1f:36:90:59:7e:02:38:
8d:fc:d3:7d:55:79:60:c5:a4:91:a1:32:b8:78:58:
a6:89:e8:5c:32:25:6f:7e:60:ea:89:78:d2:ab:e7:
ea:68:ec:1a:1d:04:73:cf:18:88:ed:ed:1c:9a:1a:
ba:73:da:a5:10:49:98:3f:89:fc:18:40:05:35:22:
22:55:e6:63:ee:2d:9e:38:fa:70:c3:46:0e:29:b0:
25:9d:37:00:2c:6b:08:97:be:28:6a:3c:a1:24:10:
47:5c:01:fa:f2:60:16:50:a7:b2:17:5f:bb:b1:37:
48:7d:5d:5e:03:66:81:e0:07:77:fb:58:20:a2:24:
8a:37:f6:c0:89:1f:b3:09:29:cc:f9:8f:b7:19:68:
d5:2b:50:59:61:20:5c:d8:3b:73:b8:ca:e0:84:36:
46:b2:6d:22:48:8c:55:26:af:26:50:f7:03:69:58:
5d:e4:f6:3f:ae:34:4d:ce:24:ec:e2:79:d9:57:39:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:68:B2:3A:69:B8:6F:F0:FA:D7:D7:29:60:77:C8:B1:2B:1B:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/a353a6ed-43c3-4996-b762-0b1c02617d17.crl
X509v3 Authority Key Identifier:
keyid:AF:29:9E:36:51:0C:95:3B:AF:12:12:E5:63:37:50:16:EB:3D:8B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17.cer
sbgp-ipAddrBlock: critical
IPv4:
205.207.178.0/24
IPv6:
2620:a8:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:b7:f6:06:dc:e5:14:96:c6:cf:c2:12:a3:ba:ab:43:f0:ad:
17:a6:52:22:d9:04:45:5a:40:4b:e9:62:21:5d:3b:31:da:2a:
75:6e:61:e8:d3:1f:55:4b:b9:46:91:79:ce:77:87:55:b8:55:
32:4d:aa:05:dd:b6:c3:09:bb:1d:ae:f9:b1:a9:7e:38:6e:f7:
22:0d:1c:02:7d:b9:6e:6c:8d:8c:b8:e2:83:c7:bc:af:4d:f3:
9c:94:d5:c7:be:28:ee:8e:44:77:75:9f:78:37:88:b8:63:4a:
b2:62:fa:f1:ed:30:1f:80:b5:82:3e:1f:06:b9:45:0f:99:cc:
e1:ed:c8:a0:9d:f2:70:7e:fb:07:eb:98:ec:3a:f5:3d:18:9a:
a8:f3:65:73:1b:8a:ad:dc:19:87:85:b1:05:e1:83:30:54:d2:
74:49:77:59:88:e8:cc:29:c7:b1:e5:6b:fe:26:5c:a4:35:48:
21:bd:44:aa:79:f8:26:98:89:bd:86:6d:52:70:b7:77:28:ae:
98:0c:fa:c1:3b:b0:ba:08:60:b5:7f:f8:b9:76:a9:9e:36:80:
0e:50:c9:a5:19:23:42:d0:4a:09:da:15:15:de:cf:94:3f:5a:
19:7c:ab:a8:a4:1b:e1:3c:2a:ef:8f:cf:6f:00:ff:58:69:c1:
22:97:aa:d2
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9JdVB7q9zu0E9D84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM1M2E2ZWQtNDNjMy00OTk2LWI3NjItMGIxYzAyNjE3
ZDE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDZhZmJiNTEtMTk0OC00OTI2LTgxYzEtYzhhODc4ZDBlZjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng0FeUZoiBH6rss2E5M8Ol7drAk02X1bhlmS
oR9qPGVtMr5RFE/uCdU/UF7UytvvkLdcyS9ghs1dLJkNGBrurEXokh82kFl+AjiN
/NN9VXlgxaSRoTK4eFimiehcMiVvfmDqiXjSq+fqaOwaHQRzzxiI7e0cmhq6c9ql
EEmYP4n8GEAFNSIiVeZj7i2eOPpww0YOKbAlnTcALGsIl74oajyhJBBHXAH68mAW
UKeyF1+7sTdIfV1eA2aB4Ad3+1ggoiSKN/bAiR+zCSnM+Y+3GWjVK1BZYSBc2Dtz
uMrghDZGsm0iSIxVJq8mUPcDaVhd5PY/rjRNziTs4nnZVzmguwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFCJ2aLI6abhv8PrX1ylgd8ixKxuBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMzUz
YTZlZC00M2MzLTQ5OTYtYjc2Mi0wYjFjMDI2MTdkMTcvMmNmNDViMzItOWVmNS0z
N2Y4LTkxYjEtZDc4MzkzYTQxMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTM1M2E2ZWQtNDNjMy00OTk2LWI3
NjItMGIxYzAyNjE3ZDE3L2EzNTNhNmVkLTQzYzMtNDk5Ni1iNzYyLTBiMWMwMjYx
N2QxNy5jcmwwHwYDVR0jBBgwFoAUrymeNlEMlTuvEhLlYzdQFus9i+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMzUzYTZlZC00M2MzLTQ5OTYtYjc2Mi0wYjFj
MDI2MTdkMTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzc+yMA8E
AgACMAkDBwAmIACoYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhrf2BtzlFJbGz8ISo7qrQ/CtF6ZSItkE
RVpAS+liIV07MdoqdW5h6NMfVUu5RpF5zneHVbhVMk2qBd22wwm7Ha75sal+OG73
Ig0cAn25bmyNjLjig8e8r03znJTVx74o7o5Ed3WfeDeIuGNKsmL68e0wH4C1gj4f
BrlFD5nM4e3IoJ3ycH77B+uY7Dr1PRiaqPNlcxuKrdwZh4WxBeGDMFTSdEl3WYjo
zCnHseVr/iZcpDVIIb1Eqnn4JpiJvYZtUnC3dyiumAz6wTuwughgtX/4uXapnjaA
DlDJpRkjQtBKCdoVFd7PlD9aGXyrqKQb4Twq74/PbwD/WGnBIpeq0g==
-----END CERTIFICATE-----
Generated at Mon Oct 12 15:25:44 2026 by rpki-client