
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
File: aefaffa5-f3e0-3cff-b520-95718774c4ca.roa (raw, json)
Hash identifier: I7fpYFaPS5iR3Zu4gGeCP4fVu9j8xBwwnOHh4L/IwIk=
Subject key identifier: AF:C5:38:AB:9A:C6:D2:B0:B7:AA:BE:52:2D:30:00:7F:B8:38:2A:1B
Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial: 010D0C9F4328584E94EA590B2DD10ADC4B256860
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
Signing time: Wed 22 Jul 2026 09:00:11 +0000
ROA not before: Wed 22 Jul 2026 09:00:11 +0000
ROA not after: Tue 20 Oct 2026 09:00:11 +0000
asID: 397745
IP address blocks: 167.100.16.0/22 maxlen: 22
216.47.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:94:ea:59:0b:2d:d1:0a:dc:4b:25:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Validity
Not Before: Jul 22 09:00:11 2026 GMT
Not After : Oct 20 09:00:11 2026 GMT
Subject: CN=d3967e2e-0066-4baa-87d8-98e93a3b7b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ae:49:73:b3:a9:b3:4d:52:00:6d:3a:21:a5:
82:85:d1:d8:87:fe:59:51:45:3a:c6:a7:5b:b9:7a:
b7:47:50:27:d0:0b:3f:8d:06:d1:71:77:40:6f:86:
23:b1:a3:19:55:53:eb:56:79:2e:c1:4e:ea:02:8b:
a5:f0:18:e3:90:ff:75:dd:8d:18:75:36:24:a6:49:
fd:25:47:1e:c3:d8:1e:22:0f:32:31:ee:a1:87:1a:
0c:22:0a:3e:cc:9e:f9:df:4a:88:6d:6c:67:21:41:
df:9d:71:47:64:7f:ba:95:21:9d:c2:c4:d4:9e:b1:
f6:61:ae:49:7d:98:c7:35:07:c1:e7:8c:07:95:63:
eb:55:3d:0b:61:bc:65:d5:dd:2a:f3:ee:6f:30:77:
99:ff:07:3b:ff:19:7a:a7:86:6f:f4:7c:6c:6c:9c:
79:f8:df:4f:96:2d:25:50:d9:3a:a5:e0:3c:9b:64:
02:ef:41:57:1e:dd:97:6a:f7:77:6c:7e:fe:15:a5:
be:d4:55:b1:0e:c0:b8:33:6e:c2:32:7e:30:74:f2:
e4:f7:0f:b0:a5:ba:89:73:7f:0d:d9:b7:5c:c3:a9:
8d:55:e8:cc:bb:98:39:c8:5d:5f:23:26:dc:3f:af:
1b:0c:f4:21:fb:8a:69:e6:56:79:68:8e:d3:07:2e:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:38:AB:9A:C6:D2:B0:B7:AA:BE:52:2D:30:00:7F:B8:38:2A:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
X509v3 Authority Key Identifier:
keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.100.16.0/22
216.47.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:25:10:fe:d1:43:b6:87:a5:4d:a8:1e:fa:03:83:66:c2:e8:
c9:15:07:5e:71:83:1e:96:8a:5a:de:7d:e7:d6:1c:f5:c3:86:
ae:4f:33:62:5d:4f:32:c6:05:f9:fb:e8:cb:85:2a:48:5c:9e:
33:ec:94:f7:d0:57:98:17:2c:73:85:10:25:99:25:0c:07:3f:
e8:7a:d4:ba:69:a9:1b:e4:8a:d3:29:9a:47:ee:58:81:98:fb:
b0:6e:d8:c0:46:3b:46:c5:e8:85:62:5c:73:16:bb:ef:a0:19:
78:9d:16:7e:e8:ef:29:8d:9e:1f:c1:df:c7:97:9b:97:17:b7:
e3:24:35:f1:8c:03:1c:c5:6b:7e:fe:b7:25:6f:a4:82:68:d2:
ac:29:6a:08:34:37:f6:6a:50:f6:ef:f6:ce:48:5f:18:48:2f:
0d:4e:6c:e4:38:6c:b9:50:99:f3:84:8d:fa:c4:3f:93:44:3c:
7a:de:12:97:a1:63:2f:32:d4:51:0c:d5:47:03:7c:03:19:05:
7f:6f:80:02:1b:87:bc:df:5b:1a:9e:7d:64:10:6e:67:c2:11:
c7:9b:d3:0e:fc:ab:e3:49:b0:cf:6c:de:cd:35:85:ae:87:fb:
d0:6b:96:c3:53:2e:15:c1:dd:c8:60:03:32:ab:07:f0:aa:ed:
cf:ae:52:b6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6U6lkLLdEK3EslaGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3
NzNhMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZDM5NjdlMmUtMDA2Ni00YmFhLTg3ZDgtOThlOTNhM2I3YjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi65Jc7Ops01SAG06IaWChdHYh/5ZUUU6xqdb
uXq3R1An0As/jQbRcXdAb4YjsaMZVVPrVnkuwU7qAoul8BjjkP913Y0YdTYkpkn9
JUcew9geIg8yMe6hhxoMIgo+zJ7530qIbWxnIUHfnXFHZH+6lSGdwsTUnrH2Ya5J
fZjHNQfB54wHlWPrVT0LYbxl1d0q8+5vMHeZ/wc7/xl6p4Zv9HxsbJx5+N9Pli0l
UNk6peA8m2QC70FXHt2Xavd3bH7+FaW+1FWxDsC4M27CMn4wdPLk9w+wpbqJc38N
2bdcw6mNVejMu5g5yF1fIybcP68bDPQh+4pp5lZ5aI7TBy69zQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFK/FOKuaxtKwt6q+Ui0wAH+4OCobMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz
YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvYWVmYWZmYTUtZjNlMC0z
Y2ZmLWI1MjAtOTU3MTg3NzRjNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx
ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5
NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4
ZTFmOTc3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCp2QQAwQB
2C8mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAE0lEP7RQ7aHpU2oHvoDg2bC6MkVB15xgx6WilrefefWHPXD
hq5PM2JdTzLGBfn76MuFKkhcnjPslPfQV5gXLHOFECWZJQwHP+h61LppqRvkitMp
mkfuWIGY+7Bu2MBGO0bF6IViXHMWu++gGXidFn7o7ymNnh/B38eXm5cXt+MkNfGM
AxzFa37+tyVvpIJo0qwpagg0N/ZqUPbv9s5IXxhILw1ObOQ4bLlQmfOEjfrEP5NE
PHreEpehYy8y1FEM1UcDfAMZBX9vgAIbh7zfWxqefWQQbmfCEceb0w78q+NJsM9s
3s01ha6H+9BrlsNTLhXB3chgAzKrB/Cq7c+uUrY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:29:45 2026 by rpki-client