
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa
File: a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa (raw, json)
Hash identifier: aFBVkgrS4ro7tBAsAS0qrDdKzBvSklK3uB8y3ORUWgI=
Subject key identifier: E1:AA:8A:2A:9E:37:A1:CD:A3:0E:D6:75:DF:69:F9:D0:7F:24:9A:0D
Certificate issuer: /CN=03e58790-8887-4eae-9965-80e3a70bdf97
Certificate serial: 010D0C9F4328584F5C22F91FDCA6A6739B78D280
Authority key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa
Signing time: Thu 01 Oct 2026 17:40:17 +0000
ROA not before: Thu 01 Oct 2026 17:40:17 +0000
ROA not after: Mon 28 Dec 2026 20:32:00 +0000
asID: 46293
IP address blocks: 67.199.208.0/20 maxlen: 20
67.199.208.0/22 maxlen: 22
67.199.212.0/22 maxlen: 22
67.199.216.0/22 maxlen: 22
67.199.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5c:22:f9:1f:dc:a6:a6:73:9b:78:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e58790-8887-4eae-9965-80e3a70bdf97
Validity
Not Before: Oct 1 17:40:17 2026 GMT
Not After : Dec 28 20:32:00 2026 GMT
Subject: CN=efa67b9f-3a69-46ec-b4e3-972f3f7dc487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:3f:ec:f0:cd:9f:73:b7:69:81:de:4c:22:
6a:e4:c0:5c:fb:64:f9:bb:0e:f9:b9:ae:7d:80:c9:
64:16:38:a7:d6:a1:f2:bd:91:14:1f:e5:5d:4b:df:
e7:74:fa:2a:5b:43:bf:db:31:33:d1:47:59:83:39:
f9:d0:97:94:c5:40:70:14:c2:81:d0:4e:71:21:e1:
51:2a:c2:50:3f:1c:55:c5:d6:9e:6c:0a:c5:80:10:
8d:62:5a:eb:f5:a1:bb:4e:13:ec:5f:2e:80:4c:d0:
66:e3:e3:e2:09:20:51:31:ca:40:ad:1e:f4:34:79:
a7:54:9d:fe:2a:d9:f7:fd:e9:52:eb:41:af:20:1e:
ad:a6:25:74:f0:35:04:e9:f8:19:27:f8:ea:b6:6f:
0e:db:0a:d9:5f:62:c6:23:dd:e7:d7:0e:f9:c9:ef:
b0:9d:6b:5c:73:e3:58:5e:92:61:6d:15:38:4d:17:
c4:06:ea:af:5d:af:39:75:d5:26:5e:ba:92:16:61:
60:53:c7:bc:c9:42:bf:24:a4:7a:23:c5:6f:42:98:
4c:24:2e:ff:6d:5c:95:4c:6e:68:5d:bb:1e:36:35:
a4:7e:11:da:65:2d:8b:b9:b5:01:5f:51:70:64:f9:
dd:32:18:75:49:44:49:8e:af:03:cb:82:ec:4c:fc:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:8A:2A:9E:37:A1:CD:A3:0E:D6:75:DF:69:F9:D0:7F:24:9A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
X509v3 Authority Key Identifier:
keyid:53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
sbgp-ipAddrBlock: critical
IPv4:
67.199.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:17:08:3a:71:c4:7b:82:e6:8e:90:b8:7c:7e:9f:98:e8:9e:
b4:39:5c:5f:de:ca:b3:78:e0:36:2a:80:b9:0d:2b:bc:59:ae:
bf:40:9d:75:82:d5:0c:68:1f:c5:84:7a:e3:ca:7e:f6:bc:97:
0a:14:bb:67:0d:68:80:7d:09:65:f1:e1:7a:6e:17:a0:4c:ee:
0c:fe:94:b3:3c:6f:39:03:41:71:7e:4c:a5:5c:22:9a:34:92:
5f:74:6a:08:cc:37:91:e1:68:be:fa:08:ad:31:9e:15:32:60:
39:78:77:a5:97:98:99:26:49:09:e5:9d:0b:b5:85:eb:66:44:
a3:01:c5:e3:8b:97:91:67:38:49:c2:93:5f:ef:04:a9:a0:f0:
0e:b2:12:c2:e0:c9:d4:57:c2:b9:1e:11:d3:3f:ad:2d:d2:22:
56:a9:3d:47:b7:90:e7:58:b3:7f:e7:96:4f:ea:70:54:b1:93:
8a:5d:07:4d:ad:19:bd:5b:f5:a3:99:36:03:47:c1:1d:50:40:
58:57:47:ff:f5:44:e1:80:09:e5:6a:ad:17:48:a3:d6:37:f8:
50:4b:c6:3b:64:aa:43:0e:5c:8b:d9:de:6b:b3:06:5f:b7:11:
8e:5b:c9:25:2d:51:55:66:55:5b:18:3b:f8:8b:e0:e2:2d:34:
f6:d0:b1:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9cIvkf3Kamc5t40oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNlNTg3OTAtODg4Ny00ZWFlLTk5NjUtODBlM2E3MGJk
Zjk3MB4XDTI2MTAwMTE3NDAxN1oXDTI2MTIyODIwMzIwMFowLzEtMCsGA1UEAxMk
ZWZhNjdiOWYtM2E2OS00NmVjLWI0ZTMtOTcyZjNmN2RjNDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdg/7PDNn3O3aYHeTCJq5MBc+2T5uw75ua59
gMlkFjin1qHyvZEUH+VdS9/ndPoqW0O/2zEz0UdZgzn50JeUxUBwFMKB0E5xIeFR
KsJQPxxVxdaebArFgBCNYlrr9aG7ThPsXy6ATNBm4+PiCSBRMcpArR70NHmnVJ3+
Ktn3/elS60GvIB6tpiV08DUE6fgZJ/jqtm8O2wrZX2LGI93n1w75ye+wnWtcc+NY
XpJhbRU4TRfEBuqvXa85ddUmXrqSFmFgU8e8yUK/JKR6I8VvQphMJC7/bVyVTG5o
XbseNjWkfhHaZS2LubUBX1FwZPndMhh1SURJjq8Dy4LsTPxIFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGqiiqeN6HNow7Wdd9p+dB/JJoNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2U1
ODc5MC04ODg3LTRlYWUtOTk2NS04MGUzYTcwYmRmOTcvYTIwYzYzYjItODVjOC0z
MTQ5LWI3MWYtNWE1N2RjYjljMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNlNTg3OTAtODg4Ny00ZWFlLTk5
NjUtODBlM2E3MGJkZjk3LzAzZTU4NzkwLTg4ODctNGVhZS05OTY1LTgwZTNhNzBi
ZGY5Ny5jcmwwHwYDVR0jBBgwFoAUUyoRRgDyP0Kq6z7Dsin1AvGX9fUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2U1ODc5MC04ODg3LTRlYWUtOTk2NS04MGUz
YTcwYmRmOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ8fQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4XCDpxxHuC5o6QuHx+n5jonrQ5XF/eyrN44DYqgLkNK7xZrr9AnXWC
1QxoH8WEeuPKfva8lwoUu2cNaIB9CWXx4XpuF6BM7gz+lLM8bzkDQXF+TKVcIpo0
kl90agjMN5HhaL76CK0xnhUyYDl4d6WXmJkmSQnlnQu1hetmRKMBxeOLl5FnOEnC
k1/vBKmg8A6yEsLgydRXwrkeEdM/rS3SIlapPUe3kOdYs3/nlk/qcFSxk4pdB02t
Gb1b9aOZNgNHwR1QQFhXR//1ROGACeVqrRdIo9Y3+FBLxjtkqkMOXIvZ3muzBl+3
EY5bySUtUVVmVVsYO/iL4OItNPbQscQ=
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:02:31 2026 by rpki-client