
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/23d24a7f-82ba-34f1-abfb-3b85309f1fe3.roa
File: 23d24a7f-82ba-34f1-abfb-3b85309f1fe3.roa (raw, json)
Hash identifier: I5AO83Cb1QYIZyGVbp1/89ILC5u+CmGwaLVwKbMgsLY=
Subject key identifier: 58:69:E6:39:82:D8:FB:BE:AE:1C:BF:A5:85:20:29:3D:85:43:1D:38
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F38B26F8329A69DCC12373040
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/23d24a7f-82ba-34f1-abfb-3b85309f1fe3.roa
Signing time: Sat 19 Sep 2026 01:00:12 +0000
ROA not before: Sat 19 Sep 2026 01:00:12 +0000
ROA not after: Fri 18 Dec 2026 02:00:12 +0000
asID: 2914
IP address blocks: 173.44.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:38:b2:6f:83:29:a6:9d:cc:12:37:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 19 01:00:12 2026 GMT
Not After : Dec 18 02:00:12 2026 GMT
Subject: CN=16136b2b-8283-4452-a4a2-676f6b4679fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:8b:e5:17:23:f5:b3:9b:b3:74:e5:05:49:
fa:73:12:17:db:ac:9b:f6:a5:4c:c2:7b:1a:92:ad:
35:4d:34:9e:54:4c:93:12:d1:0a:7d:eb:9b:49:83:
9e:66:3c:9e:b8:4e:2d:c5:09:c9:bf:74:c7:78:a0:
b6:3e:9b:04:5c:ec:70:d1:6a:bf:f2:a7:e8:41:5b:
8a:4b:cb:ef:f8:a8:03:5e:20:46:48:d3:56:db:a2:
87:8e:7a:5d:25:2f:ba:0e:41:60:eb:05:ea:bd:0f:
06:f1:43:3e:fb:a5:85:5e:79:85:dd:25:0f:2a:0f:
c2:f1:ae:1e:c6:1d:04:49:0c:cf:a2:6c:eb:68:8f:
98:df:9d:00:07:22:df:6c:f9:75:96:2a:2a:30:82:
73:dd:3f:3b:3b:4a:9b:91:0c:36:8a:60:ee:81:bd:
60:61:27:d9:12:50:49:73:98:2a:13:cf:67:e7:91:
26:6d:11:46:7a:ac:8b:26:11:ce:29:bc:ae:72:ac:
c3:ec:e3:fb:06:87:89:a8:ed:c2:27:c9:f6:56:1f:
00:77:a3:96:c1:db:e2:9c:6a:c4:b7:06:75:94:e6:
60:e5:e8:a6:3d:f2:1b:e5:89:b6:f6:44:4f:ff:4e:
b8:a8:c4:23:1e:2c:d7:bf:d5:01:01:b6:3b:50:fd:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:E6:39:82:D8:FB:BE:AE:1C:BF:A5:85:20:29:3D:85:43:1D:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/23d24a7f-82ba-34f1-abfb-3b85309f1fe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.44.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:eb:82:ba:86:37:89:f4:f7:22:95:22:4e:13:29:d8:24:72:
72:09:a7:02:ef:4c:d3:61:15:d9:f4:df:d3:54:e8:b7:e5:e2:
aa:9c:8d:f3:d4:a3:8e:f4:bc:00:e2:57:46:4c:24:75:68:b4:
03:6e:49:ed:cf:be:f0:d2:20:72:b0:3b:fa:aa:c6:93:ba:6a:
a6:ca:6b:fd:fd:87:14:83:a5:be:56:6e:6d:0f:f8:c3:fc:69:
2e:9d:d3:91:27:9d:43:5e:58:31:1c:52:11:7d:ef:02:fe:48:
30:a0:60:ad:c1:8b:94:97:1a:e8:1e:88:e6:16:e6:12:35:84:
fb:a4:49:50:ae:5c:f9:56:f0:ae:5e:b2:e5:24:95:26:44:4c:
a0:5a:ff:d5:c0:2a:e9:87:a7:73:18:e7:13:e0:cd:d5:ef:70:
3d:e8:cf:73:d9:40:24:af:93:7e:94:c9:4d:81:34:06:f1:43:
29:9c:83:53:82:71:a5:08:d4:78:0c:94:5b:ea:5f:11:e1:ee:
9d:17:79:a9:78:69:c7:f8:08:e3:8e:66:5e:bd:09:68:69:b7:
55:22:bc:fd:92:47:4d:31:5a:90:e3:07:0b:ba:80:5d:be:45:
5b:83:3d:73:e7:f7:78:1a:bb:92:d0:6c:bc:72:e6:05:fd:de:
9d:5d:a8:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84sm+DKaadzBI3MEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk
MTYxMzZiMmItODI4My00NDUyLWE0YTItNjc2ZjZiNDY3OWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+iL5Rcj9bObs3TlBUn6cxIX26yb9qVMwnsa
kq01TTSeVEyTEtEKfeubSYOeZjyeuE4txQnJv3THeKC2PpsEXOxw0Wq/8qfoQVuK
S8vv+KgDXiBGSNNW26KHjnpdJS+6DkFg6wXqvQ8G8UM++6WFXnmF3SUPKg/C8a4e
xh0ESQzPomzraI+Y350AByLfbPl1lioqMIJz3T87O0qbkQw2imDugb1gYSfZElBJ
c5gqE89n55EmbRFGeqyLJhHOKbyucqzD7OP7BoeJqO3CJ8n2Vh8Ad6OWwdvinGrE
twZ1lOZg5eimPfIb5Ym29kRP/064qMQjHizXv9UBAbY7UP3IHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhp5jmC2Pu+rhy/pYUgKT2FQx04MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjNkMjRhN2YtODJiYS0z
NGYxLWFiZmItM2I4NTMwOWYxZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSyoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPrgrqGN4n09yKVIk4TKdgkcnIJpwLvTNNhFdn039NU6Lfl4qqcjfPU
o470vADiV0ZMJHVotANuSe3PvvDSIHKwO/qqxpO6aqbKa/39hxSDpb5Wbm0P+MP8
aS6d05EnnUNeWDEcUhF97wL+SDCgYK3Bi5SXGugeiOYW5hI1hPukSVCuXPlW8K5e
suUklSZETKBa/9XAKumHp3MY5xPgzdXvcD3oz3PZQCSvk36UyU2BNAbxQymcg1OC
caUI1HgMlFvqXxHh7p0Xeal4acf4COOOZl69CWhpt1UivP2SR00xWpDjBwu6gF2+
RVuDPXPn93gau5LQbLxy5gX93p1dqN0=
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:18:38 2026 by rpki-client