
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c833327a-04ff-33de-ad9e-4acf6c85c53a.roa
File: c833327a-04ff-33de-ad9e-4acf6c85c53a.roa (raw, json)
Hash identifier: WNqGzCA74QalXGKSxfe/U2iTs/EDtkRrnJfVCzMrAwk=
Subject key identifier: C5:53:60:B8:89:13:BD:B9:2A:13:99:60:0E:16:FB:04:B6:98:39:DB
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F593DE910AE2D5B2C88321E80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c833327a-04ff-33de-ad9e-4acf6c85c53a.roa
Signing time: Wed 30 Sep 2026 16:47:08 +0000
ROA not before: Wed 30 Sep 2026 16:47:08 +0000
ROA not after: Tue 29 Dec 2026 17:47:08 +0000
asID: 49532
IP address blocks: 107.158.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:59:3d:e9:10:ae:2d:5b:2c:88:32:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 30 16:47:08 2026 GMT
Not After : Dec 29 17:47:08 2026 GMT
Subject: CN=3b47b63b-79ec-44ca-8b44-c2b146c1bb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9c:6c:69:52:e5:52:3d:65:23:30:9e:7e:37:
05:c3:eb:c0:04:bc:8d:cd:b2:e9:94:b7:3e:45:52:
d2:d2:b4:c6:19:d2:a3:9d:d7:9e:f4:45:59:cd:88:
1f:21:5d:f4:92:f5:d0:94:d3:6e:3b:15:a0:60:31:
28:46:c2:04:9d:19:0e:8c:2c:7c:38:1b:0b:f0:d8:
f6:77:a1:de:46:e8:5c:70:38:0b:d0:f2:ad:b0:b5:
89:73:eb:3c:ba:94:37:bf:f7:de:ff:27:e4:71:ec:
7b:00:8b:cf:f7:69:95:ac:1b:ce:ad:c0:1e:97:13:
93:63:12:5b:fa:45:3f:2e:e1:44:03:3c:99:f4:e5:
10:a7:3f:7e:fe:9d:d5:57:78:79:72:3a:e3:72:6c:
81:2b:b2:60:96:94:89:9c:e1:d9:8a:d2:51:97:c8:
a9:33:13:64:00:24:e9:44:f9:55:49:02:4d:37:b6:
65:08:14:0b:24:36:fa:27:68:29:70:6d:e1:a6:f5:
a8:25:2d:93:b0:68:08:90:2c:be:c9:4d:4a:70:7e:
32:2a:ef:dc:b3:86:56:ea:9f:f5:66:f2:1d:7e:02:
54:ac:20:01:fe:41:16:9c:78:31:59:c5:6b:3e:91:
5c:64:7f:2b:17:ae:75:d3:12:bc:7c:06:d5:a7:2f:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:60:B8:89:13:BD:B9:2A:13:99:60:0E:16:FB:04:B6:98:39:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c833327a-04ff-33de-ad9e-4acf6c85c53a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
107.158.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:9e:c4:82:30:76:d7:c1:b8:83:1d:eb:a1:98:bf:20:f3:62:
bc:64:88:fd:65:e0:9f:1a:32:73:72:fb:31:9c:1b:4a:15:b1:
be:17:60:f9:0b:b7:c9:09:7c:e3:6f:09:42:bc:2a:79:ec:b2:
d9:0a:d6:ad:27:c6:65:41:8f:3b:7b:b6:0b:af:a7:aa:52:6d:
83:b7:59:f4:88:58:81:91:74:da:d6:19:8b:2d:7d:bf:a6:97:
a4:22:d9:57:01:f1:e9:26:1f:3a:3b:4a:21:2e:30:10:e3:c4:
0f:df:4c:6b:ff:a6:45:34:e2:e6:d6:b6:4e:8a:52:d9:53:49:
b2:02:2f:ad:55:2e:18:3e:d2:ab:ad:62:01:b9:96:5c:5a:02:
ab:f8:0f:db:2d:98:b9:f1:2b:5c:ac:65:5b:b2:f0:f4:42:87:
5a:5f:e5:20:e8:74:03:a6:8c:fd:f2:23:f9:4c:7e:ec:e4:d9:
81:01:a4:47:b2:46:34:c9:4e:69:e1:23:7a:1b:33:fc:27:6d:
d2:29:52:d7:4d:26:77:9b:be:3b:2a:97:b4:fa:62:e6:01:9c:
b2:a1:9b:15:aa:21:a6:75:e1:93:2a:20:d3:01:2c:09:2c:99:
e8:ed:99:3d:cb:e4:a2:4d:e2:02:55:94:a9:8d:df:1d:83:a6:
c9:8e:5d:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZPekQri1bLIgyHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkzMDE2NDcwOFoXDTI2MTIyOTE3NDcwOFowLzEtMCsGA1UEAxMk
M2I0N2I2M2ItNzllYy00NGNhLThiNDQtYzJiMTQ2YzFiYjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pxsaVLlUj1lIzCefjcFw+vABLyNzbLplLc+
RVLS0rTGGdKjndee9EVZzYgfIV30kvXQlNNuOxWgYDEoRsIEnRkOjCx8OBsL8Nj2
d6HeRuhccDgL0PKtsLWJc+s8upQ3v/fe/yfkcex7AIvP92mVrBvOrcAelxOTYxJb
+kU/LuFEAzyZ9OUQpz9+/p3VV3h5cjrjcmyBK7JglpSJnOHZitJRl8ipMxNkACTp
RPlVSQJNN7ZlCBQLJDb6J2gpcG3hpvWoJS2TsGgIkCy+yU1KcH4yKu/cs4ZW6p/1
ZvIdfgJUrCAB/kEWnHgxWcVrPpFcZH8rF6510xK8fAbVpy8iiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVTYLiJE725KhOZYA4W+wS2mDnbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzgzMzMyN2EtMDRmZi0z
M2RlLWFkOWUtNGFjZjZjODVjNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa55eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2exIIwdtfBuIMd66GYvyDzYrxkiP1l4J8aMnNy+zGcG0oVsb4XYPkL
t8kJfONvCUK8KnnsstkK1q0nxmVBjzt7tguvp6pSbYO3WfSIWIGRdNrWGYstfb+m
l6Qi2VcB8ekmHzo7SiEuMBDjxA/fTGv/pkU04ubWtk6KUtlTSbICL61VLhg+0qut
YgG5llxaAqv4D9stmLnxK1ysZVuy8PRCh1pf5SDodAOmjP3yI/lMfuzk2YEBpEey
RjTJTmnhI3obM/wnbdIpUtdNJnebvjsql7T6YuYBnLKhmxWqIaZ14ZMqINMBLAks
mejtmT3L5KJN4gJVlKmN3x2DpsmOXTA=
-----END CERTIFICATE-----
Generated at Tue Oct 6 12:29:39 2026 by rpki-client