
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa
File: b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa (raw, json)
Hash identifier: dpiLfsh+JVAF8aQiwXybikHZkjsQFvuMWB9MyRQo12E=
Subject key identifier: DF:80:F6:DD:9B:AA:13:5B:58:09:C2:CE:97:9E:F2:53:67:75:07:E1
Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial: 010D0C9F4328584F498ABC5910C1643A5ACB19C0
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 10794
IP address blocks: 199.43.54.0/23 maxlen: 23
199.43.54.0/24 maxlen: 24
199.43.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:bc:59:10:c1:64:3a:5a:cb:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=382dbacf-e685-47e9-aafc-461f616dc5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:e9:63:51:4f:9d:24:93:92:2a:22:6d:e9:
08:1d:c5:b4:8c:af:01:bd:9a:0a:69:78:9a:ed:e2:
e0:61:bd:79:a3:dd:ff:13:60:06:0a:93:2b:07:dd:
1c:51:fd:b3:10:ee:5f:92:af:f5:3e:3c:b7:76:84:
79:9c:ab:d2:4e:34:cc:80:c4:26:6a:d9:ae:7d:dd:
ad:fe:ad:91:cd:ec:2e:a4:57:c8:a2:82:a2:8f:1f:
6c:8e:72:f6:47:90:45:bc:1b:d8:0e:a9:62:5f:22:
a2:36:2b:40:ba:22:5a:1f:21:8d:90:b5:d9:f6:a5:
47:38:50:ad:54:e9:07:72:90:b3:f4:c3:0f:99:d6:
ac:82:3c:27:b0:52:51:19:4e:65:06:dd:80:fc:b8:
83:e1:e0:39:d3:43:ba:be:b5:fb:49:4a:39:b4:a6:
10:2e:e4:86:66:95:19:b6:81:93:62:a1:f9:ba:0c:
42:e0:d2:aa:6e:ca:98:cb:3f:52:c8:5d:dd:59:ba:
07:e4:43:8d:59:82:fb:a1:e2:92:ec:3c:05:97:5b:
6f:22:9b:2f:b8:d6:73:4e:07:54:9c:6d:83:54:5f:
cd:5a:19:24:66:ea:c8:6e:af:c3:09:8d:e1:38:f8:
3b:bb:d5:e2:11:61:db:00:34:87:f6:b9:15:de:d2:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:F6:DD:9B:AA:13:5B:58:09:C2:CE:97:9E:F2:53:67:75:07:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
X509v3 Authority Key Identifier:
keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.43.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e8:08:5f:8d:d2:2a:25:2f:da:ab:24:22:26:47:e5:68:6a:
f9:bc:f7:75:8c:8c:c2:0d:c2:b6:89:63:05:93:bc:3d:fe:94:
7a:a7:60:32:9f:fd:b0:e9:3d:4d:c5:08:2c:d3:b6:49:5e:c8:
e3:ed:f4:64:35:a8:dd:eb:a1:81:88:0b:24:ea:d8:33:31:eb:
89:fc:8a:9d:af:ed:77:48:97:51:24:e4:f7:61:3f:73:0a:80:
a5:48:c0:59:1e:08:65:d1:1c:8a:3d:57:90:b0:25:52:92:96:
2b:c1:38:64:05:de:f1:89:1b:6c:ad:61:3e:2f:bb:b3:52:2e:
cc:e1:da:65:40:d4:3d:16:65:7d:f8:af:88:ef:f5:09:44:a8:
e5:7a:6d:0e:05:93:aa:90:ae:a5:73:9b:f0:c4:e8:5f:27:e7:
1b:70:34:07:44:33:57:64:37:e8:61:71:02:a4:57:fb:9b:a6:
39:56:dd:13:07:6c:d8:d7:fa:00:27:c8:27:8e:3a:13:4d:82:
7c:e4:7a:e5:66:25:4c:7e:7f:c4:65:c1:8a:4a:11:71:3c:72:
24:f3:56:a0:34:76:ab:ac:b0:16:d0:b7:dc:fa:ff:91:3c:4e:
7d:53:e6:c9:c0:59:c5:36:14:36:0c:27:e7:6c:02:37:41:63:
04:8c:dc:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JirxZEMFkOlrLGcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1
MWI2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzgyZGJhY2YtZTY4NS00N2U5LWFhZmMtNDYxZjYxNmRjNWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iPpY1FPnSSTkioibekIHcW0jK8BvZoKaXia
7eLgYb15o93/E2AGCpMrB90cUf2zEO5fkq/1Pjy3doR5nKvSTjTMgMQmatmufd2t
/q2RzewupFfIooKijx9sjnL2R5BFvBvYDqliXyKiNitAuiJaHyGNkLXZ9qVHOFCt
VOkHcpCz9MMPmdasgjwnsFJRGU5lBt2A/LiD4eA500O6vrX7SUo5tKYQLuSGZpUZ
toGTYqH5ugxC4NKqbsqYyz9SyF3dWboH5EONWYL7oeKS7DwFl1tvIpsvuNZzTgdU
nG2DVF/NWhkkZurIbq/DCY3hOPg7u9XiEWHbADSH9rkV3tLCZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+A9t2bqhNbWAnCzpee8lNndQfhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh
YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvYjU1NTJhM2ItNmNjNS0z
MTAzLWI0ZTktOWI1YTU1ZTVkOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl
NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi
NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz
YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxys2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPoCF+N0iolL9qrJCImR+Voavm893WMjMINwraJYwWTvD3+lHqnYDKf
/bDpPU3FCCzTtkleyOPt9GQ1qN3roYGICyTq2DMx64n8ip2v7XdIl1Ek5PdhP3MK
gKVIwFkeCGXRHIo9V5CwJVKSlivBOGQF3vGJG2ytYT4vu7NSLszh2mVA1D0WZX34
r4jv9QlEqOV6bQ4Fk6qQrqVzm/DE6F8n5xtwNAdEM1dkN+hhcQKkV/ubpjlW3RMH
bNjX+gAnyCeOOhNNgnzkeuVmJUx+f8RlwYpKEXE8ciTzVqA0dqussBbQt9z6/5E8
Tn1T5snAWcU2FDYMJ+dsAjdBYwSM3BE=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:04:02 2026 by rpki-client