
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa
File: 4006a66d-6da1-3667-95e8-2ae868c8c68e.roa (raw, json)
Hash identifier: Ct9xMQTui57mLOJJoG6X+JPlRgOG5zvyRTO6dDoKo1s=
Subject key identifier: CD:50:FE:4A:69:B7:08:84:47:9E:06:8E:55:B2:B5:84:8A:75:62:A8
Certificate issuer: /CN=d96f592a-8fa9-4ec8-a272-b56c2537919c
Certificate serial: 010D0C9F4328584E7634F41A3816C7DC7B78EB80
Authority key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa
Signing time: Sat 11 Jul 2026 09:00:12 +0000
ROA not before: Sat 11 Jul 2026 09:00:12 +0000
ROA not after: Fri 09 Oct 2026 09:00:12 +0000
asID: 399587
IP address blocks: 23.139.228.0/24 maxlen: 24
2602:f623::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:76:34:f4:1a:38:16:c7:dc:7b:78:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c
Validity
Not Before: Jul 11 09:00:12 2026 GMT
Not After : Oct 9 09:00:12 2026 GMT
Subject: CN=4a50bbb8-e942-47d9-a86a-4d16ea8c3663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:66:c4:80:f1:23:97:9f:03:95:c2:30:e2:
11:a9:de:e7:4a:75:1b:e2:36:b9:98:ed:d6:ae:40:
1d:c8:21:da:16:d3:72:a4:10:bd:0d:0d:6a:13:d7:
a2:2a:36:e6:c2:e7:14:5d:f0:b4:a1:1a:ed:27:19:
7f:00:6d:79:c7:b2:73:99:38:8b:e1:8b:8b:9a:ea:
4c:13:14:b6:13:cc:20:3c:55:e8:d5:f1:fb:c9:f3:
d2:c5:83:82:c8:e7:55:d8:6f:f4:02:51:32:99:3f:
53:02:6f:58:1a:9c:1b:f8:d5:10:9f:b9:55:77:7e:
41:fc:3f:d7:60:f2:36:a9:6b:00:a4:87:2b:5c:65:
21:81:54:62:ba:db:85:1e:0e:3c:14:36:3e:a2:29:
f8:02:7f:86:6a:1f:ec:3b:0f:4f:8e:27:e0:18:f0:
3b:18:84:f1:75:e8:1d:7a:77:10:27:45:eb:ad:d7:
e0:e1:ca:6e:a7:5a:f9:90:65:ac:d7:09:a5:97:de:
9a:ce:86:d6:38:40:60:66:79:6d:80:92:a1:3f:1d:
77:e3:0b:90:e9:3a:51:35:fb:65:ff:8f:0b:23:cf:
da:71:f0:9d:53:a2:bd:73:d0:c4:e2:6f:47:57:e8:
43:17:73:80:a7:d7:c3:c6:74:4b:2c:3b:81:6e:6d:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:FE:4A:69:B7:08:84:47:9E:06:8E:55:B2:B5:84:8A:75:62:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl
X509v3 Authority Key Identifier:
keyid:14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.228.0/24
IPv6:
2602:f623::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:06:af:c3:e2:c2:dc:26:1e:97:05:fd:4f:78:fd:8a:c7:54:
9c:3b:1e:e3:b1:1c:3d:30:16:aa:6c:a5:aa:67:cc:53:d7:b1:
f3:5a:e1:a0:88:91:50:a7:df:0e:83:eb:ed:9d:43:bf:7f:1f:
df:48:b2:ff:7e:c1:4c:b8:44:46:6f:11:af:47:92:8b:22:ff:
67:b1:5f:34:b8:53:f4:cd:2a:74:dd:a3:5f:cb:1f:e9:f9:93:
89:d2:3a:c9:86:4c:1f:57:40:b9:1d:3a:9b:96:6c:97:e5:ad:
a7:f0:2a:14:b5:66:71:77:df:63:ca:93:14:1d:f2:dd:bf:1b:
cd:dd:42:44:bd:06:25:78:97:72:ca:16:46:5d:65:2d:76:29:
cc:68:1f:4d:11:63:16:d6:4d:aa:0c:f9:76:ce:09:8c:23:73:
f3:fc:68:36:d3:74:da:6d:a6:39:d3:56:9e:e0:fb:b9:a7:41:
b7:86:9c:53:40:69:02:b0:4a:34:91:af:e9:e0:26:aa:0f:d5:
f3:8b:f2:2f:43:20:65:fa:25:a5:eb:0e:52:3e:21:b6:7d:21:
06:85:f8:0a:ed:0c:3b:d4:39:c5:15:e1:b6:78:22:c0:8c:d2:
b6:df:5b:60:a4:f3:a3:9a:6f:07:8a:3f:c4:8c:3e:45:36:64:
da:0a:43:9f
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE52NPQaOBbH3Ht464AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5
MTljMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
NGE1MGJiYjgtZTk0Mi00N2Q5LWE4NmEtNGQxNmVhOGMzNjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaRmxIDxI5efA5XCMOIRqd7nSnUb4ja5mO3W
rkAdyCHaFtNypBC9DQ1qE9eiKjbmwucUXfC0oRrtJxl/AG15x7JzmTiL4YuLmupM
ExS2E8wgPFXo1fH7yfPSxYOCyOdV2G/0AlEymT9TAm9YGpwb+NUQn7lVd35B/D/X
YPI2qWsApIcrXGUhgVRiutuFHg48FDY+oin4An+Gah/sOw9PjifgGPA7GITxdegd
encQJ0Xrrdfg4cpup1r5kGWs1wmll96azobWOEBgZnltgJKhPx134wuQ6TpRNftl
/48LI8/acfCdU6K9c9DE4m9HV+hDF3OAp9fDxnRLLDuBbm0H5wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFM1Q/kpptwiER54GjlWytYSKdWKoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZm
NTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvNDAwNmE2NmQtNmRhMS0z
NjY3LTk1ZTgtMmFlODY4YzhjNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDk2ZjU5MmEtOGZhOS00ZWM4LWEy
NzItYjU2YzI1Mzc5MTljL2Q5NmY1OTJhLThmYTktNGVjOC1hMjcyLWI1NmMyNTM3
OTE5Yy5jcmwwHwYDVR0jBBgwFoAUFJ7+v2rZASg6Fn5McNNjQUeAQvIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZj
MjUzNzkxOWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4vkMA4E
AgACMAgDBgQmAvYjADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqBq/D4sLcJh6XBf1PeP2Kx1ScOx7jsRw9
MBaqbKWqZ8xT17HzWuGgiJFQp98Og+vtnUO/fx/fSLL/fsFMuERGbxGvR5KLIv9n
sV80uFP0zSp03aNfyx/p+ZOJ0jrJhkwfV0C5HTqblmyX5a2n8CoUtWZxd99jypMU
HfLdvxvN3UJEvQYleJdyyhZGXWUtdinMaB9NEWMW1k2qDPl2zgmMI3Pz/Gg203Ta
baY501ae4Pu5p0G3hpxTQGkCsEo0ka/p4CaqD9Xzi/IvQyBl+iWl6w5SPiG2fSEG
hfgK7Qw71DnFFeG2eCLAjNK231tgpPOjmm8Hij/EjD5FNmTaCkOf
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:04 2026 by rpki-client