
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa
File: ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa (raw, json)
Hash identifier: 48UMpvAfdT8QMrN+rBPC/cwpNxVGbd8TBAdZ7Ceyn/Q=
Subject key identifier: 2F:79:98:A0:11:59:CA:22:56:A4:6B:38:94:64:D9:F0:E2:9D:8D:EB
Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
Certificate serial: 010D0C9F4328584FA42DC607FBD2C6CFC2FD2000
Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa
Signing time: Tue 27 Oct 2026 13:00:13 +0000
ROA not before: Tue 27 Oct 2026 13:00:13 +0000
ROA not after: Mon 25 Jan 2027 14:00:13 +0000
asID: 38481
IP address blocks: 170.148.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a4:2d:c6:07:fb:d2:c6:cf:c2:fd:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
Validity
Not Before: Oct 27 13:00:13 2026 GMT
Not After : Jan 25 14:00:13 2027 GMT
Subject: CN=136c9d91-aa03-4199-a12f-c846b53c60b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:8f:96:3b:61:cb:a1:88:03:ff:0f:b6:ab:
69:6d:50:89:64:a7:c9:69:0d:9a:7b:c4:da:d5:6d:
40:c6:50:3d:78:5b:45:50:27:85:1c:c8:32:5c:3e:
73:22:76:68:74:e7:35:27:50:f2:a3:a8:c9:ea:0a:
fc:2a:5d:5f:e3:c4:46:47:e9:3f:ee:5d:83:bc:22:
2c:cc:b6:85:8d:4c:21:0b:cb:d1:22:cb:b3:27:07:
b3:66:a6:70:e9:c0:c5:9a:97:2c:81:05:db:70:c0:
13:4c:f7:c8:e6:1f:5e:6a:a4:10:ea:7b:45:cc:7a:
92:1a:63:e2:45:50:ae:ef:ed:65:fd:d4:15:5f:23:
5a:48:2b:d9:d5:7e:14:08:51:59:2f:a2:d8:5b:d0:
1d:22:49:63:d5:dd:0a:cc:08:be:58:a1:94:77:6b:
2a:3c:01:44:01:bc:08:73:3d:8e:fa:09:bb:00:76:
22:ce:69:3f:ba:55:1c:8a:f6:a9:25:20:0d:38:bb:
16:4d:14:7a:5a:7a:61:df:62:3c:b4:6d:74:f1:88:
0b:bd:2f:7c:da:a3:57:ea:da:41:1d:7a:7a:80:62:
1a:32:62:ba:16:a8:83:7c:91:13:81:f2:f7:cc:08:
6c:31:a7:ee:c2:33:ae:de:11:fe:0c:f8:58:6c:16:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:79:98:A0:11:59:CA:22:56:A4:6B:38:94:64:D9:F0:E2:9D:8D:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl
X509v3 Authority Key Identifier:
keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.148.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:75:7d:69:6e:d0:e7:af:56:ec:30:23:7c:e2:4a:4c:88:f8:
fe:28:76:29:4e:38:18:91:72:e3:ea:af:05:9e:7b:75:3a:e2:
7d:be:91:6b:74:bd:33:0d:58:18:5c:99:a9:7a:02:0d:82:dd:
46:12:a8:60:27:8b:7f:bd:03:97:9a:a0:d9:1e:93:ca:a6:17:
af:9f:e1:65:b2:e3:52:93:0b:35:57:55:68:9e:89:7a:04:d0:
16:d7:1e:85:64:0b:ab:a6:ee:9f:6a:14:21:dc:34:2f:3f:87:
da:00:ba:50:a4:6f:91:a6:11:bb:5f:a6:13:f5:cf:fb:30:9c:
c5:11:e7:4e:7b:36:8b:ed:10:58:9c:2b:cd:59:81:ba:2f:0b:
08:31:d5:8d:ee:3b:36:3d:7a:d6:9f:38:9a:35:6c:8f:71:4b:
3e:95:ad:93:a6:df:45:86:bc:a5:cd:f3:bc:83:62:19:69:72:
27:14:9d:49:28:82:74:89:00:f7:3d:b2:41:90:57:9e:66:6d:
14:75:63:7c:8a:3d:09:04:f1:60:9d:6c:bd:92:69:38:d4:85:
e7:25:58:86:32:cd:55:42:7d:7b:25:1e:76:bf:6e:24:59:a6:
a3:b9:62:16:e4:21:b1:df:5f:08:a2:30:2c:88:11:b1:b5:9e:
29:cb:da:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLcYH+9LGz8L9IAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4
N2ZjMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk
MTM2YzlkOTEtYWEwMy00MTk5LWExMmYtYzg0NmI1M2M2MGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2KPljthy6GIA/8PtqtpbVCJZKfJaQ2ae8Ta
1W1AxlA9eFtFUCeFHMgyXD5zInZodOc1J1Dyo6jJ6gr8Kl1f48RGR+k/7l2DvCIs
zLaFjUwhC8vRIsuzJwezZqZw6cDFmpcsgQXbcMATTPfI5h9eaqQQ6ntFzHqSGmPi
RVCu7+1l/dQVXyNaSCvZ1X4UCFFZL6LYW9AdIklj1d0KzAi+WKGUd2sqPAFEAbwI
cz2O+gm7AHYizmk/ulUcivapJSANOLsWTRR6Wnph32I8tG108YgLvS982qNX6tpB
HXp6gGIaMmK6FqiDfJETgfL3zAhsMafuwjOu3hH+DPhYbBaEaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC95mKARWcoiVqRrOJRk2fDinY3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm
ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvZWNlYTgwNDItOGMzNS0z
YWE0LTkzZTAtMjdmYmFlZTAyYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3
ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi
ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj
MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqpToMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACN1fWlu0OevVuwwI3ziSkyI+P4odilOOBiRcuPqrwWee3U64n2+kWt0
vTMNWBhcmal6Ag2C3UYSqGAni3+9A5eaoNkek8qmF6+f4WWy41KTCzVXVWieiXoE
0BbXHoVkC6um7p9qFCHcNC8/h9oAulCkb5GmEbtfphP1z/swnMUR5057NovtEFic
K81ZgbovCwgx1Y3uOzY9etafOJo1bI9xSz6VrZOm30WGvKXN87yDYhlpcicUnUko
gnSJAPc9skGQV55mbRR1Y3yKPQkE8WCdbL2SaTjUheclWIYyzVVCfXslHna/biRZ
pqO5YhbkIbHfXwiiMCyIEbG1ninL2uY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:16 2026 by rpki-client