
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/222b3969-61f2-3c80-80e4-88b188bd4bb8.roa
File: 222b3969-61f2-3c80-80e4-88b188bd4bb8.roa (raw, json)
Hash identifier: aZs+so0ovAEY4vJOWTAB9/wBhSvl2v72Z235c6RLgs4=
Subject key identifier: DA:46:BF:04:10:57:DE:14:DA:1D:DC:FC:59:82:18:EA:55:49:F8:F6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D95F0136AE97815B099304500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/222b3969-61f2-3c80-80e4-88b188bd4bb8.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 20940
IP address blocks: 104.97.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:13:6a:e9:78:15:b0:99:30:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=3d4fe211-9784-4dfb-9c42-9f2570dda15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:cd:41:7a:73:7f:0c:a6:a7:a3:6e:03:1a:
1c:3a:4c:b4:22:86:71:00:0d:da:dd:c5:7a:4c:19:
6a:c0:e7:d7:91:08:65:e2:29:af:cc:f2:c0:16:41:
0e:80:9c:61:75:5a:b0:8b:98:79:84:48:9c:e1:a8:
d1:be:a9:a8:68:84:cc:75:ae:f3:9f:61:0d:4d:10:
30:a8:90:77:7f:f4:94:b8:0d:a0:15:14:cd:ab:d0:
ca:c4:6f:bf:37:68:7a:92:63:4d:94:db:03:70:28:
47:94:45:b8:5e:71:f8:87:69:10:ab:33:af:40:25:
5a:3c:50:b3:f8:fe:fb:80:69:91:7d:c8:0f:77:a0:
74:22:98:0d:0d:fc:11:c0:55:55:f6:78:8e:f5:f2:
8d:b4:12:25:73:cf:ff:f9:c6:b2:8e:5d:e8:3e:53:
3a:00:cd:8f:61:6b:ad:f0:33:a1:ec:4b:8c:7c:f8:
df:6d:00:08:5c:4f:da:86:9b:a8:3f:8a:ed:26:43:
38:d2:7c:60:33:82:c9:23:69:3c:b5:14:68:5c:5d:
50:54:54:e0:a9:e5:3f:e6:a3:f0:65:2f:ae:d3:64:
e4:cd:57:98:94:19:b2:c5:d3:7a:97:ed:2e:0b:37:
d7:54:1a:9d:97:00:9e:44:f2:19:f4:5f:93:5f:b5:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:46:BF:04:10:57:DE:14:DA:1D:DC:FC:59:82:18:EA:55:49:F8:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/222b3969-61f2-3c80-80e4-88b188bd4bb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.97.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:12:e7:fe:5b:38:88:cb:f9:02:15:ab:2e:d4:41:4a:7b:a5:
89:42:99:8c:4e:9b:1c:54:cd:a9:f2:fc:64:7b:a1:8a:ed:37:
3f:f3:f9:1b:d0:74:d9:61:32:e6:29:aa:d9:4b:11:9d:44:af:
3f:31:04:7d:80:c1:1f:08:bb:5e:9b:b3:57:64:a1:ea:9f:6a:
48:7e:f3:af:6a:e4:68:df:17:19:8e:5d:82:f9:d1:71:42:7f:
69:7d:65:19:9b:8a:b7:48:f2:ea:5d:26:22:a0:b0:69:16:8f:
59:16:be:9d:36:9e:c8:ff:1a:58:11:e5:b6:3e:72:ca:bc:73:
db:ca:eb:b5:8f:f7:f6:de:80:7a:aa:85:76:5d:29:91:ab:82:
99:0e:ba:f2:c3:95:e0:00:d7:d4:55:cb:6b:a5:51:8b:22:32:
68:45:52:d3:5b:92:3f:b8:e4:7e:6f:de:b8:aa:98:41:33:a6:
3f:c7:f1:f9:6d:11:bd:61:bc:8d:91:44:d5:82:11:89:36:8e:
c0:18:28:67:6c:c5:ec:30:90:c3:e3:34:6c:9d:ed:57:f9:2b:
70:3c:a7:35:c9:bc:00:bf:1d:f8:12:9d:39:72:55:d1:e4:73:
c7:5c:d3:57:4b:7a:da:fb:be:e5:b7:a5:93:28:63:e1:8c:1d:
a5:c8:fb:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8BNq6XgVsJkwRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
M2Q0ZmUyMTEtOTc4NC00ZGZiLTljNDItOWYyNTcwZGRhMTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAnNQXpzfwymp6NuAxocOky0IoZxAA3a3cV6
TBlqwOfXkQhl4imvzPLAFkEOgJxhdVqwi5h5hEic4ajRvqmoaITMda7zn2ENTRAw
qJB3f/SUuA2gFRTNq9DKxG+/N2h6kmNNlNsDcChHlEW4XnH4h2kQqzOvQCVaPFCz
+P77gGmRfcgPd6B0IpgNDfwRwFVV9niO9fKNtBIlc8//+cayjl3oPlM6AM2PYWut
8DOh7EuMfPjfbQAIXE/ahpuoP4rtJkM40nxgM4LJI2k8tRRoXF1QVFTgqeU/5qPw
ZS+u02TkzVeYlBmyxdN6l+0uCzfXVBqdlwCeRPIZ9F+TX7Xb+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpGvwQQV94U2h3c/FmCGOpVSfj2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjIyYjM5NjktNjFmMi0z
YzgwLTgwZTQtODhiMTg4YmQ0YmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGFUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgS5/5bOIjL+QIVqy7UQUp7pYlCmYxOmxxUzany/GR7oYrtNz/z+RvQ
dNlhMuYpqtlLEZ1Erz8xBH2AwR8Iu16bs1dkoeqfakh+869q5GjfFxmOXYL50XFC
f2l9ZRmbirdI8updJiKgsGkWj1kWvp02nsj/GlgR5bY+csq8c9vK67WP9/begHqq
hXZdKZGrgpkOuvLDleAA19RVy2ulUYsiMmhFUtNbkj+45H5v3riqmEEzpj/H8flt
Eb1hvI2RRNWCEYk2jsAYKGdsxewwkMPjNGyd7Vf5K3A8pzXJvAC/HfgSnTlyVdHk
c8dc01dLetr7vuW3pZMoY+GMHaXI++M=
-----END CERTIFICATE-----
Generated at Wed May 13 13:09:43 2026 by rpki-client