
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa
File: b6a10872-6477-3316-8b26-a4a5d54f2477.roa (raw, json)
Hash identifier: 9F+ud2UlC7OtN2e4MHSFrFmcaFH0Q4ZULsQgMOSqjUY=
Subject key identifier: 2B:83:D6:47:7D:97:DC:1F:1D:B0:F2:AD:8E:67:28:76:93:60:22:91
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584F0D6CD761362BADAC0A0456C0
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 7018
IP address blocks: 23.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:d7:61:36:2b:ad:ac:0a:04:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=2a9018e7-c4c4-4739-a916-f677a5cda801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:3c:e4:ed:3d:31:cb:eb:2c:9f:1b:72:75:
a8:25:0b:4b:c1:2c:66:bc:5e:bc:2c:1e:e2:b0:46:
3b:59:be:ed:3e:4c:bd:ef:c4:c5:33:c3:ff:3b:83:
bd:04:af:eb:9d:c6:28:8e:5c:1f:cb:5c:db:8c:fc:
e5:49:45:ff:6f:05:b9:03:ce:51:25:a0:1c:ae:e7:
dc:82:0c:51:e5:c8:e2:ab:7d:3b:7b:6d:4e:a8:07:
ae:28:ad:6c:0a:b1:ff:5f:d2:7f:31:61:2c:59:83:
52:53:91:1a:0d:d8:94:e8:4c:e6:21:41:7f:e4:86:
48:fa:b6:23:be:0c:a6:5e:fb:f2:66:56:bb:8a:95:
54:26:c6:4e:52:e7:7f:46:9c:7c:2a:e8:0c:10:42:
cf:52:da:10:6a:98:96:eb:4c:ea:c0:b2:4c:99:46:
13:45:33:12:5c:e3:fb:17:26:0b:f4:dd:4b:e4:f5:
85:cd:86:38:60:03:9c:c9:d5:ac:7d:bf:b9:fa:f4:
69:c1:34:36:52:6c:61:ba:25:9f:fb:02:96:ca:52:
b9:6a:2e:12:7c:fe:0e:2f:f1:a6:f4:23:52:c9:51:
7c:94:c0:fb:71:8a:43:ed:00:40:16:d6:05:72:20:
6d:53:3f:b6:60:b4:e9:d9:cc:12:b5:65:c6:08:83:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:83:D6:47:7D:97:DC:1F:1D:B0:F2:AD:8E:67:28:76:93:60:22:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.229.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b3:84:3e:9a:85:b7:44:ae:b6:6d:85:02:e1:38:c6:74:dc:
cd:84:dc:a6:a9:d7:d5:3b:3a:56:69:b0:f7:64:00:d6:ec:ca:
93:c6:be:4b:4d:9f:a4:fa:81:22:f6:af:18:80:e2:99:d4:af:
81:58:96:09:9f:07:a8:de:dc:e6:93:4a:a3:1e:c2:fe:c4:78:
af:d8:63:c2:79:39:b7:0e:1f:8e:6f:a2:b9:a3:9c:d8:76:05:
d8:85:22:bc:0a:4b:f9:41:91:80:e6:4c:1b:59:46:91:b7:2a:
5d:51:dc:1b:ae:31:e0:19:38:f1:df:21:cd:bb:63:36:b7:31:
1c:48:44:17:21:c5:ca:50:c8:4e:d7:84:c2:8c:a6:f7:42:e1:
c2:ad:74:bf:f2:ec:68:7b:2d:65:f0:b4:3b:b2:2e:7b:0a:42:
06:66:a8:c8:a3:53:c3:ed:8b:87:06:88:fa:1f:43:f0:80:75:
2d:66:0e:c5:8b:e5:42:66:41:43:80:ec:d9:94:6b:e9:ca:30:
c7:5d:93:e7:56:55:42:f2:05:ec:d1:5a:7a:a6:4f:37:e3:90:
75:32:19:f9:8e:ab:9b:31:da:57:07:58:d6:76:61:4d:a4:35:
04:a1:09:1a:98:5a:2c:35:9b:05:4d:ee:59:69:3c:0d:9f:0b:
3d:d2:8a:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNdhNiutrAoEVsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0
NWY1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
MmE5MDE4ZTctYzRjNC00NzM5LWE5MTYtZjY3N2E1Y2RhODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjs85O09McvrLJ8bcnWoJQtLwSxmvF68LB7i
sEY7Wb7tPky978TFM8P/O4O9BK/rncYojlwfy1zbjPzlSUX/bwW5A85RJaAcrufc
ggxR5cjiq307e21OqAeuKK1sCrH/X9J/MWEsWYNSU5EaDdiU6EzmIUF/5IZI+rYj
vgymXvvyZla7ipVUJsZOUud/Rpx8KugMEELPUtoQapiW60zqwLJMmUYTRTMSXOP7
FyYL9N1L5PWFzYY4YAOcydWsfb+5+vRpwTQ2UmxhuiWf+wKWylK5ai4SfP4OL/Gm
9CNSyVF8lMD7cYpD7QBAFtYFciBtUz+2YLTp2cwStWXGCIPWQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuD1kd9l9wfHbDyrY5nKHaTYCKRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk
ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYjZhMTA4NzItNjQ3Ny0z
MzE2LThiMjYtYTRhNWQ1NGYyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3
ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi
NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1
YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHezhD6ahbdErrZthQLhOMZ03M2E3Kap19U7OlZpsPdkANbsypPGvktN
n6T6gSL2rxiA4pnUr4FYlgmfB6je3OaTSqMewv7EeK/YY8J5ObcOH45vormjnNh2
BdiFIrwKS/lBkYDmTBtZRpG3Kl1R3BuuMeAZOPHfIc27Yza3MRxIRBchxcpQyE7X
hMKMpvdC4cKtdL/y7Gh7LWXwtDuyLnsKQgZmqMijU8Pti4cGiPofQ/CAdS1mDsWL
5UJmQUOA7NmUa+nKMMddk+dWVULyBezRWnqmTzfjkHUyGfmOq5sx2lcHWNZ2YU2k
NQShCRqYWiw1mwVN7llpPA2fCz3SigY=
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:17:34 2026 by rpki-client