
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa
File: 422a23f3-46df-3a7b-afbd-3ae916bba51f.roa (raw, json)
Hash identifier: NZcvQxgZTph8SXY6Y8nwc+BufkAOSdQuVLGHxcLbrF0=
Subject key identifier: C6:C0:A8:A9:08:B3:99:01:1B:82:B0:06:A4:99:04:23:CE:BC:59:4F
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584F3E47D3A6CEBA13BEE744F900
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 14618
IP address blocks: 208.85.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:d3:a6:ce:ba:13:be:e7:44:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=52f5dd20-f947-482f-a33c-200c26cc6688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:d5:d1:9a:2d:dc:b8:bd:8e:fd:f5:f5:35:
bc:8d:63:55:7f:66:80:df:62:95:ba:19:aa:a9:6c:
22:5c:e5:48:88:44:bb:d2:63:08:ce:1a:07:f6:f5:
1c:24:42:74:07:1d:f9:9e:9d:67:db:f0:bc:59:22:
2f:9a:7b:87:03:d5:b2:5c:95:3c:27:31:09:b0:81:
22:62:ec:90:51:dc:36:59:e8:b0:f4:35:86:25:08:
1e:76:e7:b7:43:eb:f5:b0:c3:92:78:30:02:b3:37:
56:d5:0c:6f:48:56:fc:6d:6b:50:98:77:b6:bc:e0:
ce:8d:d9:92:fd:a1:db:ad:42:5b:52:ee:d0:01:81:
ac:46:4d:80:ab:31:4a:5b:fb:11:9f:cf:83:c4:a6:
55:37:62:58:e1:0c:fa:fb:ed:a9:d9:0d:aa:27:20:
74:6f:bf:98:b2:2d:6f:0b:76:9d:c5:f8:9d:70:9f:
02:d7:2f:ac:02:06:98:2f:a7:c1:49:69:1c:d5:41:
05:59:ee:57:63:d4:af:95:10:c5:31:0c:f4:be:6e:
a9:a3:90:06:87:c2:60:c8:9f:c3:69:80:4b:1d:03:
db:5c:86:ee:82:ac:c8:94:10:96:18:fc:1b:7a:87:
a2:f8:2a:bf:73:fa:b4:67:29:95:93:17:db:62:b7:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:A8:A9:08:B3:99:01:1B:82:B0:06:A4:99:04:23:CE:BC:59:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.85.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:77:f1:75:74:65:78:f2:83:99:85:7e:68:1d:3c:f2:65:47:
68:54:b8:e1:32:be:81:83:52:15:cf:07:99:15:a4:48:0c:6c:
76:17:92:7e:c0:02:04:e7:a6:83:86:20:8d:34:70:68:4f:fa:
92:87:7f:02:e4:82:40:5e:39:2f:b3:fb:f2:5d:a4:76:07:de:
19:23:53:7f:d7:4e:10:2c:52:ab:f9:4d:c1:91:1a:02:8b:61:
13:57:22:26:bb:57:18:b3:31:79:98:f1:67:e4:67:20:4c:15:
34:9c:0d:ea:44:86:2d:02:f8:cd:1e:d2:b7:71:b7:f7:87:33:
76:a7:68:66:82:7c:37:85:32:bd:39:97:f5:8a:18:78:5a:01:
26:f5:0d:45:9d:1c:07:08:a4:98:01:19:dc:54:09:49:89:08:
d2:49:a0:c0:0e:d9:e2:91:7b:f1:87:3b:8e:9e:89:77:16:9b:
ac:f2:aa:22:0a:c2:44:79:e2:ca:36:fc:51:d9:a9:68:0a:54:
fa:e6:21:cc:40:5f:35:c3:3e:4e:d1:03:04:ab:20:20:d7:75:
6d:9b:3b:ca:5f:bd:4e:4b:f4:f2:84:45:86:46:ac:33:19:2c:
dd:a8:45:13:c6:6a:b2:86:21:ac:60:48:d6:a9:56:6d:2a:a3:
a2:02:97:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9OmzroTvudE+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
NTJmNWRkMjAtZjk0Ny00ODJmLWEzM2MtMjAwYzI2Y2M2Njg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRvV0Zot3Li9jv319TW8jWNVf2aA32KVuhmq
qWwiXOVIiES70mMIzhoH9vUcJEJ0Bx35np1n2/C8WSIvmnuHA9WyXJU8JzEJsIEi
YuyQUdw2Weiw9DWGJQgedue3Q+v1sMOSeDACszdW1QxvSFb8bWtQmHe2vODOjdmS
/aHbrUJbUu7QAYGsRk2AqzFKW/sRn8+DxKZVN2JY4Qz6++2p2Q2qJyB0b7+Ysi1v
C3adxfidcJ8C1y+sAgaYL6fBSWkc1UEFWe5XY9SvlRDFMQz0vm6po5AGh8JgyJ/D
aYBLHQPbXIbugqzIlBCWGPwbeoei+Cq/c/q0ZymVkxfbYre/owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbAqKkIs5kBG4KwBqSZBCPOvFlPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDIyYTIzZjMtNDZkZi0z
YTdiLWFmYmQtM2FlOTE2YmJhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZ38XV0ZXjyg5mFfmgdPPJlR2hUuOEyvoGDUhXPB5kVpEgMbHYXkn7A
AgTnpoOGII00cGhP+pKHfwLkgkBeOS+z+/JdpHYH3hkjU3/XThAsUqv5TcGRGgKL
YRNXIia7VxizMXmY8WfkZyBMFTScDepEhi0C+M0e0rdxt/eHM3anaGaCfDeFMr05
l/WKGHhaASb1DUWdHAcIpJgBGdxUCUmJCNJJoMAO2eKRe/GHO46eiXcWm6zyqiIK
wkR54so2/FHZqWgKVPrmIcxAXzXDPk7RAwSrICDXdW2bO8pfvU5L9PKERYZGrDMZ
LN2oRRPGarKGIaxgSNapVm0qo6ICl/8=
-----END CERTIFICATE-----
Generated at Mon Oct 5 23:21:04 2026 by rpki-client