
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa
File: 36486884-d2cb-36db-8e35-20cc21d19cf3.roa (raw, json)
Hash identifier: I3LzGzjDRPK/lYH1ms86gThSyPSqgTVCom/wbmdZVpc=
Subject key identifier: F8:B4:77:2B:B4:19:81:14:77:E7:6E:22:25:C2:7C:00:2F:D3:1C:32
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584EA79538C6017F81E85AF297C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33548
IP address blocks: 64.194.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:95:38:c6:01:7f:81:e8:5a:f2:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8a33be54-f41d-4f94-940b-5c03e802c0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:06:e5:90:2d:f7:ea:88:b7:f3:22:77:51:
8b:09:a7:5b:94:4b:91:05:b1:fc:d4:36:a1:31:74:
59:5d:95:ec:62:fa:d1:cc:18:56:69:d7:cc:25:7c:
fb:59:d2:d5:21:01:a2:32:77:88:8e:98:1d:67:80:
1f:53:3b:31:f2:f1:13:76:eb:65:05:2b:03:09:24:
d9:82:47:e5:c5:47:2d:28:04:9c:82:cc:54:a7:6d:
13:97:a1:42:a0:b3:da:a0:93:f2:f9:86:50:5b:22:
b1:72:ab:8d:ca:6e:c8:72:c6:2c:2c:74:a5:f5:99:
e3:0c:24:1f:e2:7a:15:10:76:31:1f:17:ae:5f:0c:
9e:83:96:81:46:42:bb:07:3a:95:55:11:21:44:9a:
54:c1:11:76:0f:6b:b6:b9:0d:f5:78:20:04:af:bb:
36:69:63:8b:67:b1:0f:a8:f9:77:9f:ab:a6:b5:b6:
63:a3:35:d2:85:30:a5:22:05:74:92:82:3d:14:9f:
7e:cd:8c:3c:e3:87:35:7b:4e:7c:5c:07:4b:b8:7a:
5f:3d:a5:45:1f:c8:3e:f6:89:1b:42:ca:76:fc:97:
81:dd:c0:b5:26:44:bd:91:52:38:5e:80:68:7b:8a:
73:ba:bd:b6:c6:72:49:39:f2:03:18:7a:e5:a3:b5:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:77:2B:B4:19:81:14:77:E7:6E:22:25:C2:7C:00:2F:D3:1C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.194.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:13:3e:6e:70:73:35:e2:bd:46:d9:23:eb:de:3f:79:df:e2:
57:56:b1:af:a6:47:07:ff:b8:81:9c:84:b0:50:33:91:bc:c0:
88:ee:a9:8b:59:9b:0b:24:01:5b:eb:69:bf:33:bb:06:f4:17:
96:96:4d:31:64:f8:a9:76:b0:32:12:c6:7b:99:e0:4f:92:29:
9d:c1:59:ac:f8:07:6d:8f:41:38:ef:33:f5:6c:cb:a6:fa:e8:
39:12:3d:a2:67:94:aa:98:56:94:c6:6b:03:ba:a2:8a:a3:78:
b5:f2:86:44:2c:94:00:4d:2e:e5:69:5f:66:25:fc:a4:6a:69:
2c:06:c2:1d:dd:62:c1:b5:e9:3a:cf:4c:d2:3a:39:e7:79:42:
f5:9f:3b:98:13:14:03:4e:c1:4d:0f:f4:06:bd:88:db:7a:de:
1a:2e:80:c1:66:b4:e1:fe:33:75:2b:c2:5c:13:21:6d:af:4b:
b8:0e:30:0f:4b:7c:c0:2e:a3:63:05:56:76:db:75:a8:d1:ca:
74:93:5e:52:a1:d5:21:35:ab:69:8b:7d:74:ff:0a:38:89:5b:
86:a3:f8:83:43:be:86:6e:a8:ec:d5:b2:85:5f:a1:93:fc:60:
b4:e7:18:46:ce:52:02:79:d9:1a:f0:84:06:26:84:ff:83:8d:
10:70:7f:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlTjGAX+B6Fryl8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGEzM2JlNTQtZjQxZC00Zjk0LTk0MGItNWMwM2U4MDJjMGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaEG5ZAt9+qIt/Mid1GLCadblEuRBbH81Dah
MXRZXZXsYvrRzBhWadfMJXz7WdLVIQGiMneIjpgdZ4AfUzsx8vETdutlBSsDCSTZ
gkflxUctKAScgsxUp20Tl6FCoLPaoJPy+YZQWyKxcquNym7IcsYsLHSl9ZnjDCQf
4noVEHYxHxeuXwyeg5aBRkK7BzqVVREhRJpUwRF2D2u2uQ31eCAEr7s2aWOLZ7EP
qPl3n6umtbZjozXShTClIgV0koI9FJ9+zYw844c1e058XAdLuHpfPaVFH8g+9okb
Qsp2/JeB3cC1JkS9kVI4XoBoe4pzur22xnJJOfIDGHrlo7X2NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPi0dyu0GYEUd+duIiXCfAAv0xwyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzY0ODY4ODQtZDJjYi0z
NmRiLThlMzUtMjBjYzIxZDE5Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMKEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMTPm5wczXivUbZI+veP3nf4ldWsa+mRwf/uIGchLBQM5G8wIjuqYtZ
mwskAVvrab8zuwb0F5aWTTFk+Kl2sDISxnuZ4E+SKZ3BWaz4B22PQTjvM/Vsy6b6
6DkSPaJnlKqYVpTGawO6ooqjeLXyhkQslABNLuVpX2Yl/KRqaSwGwh3dYsG16TrP
TNI6Oed5QvWfO5gTFANOwU0P9Aa9iNt63hougMFmtOH+M3UrwlwTIW2vS7gOMA9L
fMAuo2MFVnbbdajRynSTXlKh1SE1q2mLfXT/CjiJW4aj+INDvoZuqOzVsoVfoZP8
YLTnGEbOUgJ52RrwhAYmhP+DjRBwf/Y=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:09:52 2026 by rpki-client