
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa
File: 87c708cc-aab6-358e-a4e7-4226a4708aa3.roa (raw, json)
Hash identifier: y3gpK/bJjsS2Zc3CNm7jWPg0wMUQXfsSySLraTIfAbA=
Subject key identifier: C3:43:24:27:D6:02:D2:37:C8:6D:7D:9C:C9:75:03:B2:8B:40:6C:11
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584CEFF24A9407171C1E2B9A1F00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa
Signing time: Sat 21 Feb 2026 14:00:41 +0000
ROA not before: Sat 21 Feb 2026 14:00:41 +0000
ROA not after: Fri 22 May 2026 13:00:41 +0000
asID: 13315
IP address blocks: 199.94.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ef:f2:4a:94:07:17:1c:1e:2b:9a:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 21 14:00:41 2026 GMT
Not After : May 22 13:00:41 2026 GMT
Subject: CN=c3650d20-bf99-4ccd-b691-d15164b13c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:b2:a4:f4:f3:a7:7a:0c:5f:d3:7c:8d:65:
4c:64:39:87:b3:b4:43:64:dc:14:fd:95:03:69:91:
e6:cd:d0:7b:81:17:fb:4f:7d:e7:58:a3:fb:97:e3:
a1:db:c1:05:4e:a8:08:5f:46:8e:ef:b8:22:2e:82:
8c:85:08:9b:df:ef:49:74:e2:c4:7e:31:78:b5:8b:
9f:d8:54:a6:ee:db:b6:ce:0b:35:80:cb:d6:66:2e:
7e:34:58:c7:8c:4a:25:22:db:1c:0c:13:82:2c:a5:
fb:a2:82:ea:e7:1a:46:e1:4b:23:bb:27:f7:e2:7b:
99:bb:50:bf:e4:da:d2:99:0b:51:82:7f:41:bb:72:
b2:75:a1:c6:8e:54:f6:f7:36:c5:a2:55:f3:f4:1c:
56:ed:83:88:67:e3:72:20:b3:d9:9b:63:2d:44:82:
5c:3f:ed:c3:3f:e8:18:8d:da:0d:e8:74:c0:0f:cd:
2b:7e:4d:ee:10:16:69:32:be:a2:66:a8:2c:fc:86:
2c:d3:ee:80:9e:84:a9:23:3d:7d:76:ad:8f:28:5c:
af:78:f7:41:0d:ec:e9:1f:b6:60:88:05:4a:37:33:
8b:db:0a:7d:ae:77:34:f3:92:44:89:83:29:6a:3a:
76:1b:be:00:ee:6e:df:94:9b:0a:ed:74:00:38:d6:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:24:27:D6:02:D2:37:C8:6D:7D:9C:C9:75:03:B2:8B:40:6C:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.94.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:94:2d:91:e7:53:af:3a:7c:48:7e:3d:b1:2e:91:77:fa:f0:
73:67:f8:da:92:29:38:43:00:09:45:5b:81:a0:7e:d5:e4:c1:
3d:f2:a1:d9:d6:8d:4c:bd:a4:4e:5d:49:9c:0f:32:e2:3e:6b:
f8:ab:79:15:a9:6c:de:2f:ce:cb:b8:f4:ec:ec:b7:52:01:f6:
b4:9d:3a:01:f9:8a:fe:ed:a5:74:8b:12:a8:02:e8:6f:d7:3b:
b5:87:13:57:1c:ea:54:13:bf:6c:52:75:b2:f3:7d:d1:13:ac:
fa:0b:ca:fc:ee:ea:67:78:c7:69:bf:ed:b3:35:1b:1e:b6:92:
f5:20:ab:d6:79:74:2d:c1:93:aa:e1:b5:6c:b3:06:02:2d:6c:
fd:6d:a5:79:01:3c:7c:41:07:5a:ae:6d:19:24:ed:48:c2:53:
88:21:23:40:ea:81:9a:3f:76:09:41:f4:c8:58:25:12:03:6d:
72:f2:31:d6:33:00:b5:fa:76:00:ca:10:48:6d:59:eb:84:a9:
28:9c:da:4e:af:15:95:4c:0c:5f:b3:bb:27:ad:83:7e:17:c2:
71:54:37:3d:d3:39:28:aa:42:ad:4a:99:c8:6e:22:22:29:7d:
5b:ec:84:85:43:9d:87:8e:4d:4e:0e:51:fc:9c:cb:47:f1:5b:
a5:3a:b6:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8kqUBxccHiuaHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
YzM2NTBkMjAtYmY5OS00Y2NkLWI2OTEtZDE1MTY0YjEzYzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxCypPTzp3oMX9N8jWVMZDmHs7RDZNwU/ZUD
aZHmzdB7gRf7T33nWKP7l+Oh28EFTqgIX0aO77giLoKMhQib3+9JdOLEfjF4tYuf
2FSm7tu2zgs1gMvWZi5+NFjHjEolItscDBOCLKX7ooLq5xpG4Usjuyf34nuZu1C/
5NrSmQtRgn9Bu3KydaHGjlT29zbFolXz9BxW7YOIZ+NyILPZm2MtRIJcP+3DP+gY
jdoN6HTAD80rfk3uEBZpMr6iZqgs/IYs0+6AnoSpIz19dq2PKFyvePdBDezpH7Zg
iAVKNzOL2wp9rnc085JEiYMpajp2G74A7m7flJsK7XQAONbecwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNDJCfWAtI3yG19nMl1A7KLQGwRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODdjNzA4Y2MtYWFiNi0z
NThlLWE0ZTctNDIyNmE0NzA4YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx14gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyULZHnU686fEh+PbEukXf68HNn+NqSKThDAAlFW4GgftXkwT3yodnW
jUy9pE5dSZwPMuI+a/ireRWpbN4vzsu49Ozst1IB9rSdOgH5iv7tpXSLEqgC6G/X
O7WHE1cc6lQTv2xSdbLzfdETrPoLyvzu6md4x2m/7bM1Gx62kvUgq9Z5dC3Bk6rh
tWyzBgItbP1tpXkBPHxBB1qubRkk7UjCU4ghI0DqgZo/dglB9MhYJRIDbXLyMdYz
ALX6dgDKEEhtWeuEqSic2k6vFZVMDF+zuyetg34XwnFUNz3TOSiqQq1KmchuIiIp
fVvshIVDnYeOTU4OUfycy0fxW6U6tjU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:10 2026 by rpki-client