
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8bacac-9b4d-3bb2-9f3c-2984d5d9aab0.roa
File: aa8bacac-9b4d-3bb2-9f3c-2984d5d9aab0.roa (raw, json)
Hash identifier: 9dCOItncLm9xGgJ6dr5StA6zXqKCHeCGbxfMDycU3I8=
Subject key identifier: B1:D8:D4:6D:F2:40:FD:B9:77:8B:C3:54:AB:77:6E:DF:31:47:80:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78E35A9B23A6ACC611755C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8bacac-9b4d-3bb2-9f3c-2984d5d9aab0.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33287
IP address blocks: 107.0.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8e:35:a9:b2:3a:6a:cc:61:17:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=2c43899b-d2b2-4510-ba58-a144d50e246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:a2:7d:c1:f5:8a:c8:b2:96:c0:1b:b2:de:
81:f5:de:ab:d8:45:a7:f9:fd:ba:c5:5f:b1:ba:92:
87:8d:24:68:5b:29:71:85:1a:b0:6e:dd:9a:21:6f:
27:d5:a6:e5:22:37:94:f6:b2:fd:a8:01:34:80:59:
d2:31:ce:20:87:c5:b0:a8:0d:a2:df:2d:ea:e3:54:
ad:79:61:c3:d6:21:aa:94:58:e1:65:06:07:0a:28:
66:cb:06:23:17:1c:1d:bf:75:b7:ec:39:94:9a:66:
2e:b9:07:4c:53:b9:fd:8a:55:d6:01:01:b7:69:57:
26:77:3b:26:c9:28:05:bd:61:e8:f0:56:17:63:41:
e9:92:d5:8b:2b:01:3a:57:88:74:21:ae:e3:f6:e1:
d8:6f:c7:b9:04:89:2d:65:fd:15:d3:1e:80:4d:90:
a3:f4:4f:08:00:cd:c1:af:86:0a:4c:90:83:c0:cd:
49:fc:fc:b0:61:2e:33:31:17:29:a4:84:c0:e0:41:
50:46:0e:f2:65:d6:0c:89:f6:f5:cb:0c:74:97:36:
e2:08:97:0a:3c:8c:fd:66:14:a1:c6:5e:c4:91:0f:
27:37:79:44:9b:73:19:56:60:50:82:20:83:c9:ae:
c3:05:04:dd:d3:65:a1:84:c9:38:c1:3e:a3:81:1e:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:D4:6D:F2:40:FD:B9:77:8B:C3:54:AB:77:6E:DF:31:47:80:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8bacac-9b4d-3bb2-9f3c-2984d5d9aab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.0.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:1b:51:4c:e3:c0:de:bb:78:90:3a:0b:bb:d0:92:e6:7a:89:
7b:72:48:78:34:c7:9b:7b:78:7a:8e:cb:1f:f7:ff:73:d6:95:
7c:bf:af:52:dd:1b:a3:93:e7:28:b7:50:df:d3:f1:8c:61:21:
1a:0f:f6:10:d4:ad:a2:cb:61:9e:5a:45:36:a9:c9:e3:fc:36:
e7:70:30:79:9b:0f:08:95:ff:33:b6:b6:9a:04:3d:f2:85:46:
fb:f8:48:72:05:ab:96:09:37:fc:0c:2d:6e:8c:7a:d1:14:4c:
de:f8:ba:7d:6c:b3:4e:f4:06:ff:3b:04:bd:f1:2c:a0:44:56:
39:93:12:5c:46:3a:a3:3e:24:83:68:76:86:38:71:e4:28:95:
0e:8e:58:a5:26:cc:7f:89:7a:6c:22:41:19:03:7a:38:2c:39:
82:11:08:ca:37:e9:1d:49:8f:a7:37:cf:65:14:69:bf:a2:fb:
7a:12:e4:99:27:71:1a:34:d5:6f:7f:a0:ce:eb:a1:88:19:cf:
62:0a:bd:f6:3d:2c:ca:0a:02:50:fb:01:18:8b:3d:54:28:8e:
33:7a:eb:eb:cc:6b:b6:b3:89:82:65:cb:f5:89:88:d5:3c:f7:
24:4b:52:28:1b:b6:b9:98:67:8d:8a:cc:17:e7:06:07:c7:27:
2b:09:3a:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njjWpsjpqzGEXVcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmM0Mzg5OWItZDJiMi00NTEwLWJhNTgtYTE0NGQ1MGUyNDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/eifcH1isiylsAbst6B9d6r2EWn+f26xV+x
upKHjSRoWylxhRqwbt2aIW8n1ablIjeU9rL9qAE0gFnSMc4gh8WwqA2i3y3q41St
eWHD1iGqlFjhZQYHCihmywYjFxwdv3W37DmUmmYuuQdMU7n9ilXWAQG3aVcmdzsm
ySgFvWHo8FYXY0HpktWLKwE6V4h0Ia7j9uHYb8e5BIktZf0V0x6ATZCj9E8IAM3B
r4YKTJCDwM1J/PywYS4zMRcppITA4EFQRg7yZdYMifb1ywx0lzbiCJcKPIz9ZhSh
xl7EkQ8nN3lEm3MZVmBQgiCDya7DBQTd02WhhMk4wT6jgR6GSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHY1G3yQP25d4vDVKt3bt8xR4CiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE4YmFjYWMtOWI0ZC0z
YmIyLTlmM2MtMjk4NGQ1ZDlhYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawCuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8bUUzjwN67eJA6C7vQkuZ6iXtySHg0x5t7eHqOyx/3/3PWlXy/r1Ld
G6OT5yi3UN/T8YxhIRoP9hDUraLLYZ5aRTapyeP8NudwMHmbDwiV/zO2tpoEPfKF
Rvv4SHIFq5YJN/wMLW6MetEUTN74un1ss070Bv87BL3xLKBEVjmTElxGOqM+JINo
doY4ceQolQ6OWKUmzH+JemwiQRkDejgsOYIRCMo36R1Jj6c3z2UUab+i+3oS5Jkn
cRo01W9/oM7roYgZz2IKvfY9LMoKAlD7ARiLPVQojjN66+vMa7aziYJly/WJiNU8
9yRLUigbtrmYZ42KzBfnBgfHJysJOo4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:25:13 2026 by rpki-client