
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa
File: afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa (raw, json)
Hash identifier: EJfltPh71k6EzHddbnTXBU9YXEE3DUtW6WgITBMzx5E=
Subject key identifier: 0F:26:AF:14:0F:F7:EB:B4:C2:10:09:A1:2A:EA:F8:41:AE:67:A6:51
Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial: 010D0C9F4328584F6C581B82297A72F07E2382C0
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa
Signing time: Wed 07 Oct 2026 13:00:13 +0000
ROA not before: Wed 07 Oct 2026 13:00:13 +0000
ROA not after: Tue 05 Jan 2027 14:00:13 +0000
asID: 16509
IP address blocks: 23.154.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:58:1b:82:29:7a:72:f0:7e:23:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
Validity
Not Before: Oct 7 13:00:13 2026 GMT
Not After : Jan 5 14:00:13 2027 GMT
Subject: CN=636479a3-40b0-498a-a989-b14cab9e35f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:35:a8:8a:51:81:d3:03:a3:7f:bc:4a:ed:
3b:40:97:50:6f:8f:e8:91:09:35:4f:56:9f:2a:65:
fd:4f:95:94:a5:1f:59:76:cd:c1:f8:39:64:30:da:
8b:b2:30:f6:a0:bc:32:b4:08:c6:2a:dd:b1:e8:c1:
3e:35:99:22:71:c8:a3:4c:ce:94:33:9d:f8:0e:82:
ac:90:b8:1f:e5:b7:97:c8:34:74:3b:3f:ba:1e:2b:
a3:b2:7e:63:f7:14:61:4c:fa:3b:58:ba:96:60:7d:
03:79:ef:b1:ef:ef:64:85:5e:7b:b5:f3:3c:bc:f2:
79:d7:0e:e3:b8:b9:6a:66:a7:f6:fd:bb:6f:c1:48:
a2:6e:92:57:5c:a4:f8:3b:73:31:77:e6:2f:68:85:
6f:e7:7e:c4:3e:7f:70:29:8e:2c:13:f2:74:8f:07:
f9:81:3f:1d:2b:7f:00:8e:c6:e6:91:93:2f:e2:c0:
0d:21:26:20:09:e0:1e:fa:54:01:58:e9:96:35:f6:
88:ac:7a:e9:a7:f6:96:b9:87:6a:f8:1f:fc:bc:c1:
99:21:9a:86:a1:38:44:22:c9:0d:0f:c7:a7:b6:83:
89:cc:cf:8e:ea:fa:b7:8e:7d:e2:a2:32:d1:19:56:
56:e6:d6:a2:d2:09:95:26:f0:7e:f4:4a:5c:da:e7:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:AF:14:0F:F7:EB:B4:C2:10:09:A1:2A:EA:F8:41:AE:67:A6:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
X509v3 Authority Key Identifier:
keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:9a:db:e6:0e:6f:77:99:a7:4a:ee:e5:33:ea:14:02:e7:46:
8b:2e:44:7f:9a:22:35:31:d2:26:80:11:cc:4d:97:e1:ad:4d:
a4:af:de:f9:a7:5b:22:ab:2a:18:98:d6:99:cf:89:d3:a5:5a:
c4:e3:fb:ea:92:dc:d5:8e:06:c2:9b:92:78:25:61:42:45:e2:
7e:18:2d:00:0b:b1:c6:3c:b2:8f:24:2f:43:c7:e6:96:cf:b2:
ae:2a:06:9b:a2:89:7e:e4:b4:ba:78:68:b1:f3:09:89:7b:5b:
b6:73:02:89:22:27:2f:41:6f:3e:ed:09:54:e8:c8:db:26:41:
b9:68:e6:ce:d0:b2:12:20:67:46:02:71:39:3d:e1:83:67:eb:
b3:c2:c5:d1:b1:f9:5e:88:52:72:51:ef:3d:29:c8:ff:a5:53:
d7:20:65:38:61:6a:f5:0b:f7:91:fa:a1:93:34:dd:c9:e3:89:
cc:80:b6:e0:61:72:fc:e4:b9:20:b9:91:e7:4b:b3:bc:cc:da:
97:a3:8a:27:a4:7f:36:0e:3a:88:cb:39:49:da:d6:41:38:86:
e7:54:16:f7:05:66:72:af:30:b6:ef:b2:67:dd:a8:be:01:30:
68:6a:a0:84:8a:76:40:df:11:10:b4:9f:bb:85:97:55:a1:3a:
05:54:eb:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWBuCKXpy8H4jgsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
NjM2NDc5YTMtNDBiMC00OThhLWE5ODktYjE0Y2FiOWUzNWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjw1qIpRgdMDo3+8Su07QJdQb4/okQk1T1af
KmX9T5WUpR9Zds3B+DlkMNqLsjD2oLwytAjGKt2x6ME+NZkiccijTM6UM534DoKs
kLgf5beXyDR0Oz+6Hiujsn5j9xRhTPo7WLqWYH0Dee+x7+9khV57tfM8vPJ51w7j
uLlqZqf2/btvwUiibpJXXKT4O3Mxd+YvaIVv537EPn9wKY4sE/J0jwf5gT8dK38A
jsbmkZMv4sANISYgCeAe+lQBWOmWNfaIrHrpp/aWuYdq+B/8vMGZIZqGoThEIskN
D8entoOJzM+O6vq3jn3iojLRGVZW5tai0gmVJvB+9Epc2uc4dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8mrxQP9+u0whAJoSrq+EGuZ6ZRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvYWZlZDU5ZDgtYzlkMS0z
ZmJiLTgzNTAtOTljYTJmYWVhZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaa2+YOb3eZp0ru5TPqFALnRosuRH+aIjUx0iaAEcxNl+GtTaSv3vmn
WyKrKhiY1pnPidOlWsTj++qS3NWOBsKbknglYUJF4n4YLQALscY8so8kL0PH5pbP
sq4qBpuiiX7ktLp4aLHzCYl7W7ZzAokiJy9Bbz7tCVToyNsmQblo5s7QshIgZ0YC
cTk94YNn67PCxdGx+V6IUnJR7z0pyP+lU9cgZThhavUL95H6oZM03cnjicyAtuBh
cvzkuSC5kedLs7zM2pejiiekfzYOOojLOUna1kE4hudUFvcFZnKvMLbvsmfdqL4B
MGhqoISKdkDfERC0n7uFl1WhOgVU6/Q=
-----END CERTIFICATE-----
Generated at Mon Oct 12 09:52:47 2026 by rpki-client