
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa
File: e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa (raw, json)
Hash identifier: OPFZqJbm8/KGJ6CdZnLsgjjvHiBgDWLc3z4gwKwUMDU=
Subject key identifier: EB:A3:0B:02:0C:28:0D:E7:85:BF:01:D5:0A:61:83:C1:5C:B3:3C:E2
Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial: 010D0C9F4328584EA79D58CB4A48446888FBEE20
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11870
IP address blocks: 167.23.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:58:cb:4a:48:44:68:88:fb:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d627fd92-7e15-4850-8ac9-05145653b19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:bd:04:d9:94:34:ba:07:0b:b6:03:32:c6:
ce:61:5a:83:86:8b:bb:71:0f:80:86:87:55:e1:e8:
68:b9:61:69:a1:27:41:1b:f4:36:f6:6a:ba:de:ba:
30:62:90:01:43:4b:6c:4a:3b:6a:5e:e3:9c:c2:75:
89:b7:25:66:cb:67:53:37:26:67:49:0d:af:f6:9c:
8f:08:1d:33:86:c5:fd:94:d4:94:ec:01:1f:a6:9f:
ff:b5:42:ec:a4:c5:47:48:66:d8:1c:75:8e:49:eb:
1f:ee:3c:f6:a1:38:fb:87:64:09:93:fc:be:a3:09:
44:00:41:f9:72:c9:4f:e1:e9:2e:42:bf:82:c3:d6:
ff:68:23:e7:b9:26:19:1e:23:47:7c:6f:aa:18:ee:
ca:45:4f:81:e2:83:33:9c:f1:51:e9:08:7b:04:56:
bc:d3:54:99:0a:81:b7:c4:5c:eb:b8:92:56:fa:14:
11:96:a2:77:74:29:0c:27:70:f5:7a:3f:f3:88:bc:
a7:ad:d8:2b:43:76:83:eb:58:70:6a:81:d0:f6:fa:
89:e7:f2:1e:f1:77:a0:bf:52:ae:61:2c:02:a4:a3:
b9:af:29:bf:09:91:ad:95:99:0a:b8:71:5e:79:81:
3e:20:4d:03:12:0f:1f:fe:b1:e2:48:e3:69:32:dc:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:0B:02:0C:28:0D:E7:85:BF:01:D5:0A:61:83:C1:5C:B3:3C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
X509v3 Authority Key Identifier:
keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.23.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:35:1f:cb:1c:b4:14:ca:ea:66:5b:9e:d4:4b:df:2e:e8:0a:
76:5d:cd:04:2a:4f:a5:b3:94:c4:87:f1:66:8f:5a:26:d4:26:
74:cf:2d:58:1f:32:3c:76:8d:58:1d:d8:3f:76:6f:17:59:68:
e8:54:21:7f:93:b7:a7:6e:d4:a7:af:bc:eb:b1:fb:9b:ba:14:
27:c7:17:8c:38:47:bc:a2:4c:99:e1:f7:30:6e:ee:49:ea:0f:
8e:9b:3c:de:31:49:e0:4e:37:79:3e:21:78:7c:c1:1d:f0:3c:
6c:26:ad:04:69:4a:3b:11:c9:cb:47:33:86:34:54:01:e2:0c:
4c:17:9d:de:6d:52:0c:a2:61:0f:97:aa:23:5e:ff:05:58:d4:
47:84:eb:3d:4d:d9:22:d4:4d:c7:3c:90:82:35:75:56:e2:ca:
e0:73:a1:a7:eb:0d:92:65:be:6e:2e:74:48:75:24:50:b0:9c:
b3:e9:b2:2e:33:d0:9a:7a:f1:4f:c8:49:19:dd:95:5d:69:e7:
34:8a:74:a8:5c:1e:cc:3c:28:7a:22:53:4d:49:89:5c:3a:cd:
a0:6e:1a:d0:56:da:ea:48:e7:15:a3:68:ef:30:a6:9d:63:35:
ac:fc:26:21:4e:41:aa:2f:24:04:4a:f5:4a:44:28:11:b5:9a:
93:2e:48:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnVjLSkhEaIj77iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm
OGM0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDYyN2ZkOTItN2UxNS00ODUwLThhYzktMDUxNDU2NTNiMTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymG9BNmUNLoHC7YDMsbOYVqDhou7cQ+AhodV
4ehouWFpoSdBG/Q29mq63rowYpABQ0tsSjtqXuOcwnWJtyVmy2dTNyZnSQ2v9pyP
CB0zhsX9lNSU7AEfpp//tULspMVHSGbYHHWOSesf7jz2oTj7h2QJk/y+owlEAEH5
cslP4ekuQr+Cw9b/aCPnuSYZHiNHfG+qGO7KRU+B4oMznPFR6Qh7BFa801SZCoG3
xFzruJJW+hQRlqJ3dCkMJ3D1ej/ziLynrdgrQ3aD61hwaoHQ9vqJ5/Ie8Xegv1Ku
YSwCpKO5rym/CZGtlZkKuHFeeYE+IE0DEg8f/rHiSONpMtwasQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOujCwIMKA3nhb8B1Qphg8FcszziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1
OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvZTI5YjZjOTItZGI3Yy0z
NjM4LTk0ZWQtYzFmMmE2YWQxNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5
NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz
ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw
YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpxdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJU1H8sctBTK6mZbntRL3y7oCnZdzQQqT6WzlMSH8WaPWibUJnTPLVgf
Mjx2jVgd2D92bxdZaOhUIX+Tt6du1KevvOux+5u6FCfHF4w4R7yiTJnh9zBu7knq
D46bPN4xSeBON3k+IXh8wR3wPGwmrQRpSjsRyctHM4Y0VAHiDEwXnd5tUgyiYQ+X
qiNe/wVY1EeE6z1N2SLUTcc8kII1dVbiyuBzoafrDZJlvm4udEh1JFCwnLPpsi4z
0Jp68U/ISRndlV1p5zSKdKhcHsw8KHoiU01JiVw6zaBuGtBW2upI5xWjaO8wpp1j
Naz8JiFOQaovJARK9UpEKBG1mpMuSCc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:29 2026 by rpki-client