
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
File: 85beb1b8-b364-349e-8940-19989e438bc7.roa (raw, json)
Hash identifier: dPCA/8tKJuePvBlJQ8D7LJr9ya/hlMLinJIE+EZItiY=
Subject key identifier: EC:C0:56:30:5C:68:CD:7E:2C:0F:48:B6:54:83:80:13:CB:51:F2:62
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F2ABD23E3D7A0BCD643B7BD80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 9009
IP address blocks: 172.94.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:23:e3:d7:a0:bc:d6:43:b7:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=08ad73de-45bc-4450-938d-db46c47fea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:94:77:d2:1a:e5:45:2d:21:16:eb:53:76:
a4:3b:e9:c7:d4:54:8a:73:d8:29:47:c4:54:23:25:
75:0e:b3:10:5a:1b:7f:07:bd:1f:27:1a:52:f3:d4:
60:2d:20:40:5f:e3:35:eb:39:9d:48:da:c5:48:c6:
d7:bb:99:8f:92:ef:8c:19:d5:2e:69:89:c5:34:fe:
66:97:85:13:63:3d:39:fc:32:eb:80:76:e6:f2:f1:
b9:55:2a:77:09:be:bd:88:ed:4e:6e:64:7c:17:e2:
5c:de:01:62:6e:a5:24:f9:16:4b:96:cd:bf:03:01:
10:93:59:f1:74:0f:3c:03:96:7b:c4:71:4e:76:aa:
a8:92:c1:e1:40:8c:a0:f8:cb:9e:69:dd:25:44:da:
02:cb:98:10:72:6e:cc:32:26:ad:4a:b2:9d:6e:22:
f7:17:db:5e:a6:68:d7:a8:e8:6b:0a:74:94:84:79:
d7:b6:d9:34:50:61:79:86:1b:ae:fc:ba:ba:55:ef:
82:20:df:b0:70:2c:10:96:0a:c3:42:7f:79:62:a1:
e8:3b:cf:21:cb:c4:cf:c9:51:90:bc:74:0b:93:61:
c7:f9:87:b2:b6:5f:3b:5a:d2:75:72:8b:03:21:ba:
ec:99:ff:64:60:a7:8c:65:50:37:8a:01:fd:de:66:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:56:30:5C:68:CD:7E:2C:0F:48:B6:54:83:80:13:CB:51:F2:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:15:0e:ee:3e:eb:01:7a:f9:ff:5d:f4:b0:ad:37:d2:72:90:
29:1b:f1:46:ae:60:e8:8f:cf:58:db:82:01:56:60:5f:d2:23:
4a:52:25:03:ff:2d:5d:7f:52:0b:7a:9c:ac:c9:36:79:ac:b7:
bf:21:d5:10:83:64:fd:dc:f5:c8:27:b9:42:0a:43:85:bc:c2:
cb:66:e2:b9:2f:8b:00:61:1d:bb:ef:ab:47:a5:7d:00:e4:54:
d0:66:78:38:fb:cb:f3:32:58:69:de:5e:cc:74:4f:14:58:83:
b3:e5:08:f5:fe:7a:bf:ca:12:d3:13:18:61:0c:ab:7a:ac:b4:
df:4b:26:da:0c:f4:8c:1f:59:75:b1:62:3c:9f:e8:f9:14:7e:
42:89:d2:45:c8:b5:c3:bf:c7:85:47:6e:8a:d9:cc:af:ff:8f:
3b:f1:0a:fe:aa:1b:aa:9b:bb:0a:f9:a9:4b:65:91:98:c8:56:
83:f7:41:bc:94:5f:5e:37:ea:59:88:06:5a:3e:1b:99:0b:13:
2f:bf:e6:47:2c:7c:9b:4a:8d:f5:55:49:61:e6:41:f1:6f:0f:
68:3f:3d:f6:c2:e5:f3:9f:54:b8:79:8f:99:b8:f1:78:f7:28:
13:52:0a:67:8c:5c:68:b8:39:bf:b9:36:f9:29:d9:0d:7c:4f:
8f:18:d9:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSPj16C81kO3vYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
MDhhZDczZGUtNDViYy00NDUwLTkzOGQtZGI0NmM0N2ZlYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPSUd9Ia5UUtIRbrU3akO+nH1FSKc9gpR8RU
IyV1DrMQWht/B70fJxpS89RgLSBAX+M16zmdSNrFSMbXu5mPku+MGdUuaYnFNP5m
l4UTYz05/DLrgHbm8vG5VSp3Cb69iO1ObmR8F+Jc3gFibqUk+RZLls2/AwEQk1nx
dA88A5Z7xHFOdqqoksHhQIyg+Muead0lRNoCy5gQcm7MMiatSrKdbiL3F9tepmjX
qOhrCnSUhHnXttk0UGF5hhuu/Lq6Ve+CIN+wcCwQlgrDQn95YqHoO88hy8TPyVGQ
vHQLk2HH+Yeytl87WtJ1cosDIbrsmf9kYKeMZVA3igH93mbT+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzAVjBcaM1+LA9ItlSDgBPLUfJiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODViZWIxYjgtYjM2NC0z
NDllLTg5NDAtMTk5ODllNDM4YmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkVDu4+6wF6+f9d9LCtN9JykCkb8UauYOiPz1jbggFWYF/SI0pSJQP/
LV1/Ugt6nKzJNnmst78h1RCDZP3c9cgnuUIKQ4W8wstm4rkviwBhHbvvq0elfQDk
VNBmeDj7y/MyWGneXsx0TxRYg7PlCPX+er/KEtMTGGEMq3qstN9LJtoM9IwfWXWx
Yjyf6PkUfkKJ0kXItcO/x4VHborZzK//jzvxCv6qG6qbuwr5qUtlkZjIVoP3QbyU
X1436lmIBlo+G5kLEy+/5kcsfJtKjfVVSWHmQfFvD2g/PfbC5fOfVLh5j5m48Xj3
KBNSCmeMXGi4Ob+5Nvkp2Q18T48Y2Yo=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:19:15 2026 by rpki-client