
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa
File: 86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa (raw, json)
Hash identifier: PDFXj59Rs329XV+o2NqrrHjq5nkS1xl8UmTjufWaWAo=
Subject key identifier: 64:89:2C:5A:F0:9E:9A:A8:68:4A:E6:B5:0E:2F:59:83:84:4C:48:11
Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0
Certificate serial: 010D0C9F4328584D0217AF4DFF13928812A750C0
Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 396423
IP address blocks: 23.132.8.0/24 maxlen: 24
198.62.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:af:4d:ff:13:92:88:12:a7:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=b0949eb1-b9dc-45e7-b464-18dfe8239269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:79:1b:c4:44:19:88:73:80:67:e5:36:20:
a9:70:a3:e3:9d:67:47:24:cb:dd:c3:81:02:72:c0:
6f:2b:79:69:89:d0:bf:b5:87:c6:a9:a1:d4:95:2f:
d4:0d:b8:f8:cf:a9:e8:a2:af:21:c7:fc:f6:7f:ee:
b3:dd:f6:11:69:ef:65:71:a7:ae:28:ec:fa:26:35:
49:57:72:58:7e:8d:29:dc:be:82:2a:77:9f:fa:72:
8e:6d:0f:69:39:83:fd:ff:41:9a:19:46:49:cd:86:
86:27:cf:cc:8c:b4:80:e3:fa:d6:6e:fd:e5:f9:17:
26:50:74:5b:43:25:55:eb:c8:95:27:d3:6a:ab:22:
13:d8:67:1f:74:2d:1c:59:6b:e7:74:6a:38:bb:4f:
6a:53:b7:02:3e:08:b7:05:aa:c4:5e:dd:96:26:bf:
e8:86:02:3e:c9:44:91:aa:d6:12:38:17:ba:79:3f:
66:db:ac:52:8f:24:e7:cb:16:f1:30:fd:85:a2:5b:
b9:0e:94:ab:e3:01:70:4d:53:12:1c:d2:0e:a1:8e:
df:e4:4b:4e:ea:53:2d:13:45:32:66:fc:91:b7:dc:
c8:74:55:bf:b6:c0:6f:24:e5:53:df:03:23:19:0a:
30:55:7d:3f:8b:42:ed:87:73:0b:fd:8f:84:0a:19:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:2C:5A:F0:9E:9A:A8:68:4A:E6:B5:0E:2F:59:83:84:4C:48:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl
X509v3 Authority Key Identifier:
keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.8.0/24
198.62.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:10:74:8f:40:04:25:46:6a:e6:a8:2f:95:e4:75:c3:41:27:
15:fb:8d:c1:56:f9:7f:b0:6c:7e:fa:2c:f0:bb:3a:6f:8f:a4:
fc:e2:af:bc:71:d9:bf:10:21:47:96:06:12:45:d3:40:19:e7:
4a:74:73:2e:c2:a1:c2:de:9c:b0:d8:d9:8d:66:8c:8f:74:bb:
04:1d:ad:1d:4f:75:08:8b:27:75:06:ff:cf:9e:b9:ed:a5:bd:
8e:65:d9:05:38:e1:4e:6f:ce:f2:0c:20:d0:f7:7f:39:d7:0b:
47:c8:ae:93:1a:ad:b0:92:ed:f1:fd:70:0f:c4:f8:ca:56:1d:
3c:e3:c0:a7:cc:98:3b:f3:2b:1e:a6:77:3b:f3:1a:6f:16:7d:
9e:8c:09:94:d6:0e:c1:8a:6e:07:fb:c5:d4:49:7f:62:a6:45:
38:71:77:cb:6c:94:b9:62:8b:79:5e:05:46:b8:5e:fe:9f:7b:
68:3a:96:82:3b:10:eb:a4:23:4a:fc:e3:a4:10:29:60:35:56:
d6:d7:2c:09:61:1e:69:fc:e4:86:73:42:4b:5e:ed:ff:65:6f:
9d:49:c8:cd:05:46:d6:ab:dd:b5:b0:0b:15:56:a3:19:ec:fe:
d6:30:7b:2a:fd:5c:23:7b:ea:38:63:09:29:fc:cf:b9:8a:ac:
f5:49:e8:1b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0CF69N/xOSiBKnUMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0
NmEwMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YjA5NDllYjEtYjlkYy00NWU3LWI0NjQtMThkZmU4MjM5MjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsp5G8REGYhzgGflNiCpcKPjnWdHJMvdw4EC
csBvK3lpidC/tYfGqaHUlS/UDbj4z6nooq8hx/z2f+6z3fYRae9lcaeuKOz6JjVJ
V3JYfo0p3L6CKnef+nKObQ9pOYP9/0GaGUZJzYaGJ8/MjLSA4/rWbv3l+RcmUHRb
QyVV68iVJ9NqqyIT2GcfdC0cWWvndGo4u09qU7cCPgi3BarEXt2WJr/ohgI+yUSR
qtYSOBe6eT9m26xSjyTnyxbxMP2Folu5DpSr4wFwTVMSHNIOoY7f5EtO6lMtE0Uy
ZvyRt9zIdFW/tsBvJOVT3wMjGQowVX0/i0Lth3ML/Y+EChnXGwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGSJLFrwnpqoaErmtQ4vWYOETEgRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3
ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvODZkOWM1NTAtZWU1Ny0z
ZWE1LTg5ZTMtYmNiMDA3ZjY2NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1
YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm
NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi
MDhiZjQ2YTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4QIAwQA
xj6IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABYQdI9ABCVGauaoL5XkdcNBJxX7jcFW+X+wbH76LPC7Om+P
pPzir7xx2b8QIUeWBhJF00AZ50p0cy7CocLenLDY2Y1mjI90uwQdrR1PdQiLJ3UG
/8+eue2lvY5l2QU44U5vzvIMIND3fznXC0fIrpMarbCS7fH9cA/E+MpWHTzjwKfM
mDvzKx6mdzvzGm8WfZ6MCZTWDsGKbgf7xdRJf2KmRThxd8tslLlii3leBUa4Xv6f
e2g6loI7EOukI0r846QQKWA1VtbXLAlhHmn85IZzQkte7f9lb51JyM0FRtar3bWw
CxVWoxns/tYweyr9XCN76jhjCSn8z7mKrPVJ6Bs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:45 2026 by rpki-client