
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
File: 4a64df62-3227-303a-86d3-3a8f9afba845.roa (raw, json)
Hash identifier: qeoPpI/GzmhhWvNoU0Lbk+YPaOho6DMDj42G6zTg6Hw=
Subject key identifier: A7:F9:44:53:A9:F5:93:4F:0D:89:EC:AB:B0:F1:D4:FA:97:87:3E:D8
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584F225D08E3E7827105508F21C0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 20253
IP address blocks: 162.222.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:08:e3:e7:82:71:05:50:8f:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=83fb03f8-3d1d-4a53-81d6-6e24d154f527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:9f:5e:e5:b5:bd:7c:04:ab:ac:cd:ef:de:
d6:5d:42:79:d9:ab:3f:c7:c2:33:66:d2:c4:45:b5:
81:56:42:26:e4:c7:be:77:95:8f:65:6a:42:4e:1c:
d2:e8:a1:f7:24:8b:e5:cc:24:d1:21:29:f9:19:71:
66:ff:fb:3a:ee:dd:7d:20:99:c1:85:76:91:b7:15:
bb:c1:1e:7e:a6:49:a3:b4:bf:4d:8a:8d:b7:3e:f4:
74:0e:d0:00:da:e4:98:7d:a2:49:ab:fb:61:86:8d:
d3:46:7e:24:c7:50:02:6f:03:fd:34:f7:0e:33:ac:
50:0e:3c:3d:e8:1b:2c:eb:42:21:d0:84:ad:76:df:
23:d3:29:ae:e2:9e:66:bf:9b:6f:47:bb:f4:7e:50:
19:12:1c:8a:bb:26:9d:03:43:3d:10:2b:d1:4a:da:
66:bc:93:22:55:9e:9c:00:85:dc:0e:45:95:ce:f1:
60:28:a1:83:dd:98:99:bc:0e:3c:52:dd:14:d1:4b:
d9:a8:f3:57:a4:21:95:aa:72:c6:7a:80:eb:66:99:
76:35:2a:1a:d5:15:b1:04:1e:cc:f8:9c:1e:17:9c:
01:00:52:9a:34:70:d9:fa:a5:1e:8b:e6:b6:47:f9:
f0:96:79:40:b5:2e:3b:44:d5:a7:57:0e:bd:96:14:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F9:44:53:A9:F5:93:4F:0D:89:EC:AB:B0:F1:D4:FA:97:87:3E:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:0b:ec:05:3f:eb:83:95:77:8d:99:5e:4c:5c:44:78:59:cd:
93:d3:22:c2:05:7c:18:a1:31:1a:63:61:f5:ba:67:67:e5:c0:
51:f6:4b:ca:22:63:4e:3d:e2:e9:26:2d:9a:19:ff:79:54:04:
01:dd:94:80:27:ca:f1:61:f5:d0:96:4a:11:07:61:c5:06:bf:
4e:26:1b:fd:7d:22:2b:a5:28:38:c1:4c:ff:99:ce:b5:67:f1:
46:c8:ac:a8:63:83:7b:5b:7f:ca:9d:bd:07:8d:8d:41:54:f3:
6e:49:d0:6a:ac:7b:c9:0e:5e:a7:18:7a:0b:d7:6d:a3:f9:30:
4f:dc:7d:01:d0:af:0c:b2:f6:f4:e9:34:20:81:8f:bc:08:90:
c2:8f:6e:e8:e7:15:92:76:2f:3d:46:3c:c3:2a:52:75:3d:7a:
6f:2b:62:1c:8e:02:f3:45:2c:3a:0d:02:a2:54:06:04:8f:7c:
f2:b4:02:a0:c2:d6:65:06:4e:56:ed:50:19:cd:83:b5:57:47:
bc:00:ff:b6:5b:d9:9c:fe:07:7f:68:04:67:f3:5e:26:7d:1b:
c8:4d:52:12:24:42:3a:b1:e1:1b:7a:b4:dc:46:a5:68:83:20:
45:93:ad:35:b3:d9:fa:da:f9:e7:62:a0:e0:1c:76:28:10:4d:
e9:53:11:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQjj54JxBVCPIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
ODNmYjAzZjgtM2QxZC00YTUzLTgxZDYtNmUyNGQxNTRmNTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnifXuW1vXwEq6zN797WXUJ52as/x8IzZtLE
RbWBVkIm5Me+d5WPZWpCThzS6KH3JIvlzCTRISn5GXFm//s67t19IJnBhXaRtxW7
wR5+pkmjtL9Nio23PvR0DtAA2uSYfaJJq/thho3TRn4kx1ACbwP9NPcOM6xQDjw9
6Bss60Ih0IStdt8j0ymu4p5mv5tvR7v0flAZEhyKuyadA0M9ECvRStpmvJMiVZ6c
AIXcDkWVzvFgKKGD3ZiZvA48Ut0U0UvZqPNXpCGVqnLGeoDrZpl2NSoa1RWxBB7M
+JweF5wBAFKaNHDZ+qUei+a2R/nwlnlAtS47RNWnVw69lhQCiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKf5RFOp9ZNPDYnsq7Dx1PqXhz7YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNGE2NGRmNjItMzIyNy0z
MDNhLTg2ZDMtM2E4ZjlhZmJhODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4L7AU/64OVd42ZXkxcRHhZzZPTIsIFfBihMRpjYfW6Z2flwFH2S8oi
Y0494ukmLZoZ/3lUBAHdlIAnyvFh9dCWShEHYcUGv04mG/19IiulKDjBTP+ZzrVn
8UbIrKhjg3tbf8qdvQeNjUFU825J0Gqse8kOXqcYegvXbaP5ME/cfQHQrwyy9vTp
NCCBj7wIkMKPbujnFZJ2Lz1GPMMqUnU9em8rYhyOAvNFLDoNAqJUBgSPfPK0AqDC
1mUGTlbtUBnNg7VXR7wA/7Zb2Zz+B39oBGfzXiZ9G8hNUhIkQjqx4Rt6tNxGpWiD
IEWTrTWz2fra+edioOAcdigQTelTEUs=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:19:08 2026 by rpki-client