
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
File: 4646c58c-7f13-3a17-940a-37378358232c.roa (raw, json)
Hash identifier: Jav/+Eb0xogX+1+Nj3MfuLuE4nyoEaSg5wsg/hAKA7k=
Subject key identifier: 12:EE:A0:CD:0F:B0:EB:76:0A:97:FE:5A:88:42:FC:21:A9:8E:EC:B8
Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial: 010D0C9F4328584EA01551EC2D5BE15B9D453870
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 10506
IP address blocks: 168.99.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:51:ec:2d:5b:e1:5b:9d:45:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=080bfaee-2f6b-4986-bc5c-c2d525828c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:ca:c2:dd:91:24:32:e8:7a:2e:68:24:ca:
13:48:3b:1c:ef:87:50:d1:25:38:fc:b5:e8:1a:81:
83:2e:f7:a0:60:66:37:e7:81:fb:95:c4:2f:c9:6a:
b5:27:31:1e:39:fa:77:94:77:7b:46:28:a8:93:ac:
27:d4:cc:0f:d0:c4:d0:e2:45:94:6f:88:9e:52:9f:
47:e6:7b:a4:d0:06:1f:fe:92:86:05:98:03:a8:96:
2c:8f:79:06:3d:6d:d6:22:4e:29:19:dd:06:5f:a5:
19:4d:9b:2c:52:89:4b:af:a3:d2:bc:88:c2:61:6e:
e7:4e:c9:9d:db:fd:a5:ad:54:3c:79:2e:f1:f1:f0:
c9:cd:0d:c1:45:07:ee:cc:75:1e:a2:2e:1b:10:39:
0e:8b:a3:2c:e8:1e:dc:c3:1b:ca:5f:f0:89:10:46:
8e:ca:4e:e6:68:53:d6:c8:b6:54:3f:1b:36:56:1d:
62:5d:0b:ae:4f:0e:97:d4:d4:85:a1:86:bd:9e:0a:
77:75:17:1f:89:16:62:61:80:41:c6:4d:79:41:54:
2d:31:a9:b3:43:6c:5c:fb:f6:f8:77:6a:b8:96:6a:
25:ea:8c:1a:86:13:04:3e:d9:4c:d7:97:c7:b5:ca:
ff:d9:eb:47:88:87:aa:81:0b:3b:df:2f:d8:90:10:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:A0:CD:0F:B0:EB:76:0A:97:FE:5A:88:42:FC:21:A9:8E:EC:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
sbgp-ipAddrBlock: critical
IPv4:
168.99.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:23:78:0a:fd:ae:ca:05:47:96:35:0b:e6:b1:41:25:db:6c:
60:dd:63:82:1c:0e:b9:81:6c:32:77:26:16:4b:6b:74:0b:e0:
b2:bb:68:a3:25:c9:10:ad:23:de:a8:eb:ae:41:c2:ab:b5:5b:
b1:5f:e7:6d:13:a1:34:a4:d2:63:c3:6c:23:8a:cc:fb:bf:eb:
58:44:ef:9e:b7:61:e9:ec:1f:7e:8d:d5:61:4b:24:55:77:dc:
f0:1e:75:59:4e:47:2b:77:6e:bd:7c:7d:51:a0:c8:0e:be:76:
28:12:af:38:21:f4:c8:b6:2c:f1:a3:27:d6:46:2a:6b:6d:bc:
1b:fe:5b:38:7d:88:8c:89:07:82:54:9b:c5:97:48:a6:52:80:
93:38:ca:62:e5:e2:40:a2:eb:6b:52:02:61:c9:f6:74:43:12:
75:90:bb:64:f0:b1:b2:ce:58:a0:1d:b2:68:40:19:5e:f8:79:
87:e8:fa:2f:2c:a0:2a:60:de:dd:15:4b:1f:cb:02:7d:df:81:
45:90:cf:31:da:fe:b9:c7:57:94:fc:56:7c:ae:7d:33:90:f9:
19:00:07:6e:83:8b:39:b6:43:41:aa:8f:0c:87:83:00:f0:44:
2d:64:c0:93:a4:3d:4c:8a:71:95:83:30:25:f6:85:b1:98:66:
c2:1e:59:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFVHsLVvhW51FOHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
MDgwYmZhZWUtMmY2Yi00OTg2LWJjNWMtYzJkNTI1ODI4YzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu3Kwt2RJDLoei5oJMoTSDsc74dQ0SU4/LXo
GoGDLvegYGY354H7lcQvyWq1JzEeOfp3lHd7Riiok6wn1MwP0MTQ4kWUb4ieUp9H
5nuk0AYf/pKGBZgDqJYsj3kGPW3WIk4pGd0GX6UZTZssUolLr6PSvIjCYW7nTsmd
2/2lrVQ8eS7x8fDJzQ3BRQfuzHUeoi4bEDkOi6Ms6B7cwxvKX/CJEEaOyk7maFPW
yLZUPxs2Vh1iXQuuTw6X1NSFoYa9ngp3dRcfiRZiYYBBxk15QVQtMamzQ2xc+/b4
d2q4lmol6owahhMEPtlM15fHtcr/2etHiIeqgQs73y/YkBDq2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLuoM0PsOt2Cpf+WohC/CGpjuy4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvNDY0NmM1OGMtN2YxMy0z
YTE3LTk0MGEtMzczNzgzNTgyMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqGMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0jeAr9rsoFR5Y1C+axQSXbbGDdY4IcDrmBbDJ3JhZLa3QL4LK7aKMl
yRCtI96o665Bwqu1W7Ff520ToTSk0mPDbCOKzPu/61hE7563YensH36N1WFLJFV3
3PAedVlORyt3br18fVGgyA6+digSrzgh9Mi2LPGjJ9ZGKmttvBv+Wzh9iIyJB4JU
m8WXSKZSgJM4ymLl4kCi62tSAmHJ9nRDEnWQu2TwsbLOWKAdsmhAGV74eYfo+i8s
oCpg3t0VSx/LAn3fgUWQzzHa/rnHV5T8VnyufTOQ+RkAB26Dizm2Q0GqjwyHgwDw
RC1kwJOkPUyKcZWDMCX2hbGYZsIeWdI=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:02 2026 by rpki-client