
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa
File: c3caef46-c1ac-38a7-aaec-de2a302e391c.roa (raw, json)
Hash identifier: 7rPOishm1xIFl91IdJKvfBBt9TtNWvcpK/xLLfLKNcw=
Subject key identifier: F2:51:BB:0E:C9:B5:8B:77:47:B9:13:0F:27:A8:B8:94:E0:00:32:17
Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae
Certificate serial: 010D0C9F4328584F4976B57ADE39B987F45B8400
Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 192.131.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:b5:7a:de:39:b9:87:f4:5b:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=35a81fd3-df04-4b75-8076-223f056b9437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:12:77:ef:f5:46:04:64:40:9e:d9:96:a5:
2c:8e:a3:39:b7:89:49:11:9a:7c:e5:12:78:2a:96:
e3:27:d8:21:76:aa:62:72:fe:63:90:87:95:f0:c7:
d4:10:3d:a1:a3:94:62:1f:5e:be:60:bc:43:54:f7:
b9:bd:f1:00:94:48:99:9a:71:79:94:ba:0f:98:ac:
4e:71:78:15:7c:56:cf:f5:02:8c:e6:76:95:f0:4d:
9e:bc:5f:b5:c6:79:34:df:2b:31:95:15:2b:e3:d6:
a2:54:c7:52:6e:9f:99:94:fb:3f:ce:07:77:07:da:
02:ed:17:50:dd:3b:83:9e:84:1b:2f:96:be:f3:99:
c1:d7:28:64:db:a0:3c:83:33:61:7e:de:45:51:e3:
95:d3:00:12:a7:1b:55:d9:b3:4f:c9:03:aa:4c:35:
59:f8:1e:61:66:f7:04:c0:3d:8f:04:02:9a:c0:5e:
af:77:12:3e:43:e0:a9:50:f1:7d:83:6c:ff:60:af:
b9:99:f2:ee:ad:22:1c:cf:fc:7f:e1:7d:fa:e7:c7:
a3:a3:1d:8c:f6:1b:bf:5b:6f:ab:0f:36:6d:8e:c4:
9c:84:34:9e:39:87:db:2d:e6:27:fa:c5:97:31:68:
0c:f6:ec:43:12:57:d5:9d:c0:6d:db:dc:be:79:c0:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:51:BB:0E:C9:B5:8B:77:47:B9:13:0F:27:A8:B8:94:E0:00:32:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
X509v3 Authority Key Identifier:
keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
sbgp-ipAddrBlock: critical
IPv4:
192.131.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:e3:e4:e3:73:d6:a0:25:c7:0b:d8:e5:cb:02:7f:c9:2d:71:
93:a5:a5:9b:c3:6d:fb:8f:56:35:66:2a:59:d8:c8:67:66:be:
d3:44:75:60:4e:22:91:0e:d6:b5:f8:c7:61:6d:53:9e:30:ac:
a0:73:b0:32:52:cb:23:07:66:24:b0:8a:18:b3:ee:ba:e5:d0:
89:69:6d:13:8a:a7:8d:9b:5e:9e:4c:c0:96:79:39:e0:34:df:
f2:93:6b:d4:8e:69:f1:9b:b5:06:12:84:64:97:d2:c6:70:70:
77:04:b7:99:5d:f4:5f:e2:03:11:5f:c3:94:d9:64:bd:57:ac:
85:57:f7:e8:bc:2c:b1:fc:d0:ea:24:a6:4d:bb:29:a3:f5:5c:
6a:d2:b6:c0:e8:e6:3e:fc:df:90:53:0a:b3:73:f2:60:bc:0e:
c8:05:c6:68:74:3f:89:6f:ef:ed:c4:38:0b:8d:15:0b:90:d6:
c8:78:ce:41:41:01:01:9a:a8:3f:9a:ec:4b:67:c2:32:27:22:
1b:ed:e7:fa:fc:7c:17:d0:5f:d7:3f:2a:8d:a4:a5:21:06:20:
3d:67:f8:21:b3:9d:7a:4d:2f:40:e7:dd:c7:09:36:8a:cb:66:
5c:50:cb:07:53:57:62:dc:37:bc:54:31:0d:55:18:32:12:df:
f6:da:cf:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdrV63jm5h/RbhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz
ZGFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzVhODFmZDMtZGYwNC00Yjc1LTgwNzYtMjIzZjA1NmI5NDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmosSd+/1RgRkQJ7ZlqUsjqM5t4lJEZp85RJ4
KpbjJ9ghdqpicv5jkIeV8MfUED2ho5RiH16+YLxDVPe5vfEAlEiZmnF5lLoPmKxO
cXgVfFbP9QKM5naV8E2evF+1xnk03ysxlRUr49aiVMdSbp+ZlPs/zgd3B9oC7RdQ
3TuDnoQbL5a+85nB1yhk26A8gzNhft5FUeOV0wASpxtV2bNPyQOqTDVZ+B5hZvcE
wD2PBAKawF6vdxI+Q+CpUPF9g2z/YK+5mfLurSIcz/x/4X3658ejox2M9hu/W2+r
DzZtjsSchDSeOYfbLeYn+sWXMWgM9uxDElfVncBt29y+ecBD2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJRuw7JtYt3R7kTDyeouJTgADIXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk
Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvYzNjYWVmNDYtYzFhYy0z
OGE3LWFhZWMtZGUyYTMwMmUzOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz
ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1
M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz
MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMLj5ONz1qAlxwvY5csCf8ktcZOlpZvDbfuPVjVmKlnYyGdmvtNEdWBO
IpEO1rX4x2FtU54wrKBzsDJSyyMHZiSwihiz7rrl0IlpbROKp42bXp5MwJZ5OeA0
3/KTa9SOafGbtQYShGSX0sZwcHcEt5ld9F/iAxFfw5TZZL1XrIVX9+i8LLH80Ook
pk27KaP1XGrStsDo5j7835BTCrNz8mC8DsgFxmh0P4lv7+3EOAuNFQuQ1sh4zkFB
AQGaqD+a7EtnwjInIhvt5/r8fBfQX9c/Ko2kpSEGID1n+CGznXpNL0Dn3ccJNorL
ZlxQywdTV2LcN7xUMQ1VGDIS3/baz7Q=
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:23:40 2026 by rpki-client