
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
File: caa87cfa-19df-3c8e-932b-663847ce2cfe.roa (raw, json)
Hash identifier: Mgd/XVLPkFY8AS9yuFm1Z9Z35LcjwJQVe/WjjRp6ne8=
Subject key identifier: E2:00:F7:5F:46:8B:67:27:AA:F6:45:45:EA:77:AD:E2:DA:97:9D:E8
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584E059C440519EEEB2C412C070C
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 36492
IP address blocks: 136.22.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:44:05:19:ee:eb:2c:41:2c:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=24f544fb-5328-4e34-a852-e40a8b165728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:38:69:48:4f:c6:2b:36:4e:13:98:91:1b:
28:a9:1b:44:8c:66:1f:0c:ab:5f:24:8d:01:41:e7:
2d:d7:b4:bd:ff:aa:ae:ae:7f:c6:4a:de:e5:4d:76:
f0:1e:4f:6e:7f:d4:cf:04:5f:ef:da:34:d8:08:c8:
fd:d2:3e:51:86:2c:10:5d:83:2e:77:fc:77:3c:2f:
28:2f:2e:b7:51:74:41:77:3d:e9:6b:77:20:bd:61:
95:0c:b1:56:08:54:cc:bb:ca:41:f4:66:65:dd:6a:
ef:cb:79:c4:39:92:6b:e5:b9:e2:e8:f3:f8:c1:4f:
0e:ba:81:b3:28:94:06:75:56:93:93:7b:ad:6a:8e:
0f:e1:1b:f2:3e:38:9f:8f:a2:51:b8:85:aa:e8:07:
ff:dd:4a:f2:e0:58:8f:54:8e:c5:da:7b:c4:90:c2:
30:41:2b:26:0c:94:3d:62:ef:6a:07:4c:8d:46:d7:
40:12:45:7e:18:92:96:86:24:a2:34:53:d9:62:63:
05:93:7d:18:fd:32:bf:56:83:de:34:83:56:b1:51:
78:04:c0:4b:03:3e:d7:8f:ba:89:51:80:7f:42:6b:
92:bb:e1:e9:6e:3f:5b:fa:fd:64:18:9c:73:de:aa:
b1:ba:cc:bc:7b:c0:f7:ee:4a:2e:32:ea:ca:50:b6:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:F7:5F:46:8B:67:27:AA:F6:45:45:EA:77:AD:E2:DA:97:9D:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:e9:4b:e0:1e:62:85:25:46:13:ea:8c:87:53:c4:1f:fc:20:
4d:8a:d2:a4:8c:1a:23:fd:95:a3:e7:c0:c6:57:88:68:ad:f4:
a1:f7:2c:6d:f1:3f:c0:63:69:8c:a6:fa:59:2f:37:e1:59:cf:
14:71:39:0a:2d:5e:a5:42:ca:a8:57:aa:ed:60:fa:1c:f2:dd:
4a:24:33:4e:2c:87:cf:50:d5:48:2d:40:65:77:84:8b:67:82:
26:df:d2:2e:71:ce:de:36:05:66:ee:28:f7:9f:60:db:ee:57:
30:3a:ce:e4:9b:2b:57:24:aa:90:a0:fb:0d:11:a9:52:e9:4f:
a1:e7:38:6c:41:5c:eb:79:7b:80:00:95:0e:42:29:b9:e9:e3:
bd:db:9f:71:b7:3c:f3:1e:d8:79:0e:e7:8e:46:3e:a8:14:55:
be:39:b0:3e:f9:a5:4a:e9:8a:35:0c:eb:0d:40:41:79:32:1c:
ff:01:07:35:f7:33:fb:76:af:86:0f:b2:25:7e:aa:d6:95:93:
67:9a:9f:f8:6a:c3:08:cb:1f:f9:f5:bd:df:8d:d7:ac:84:35:
dc:aa:b5:32:62:fb:5b:cd:88:74:4a:00:a5:8c:6b:82:65:79:
35:a2:a4:67:89:54:6f:49:50:f2:0c:fe:4c:d5:15:b7:50:78:
0a:3a:1b:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEQFGe7rLEEsBwwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MjRmNTQ0ZmItNTMyOC00ZTM0LWE4NTItZTQwYThiMTY1NzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZY4aUhPxis2ThOYkRsoqRtEjGYfDKtfJI0B
Qect17S9/6qurn/GSt7lTXbwHk9uf9TPBF/v2jTYCMj90j5RhiwQXYMud/x3PC8o
Ly63UXRBdz3pa3cgvWGVDLFWCFTMu8pB9GZl3Wrvy3nEOZJr5bni6PP4wU8OuoGz
KJQGdVaTk3utao4P4RvyPjifj6JRuIWq6Af/3Ury4FiPVI7F2nvEkMIwQSsmDJQ9
Yu9qB0yNRtdAEkV+GJKWhiSiNFPZYmMFk30Y/TK/VoPeNINWsVF4BMBLAz7Xj7qJ
UYB/QmuSu+Hpbj9b+v1kGJxz3qqxusy8e8D37kouMurKULa5zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOIA919Gi2cnqvZFRep3reLal53oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvY2FhODdjZmEtMTlkZi0z
YzhlLTkzMmItNjYzODQ3Y2UyY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjpS+AeYoUlRhPqjIdTxB/8IE2K0qSMGiP9laPnwMZXiGit9KH3LG3x
P8BjaYym+lkvN+FZzxRxOQotXqVCyqhXqu1g+hzy3UokM04sh89Q1UgtQGV3hItn
gibf0i5xzt42BWbuKPefYNvuVzA6zuSbK1ckqpCg+w0RqVLpT6HnOGxBXOt5e4AA
lQ5CKbnp473bn3G3PPMe2HkO545GPqgUVb45sD75pUrpijUM6w1AQXkyHP8BBzX3
M/t2r4YPsiV+qtaVk2ean/hqwwjLH/n1vd+N16yENdyqtTJi+1vNiHRKAKWMa4Jl
eTWipGeJVG9JUPIM/kzVFbdQeAo6G+c=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:30 2026 by rpki-client