
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87ccfa52-8728-3304-a6b3-8365164b5596.roa
File: 87ccfa52-8728-3304-a6b3-8365164b5596.roa (raw, json)
Hash identifier: x06wVKJhuz81mEuywy7ivD3xa8k8Gs5w+dK35IlLm/8=
Subject key identifier: 9D:C9:08:AA:39:84:19:07:4A:0C:49:23:32:2E:BF:FB:6D:A3:65:28
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EA79AF946D8F9B14B2C046940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87ccfa52-8728-3304-a6b3-8365164b5596.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396982
IP address blocks: 104.198.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:f9:46:d8:f9:b1:4b:2c:04:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f5c991d0-951a-4d55-9616-d7e5d2f31738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:c4:39:e0:66:2a:8d:04:60:4c:e0:fc:a8:
b3:08:0d:f8:2c:eb:a4:57:4e:64:61:5f:48:61:82:
e9:3f:6b:d3:75:8b:03:e5:a2:7d:8b:d5:cb:db:08:
d3:ab:f6:8f:13:bf:1f:0b:52:78:65:6a:54:e1:22:
46:ed:b8:e5:04:27:5e:ea:6b:59:f6:4a:d3:50:1c:
85:85:10:be:82:8b:12:f7:38:63:69:07:56:71:95:
10:b5:c8:87:73:01:0e:71:10:01:f2:2f:42:02:5b:
44:24:f3:73:94:5a:bc:2d:30:00:1c:d7:7e:e6:5d:
d0:6a:ac:22:28:54:f6:76:4a:b3:35:9a:a1:e4:1c:
10:d1:cc:0a:8e:b3:db:ed:3f:6b:f7:a6:fb:f0:7d:
45:4e:03:9a:38:8a:bd:a9:21:7a:95:dc:c9:13:5f:
3e:3b:a0:e7:00:a2:16:3b:44:70:98:f1:a8:86:b1:
a3:55:66:74:9f:aa:90:02:d4:3b:3b:86:29:79:9d:
e2:40:fe:e3:c1:61:5e:a6:07:f9:6c:03:8d:e8:44:
74:bc:49:5d:09:68:1e:bd:2a:be:e7:88:e9:e2:cb:
bf:cb:0d:54:db:a1:9e:b8:ba:0a:43:a0:5e:55:90:
d2:eb:5b:7a:09:15:ab:67:bd:33:20:9b:63:29:62:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:08:AA:39:84:19:07:4A:0C:49:23:32:2E:BF:FB:6D:A3:65:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87ccfa52-8728-3304-a6b3-8365164b5596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:5b:eb:d0:f0:42:2c:76:f9:ea:1a:25:8e:6a:65:f5:0a:ba:
d0:7c:9c:ca:0e:85:c3:da:26:0b:8f:7b:d3:88:36:c3:a7:91:
fa:be:6a:26:b4:4a:cf:5f:61:e7:0f:70:d8:de:9d:06:06:90:
10:9c:79:08:ef:a9:4b:98:53:67:58:ad:cd:ff:e2:64:f3:0f:
94:69:ac:f3:36:ae:8f:87:34:a5:ee:f3:5a:cf:ab:d2:94:ec:
7f:93:d2:4d:73:76:68:ab:64:bf:a4:7c:a0:9f:fc:62:c8:88:
82:01:05:5b:b7:f7:72:f3:13:8d:9f:75:91:3d:9b:d5:76:e8:
4e:2a:b1:cf:59:29:f4:2a:0a:9a:6d:eb:2c:34:33:da:43:e3:
2b:b6:e9:ec:21:3f:fc:b0:c3:a2:64:f0:05:75:31:09:44:37:
99:10:bd:b4:ca:8d:b1:b3:04:64:db:0d:6d:16:1a:d5:33:32:
f2:48:a2:79:9e:6e:08:50:18:70:21:cb:15:8c:47:f0:c3:59:
5d:ab:80:71:7d:39:db:59:66:5a:8b:1a:e2:03:25:92:b6:51:
ff:ba:c4:71:c7:d3:0c:af:56:51:bf:65:46:a5:66:5e:c5:1a:
a8:cf:1e:69:c6:0c:89:a8:31:78:4f:20:10:5c:56:77:43:9b:
c2:dc:83:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmvlG2PmxSywEaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjVjOTkxZDAtOTUxYS00ZDU1LTk2MTYtZDdlNWQyZjMxNzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm3EOeBmKo0EYEzg/KizCA34LOukV05kYV9I
YYLpP2vTdYsD5aJ9i9XL2wjTq/aPE78fC1J4ZWpU4SJG7bjlBCde6mtZ9krTUByF
hRC+gosS9zhjaQdWcZUQtciHcwEOcRAB8i9CAltEJPNzlFq8LTAAHNd+5l3Qaqwi
KFT2dkqzNZqh5BwQ0cwKjrPb7T9r96b78H1FTgOaOIq9qSF6ldzJE18+O6DnAKIW
O0RwmPGohrGjVWZ0n6qQAtQ7O4YpeZ3iQP7jwWFepgf5bAON6ER0vEldCWgevSq+
54jp4su/yw1U26GeuLoKQ6BeVZDS61t6CRWrZ70zIJtjKWJOeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3JCKo5hBkHSgxJIzIuv/tto2UoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODdjY2ZhNTItODcyOC0z
MzA0LWE2YjMtODM2NTE2NGI1NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpb69DwQix2+eoaJY5qZfUKutB8nMoOhcPaJguPe9OINsOnkfq+aia0
Ss9fYecPcNjenQYGkBCceQjvqUuYU2dYrc3/4mTzD5RprPM2ro+HNKXu81rPq9KU
7H+T0k1zdmirZL+kfKCf/GLIiIIBBVu393LzE42fdZE9m9V26E4qsc9ZKfQqCppt
6yw0M9pD4yu26ewhP/yww6Jk8AV1MQlEN5kQvbTKjbGzBGTbDW0WGtUzMvJIonme
bghQGHAhyxWMR/DDWV2rgHF9OdtZZlqLGuIDJZK2Uf+6xHHH0wyvVlG/ZUalZl7F
GqjPHmnGDImoMXhPIBBcVndDm8Lcg50=
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:28:01 2026 by rpki-client