
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
File: d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa (raw, json)
Hash identifier: PhkmLnC2hNruCnljtznOxLiPs00IAxPznasQfmRVOT8=
Subject key identifier: 3F:3F:F2:25:71:28:74:10:8A:DA:9E:34:B6:E6:A0:04:91:D0:4A:0A
Certificate issuer: /CN=e76e962d-5249-4aed-ae77-b2d6c2ef42d0
Certificate serial: 010D0C9F4328584F06722D7B8D4A85117A7F3000
Authority key identifier: 10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 40895
IP address blocks: 23.247.192.0/22 maxlen: 24
163.123.168.0/22 maxlen: 24
209.209.32.0/22 maxlen: 24
2602:fd11::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:2d:7b:8d:4a:85:11:7a:7f:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76e962d-5249-4aed-ae77-b2d6c2ef42d0
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=24fe9a5b-e0da-4f24-9190-c96101cdcf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:e1:fc:3e:39:df:de:3c:bc:5e:6d:24:47:
00:3a:58:33:23:35:c3:50:5c:66:f7:56:05:0a:2c:
b6:56:c3:e8:c6:a0:bb:44:c5:a3:5d:af:a9:ff:7e:
db:65:a2:64:49:9c:e5:76:ac:1f:74:4d:49:91:ad:
a1:d3:99:12:e2:73:32:ef:20:e6:5b:e5:f1:23:23:
39:72:ac:0c:09:fd:44:a9:46:f9:1a:d4:5f:f3:d2:
c4:48:c9:25:50:1f:6f:b7:48:5d:c6:1f:9d:c5:e5:
97:16:b6:2a:76:14:64:47:2e:a2:2f:c9:5e:61:d7:
b4:d7:91:14:1e:4e:b3:3d:b6:56:d9:ee:bd:b6:0a:
81:b1:d4:91:5c:05:95:4e:01:2d:67:05:1e:80:39:
1b:76:8f:1c:9a:6e:72:b6:1e:c8:d2:b0:93:18:e1:
d3:b2:2d:22:74:87:fd:df:e2:3c:23:c4:e2:90:68:
70:c4:52:79:21:5b:d3:ac:7a:33:27:07:ef:a4:ee:
12:a8:37:98:84:99:f3:5f:9c:08:3c:3a:c7:21:6c:
57:a2:9b:50:9a:83:ce:1d:e8:0c:6b:d5:8f:d5:7a:
59:76:46:48:0f:4c:18:d6:06:6c:8e:12:19:41:40:
4d:d2:36:f2:42:18:ac:e4:33:76:6f:28:fd:3c:56:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:F2:25:71:28:74:10:8A:DA:9E:34:B6:E6:A0:04:91:D0:4A:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.crl
X509v3 Authority Key Identifier:
keyid:10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.192.0/22
163.123.168.0/22
209.209.32.0/22
IPv6:
2602:fd11::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4d:b7:98:19:29:17:a0:c2:95:28:3b:f6:3d:7d:0a:b0:44:
c3:75:a1:15:bf:b3:16:7e:db:67:02:da:fb:42:3c:db:5f:23:
d5:02:d8:74:4e:d9:12:37:15:04:99:e9:28:28:a1:99:8d:c9:
da:ce:f9:28:83:27:26:76:9a:c6:51:91:78:53:46:be:2b:dc:
13:ff:32:48:01:47:c4:bb:d5:98:d7:7c:e2:e9:9e:ff:4d:52:
0c:b2:f2:a6:3e:bc:99:66:fb:24:5c:b0:88:a9:5e:f7:17:63:
86:ba:db:10:9d:54:7f:c3:dc:3c:30:22:0e:00:96:9c:d2:bf:
c9:58:c1:a3:26:8e:50:4e:9b:20:2b:74:60:6a:62:df:6f:5a:
d7:1a:e0:17:4a:3d:ba:59:b9:42:8d:66:9c:d4:a2:0b:1c:48:
7d:36:79:10:22:aa:38:a5:3a:88:48:57:c8:76:05:d6:84:a0:
ac:a0:6d:19:4a:25:a4:9e:8a:f2:87:52:41:5e:98:c2:46:83:
88:42:cd:02:69:4f:96:93:b7:a6:ea:5c:d5:48:55:92:bd:6f:
bb:c1:d0:2c:cb:2b:5a:69:d8:e5:27:89:a2:a5:cf:88:69:85:
27:d1:c0:31:66:e2:54:41:4f:fe:fb:4c:98:23:36:bd:56:5b:
3b:06:20:33
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE8Gci17jUqFEXp/MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTc2ZTk2MmQtNTI0OS00YWVkLWFlNzctYjJkNmMyZWY0
MmQwMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MjRmZTlhNWItZTBkYS00ZjI0LTkxOTAtYzk2MTAxY2RjZjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmHh/D453948vF5tJEcAOlgzIzXDUFxm91YF
Ciy2VsPoxqC7RMWjXa+p/37bZaJkSZzldqwfdE1Jka2h05kS4nMy7yDmW+XxIyM5
cqwMCf1EqUb5GtRf89LESMklUB9vt0hdxh+dxeWXFrYqdhRkRy6iL8leYde015EU
Hk6zPbZW2e69tgqBsdSRXAWVTgEtZwUegDkbdo8cmm5yth7I0rCTGOHTsi0idIf9
3+I8I8TikGhwxFJ5IVvTrHozJwfvpO4SqDeYhJnzX5wIPDrHIWxXoptQmoPOHegM
a9WP1XpZdkZID0wY1gZsjhIZQUBN0jbyQhis5DN2byj9PFY0YQIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFD8/8iVxKHQQitqeNLbmoASR0EoKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNzZl
OTYyZC01MjQ5LTRhZWQtYWU3Ny1iMmQ2YzJlZjQyZDAvZDdlNTY1OWUtM2FmZC0z
MWVhLThmZTUtYjhmYWM1MzliODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTc2ZTk2MmQtNTI0OS00YWVkLWFl
NzctYjJkNmMyZWY0MmQwL2U3NmU5NjJkLTUyNDktNGFlZC1hZTc3LWIyZDZjMmVm
NDJkMC5jcmwwHwYDVR0jBBgwFoAUEIan0uwvVJFAynKYyOifA1dSj+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNzZlOTYyZC01MjQ5LTRhZWQtYWU3Ny1iMmQ2
YzJlZjQyZDAuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQCF/fAAwQC
o3uoAwQC0dEgMA4EAgACMAgDBgQmAv0RADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWTbeYGSkXoMKVKDv2
PX0KsETDdaEVv7MWfttnAtr7QjzbXyPVAth0TtkSNxUEmekoKKGZjcnazvkogycm
dprGUZF4U0a+K9wT/zJIAUfEu9WY13zi6Z7/TVIMsvKmPryZZvskXLCIqV73F2OG
utsQnVR/w9w8MCIOAJac0r/JWMGjJo5QTpsgK3RgamLfb1rXGuAXSj26WblCjWac
1KILHEh9NnkQIqo4pTqISFfIdgXWhKCsoG0ZSiWknoryh1JBXpjCRoOIQs0CaU+W
k7em6lzVSFWSvW+7wdAsyytaadjlJ4mipc+IaYUn0cAxZuJUQU/++0yYIza9Vls7
BiAz
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:40:42 2026 by rpki-client