
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
File: d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json)
Hash identifier: lisQLbxnqcI5KilbtYVfJgcyZhHwi6U0t6Yqxah5DMM=
Subject key identifier: CA:73:B6:FE:32:35:14:3A:4D:50:53:36:A6:11:6E:4A:FA:E9:6B:0A
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584F146795340BC20CE85587BE00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 23470
IP address blocks: 104.251.85.0/24 maxlen: 24
104.251.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:95:34:0b:c2:0c:e8:55:87:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=88d2156d-08be-439f-9179-0c0cdb5ab24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:c7:84:f1:a3:0d:62:ad:eb:4e:cd:a9:8c:
5e:11:17:7c:0b:d3:0d:5d:cb:bf:39:44:62:22:e8:
9b:5e:13:6c:2b:fb:56:a0:83:30:3d:b6:c6:e6:f0:
34:77:b4:e9:b3:09:b9:88:94:c2:d9:59:8b:31:aa:
44:80:01:bb:38:9a:ef:b0:27:a2:60:ca:28:29:fb:
52:cc:d0:4a:d2:15:90:04:46:86:fc:c0:42:e2:1f:
0c:65:95:89:44:48:a7:1e:f2:fd:2a:f3:93:62:0a:
a5:af:0b:e3:84:6a:6a:bc:ae:1f:a4:41:6b:ff:db:
ee:4a:5d:9c:11:ce:46:69:f0:f4:ca:e7:a4:16:a0:
e2:dd:78:a0:b0:b9:20:e0:f1:c5:ec:90:9c:5c:3c:
33:38:79:57:45:54:37:45:24:23:8e:25:25:7b:e4:
e9:ec:0c:b4:c6:5d:a3:6c:84:b0:50:af:b9:72:c1:
5f:8d:25:2a:28:80:94:75:9e:d9:8c:e4:9b:f6:39:
52:76:7b:6f:9f:eb:e3:3f:a9:bc:05:7c:e8:c2:77:
7b:09:3a:6f:90:46:7c:36:fc:5f:f2:0e:81:a9:8e:
61:0b:a3:60:1b:01:32:ba:15:99:86:b3:d3:1f:74:
db:83:e9:27:01:73:fe:9d:a0:a0:ee:b3:f6:8f:62:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:B6:FE:32:35:14:3A:4D:50:53:36:A6:11:6E:4A:FA:E9:6B:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.85.0/24
104.251.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:11:12:f7:10:73:81:5d:8a:1a:6d:5b:c8:de:06:2d:49:cc:
f6:f8:e7:51:a7:50:e3:3f:b3:26:fd:a6:58:db:04:7f:51:b5:
b9:f1:2a:ba:7f:1d:b8:9d:9f:ba:e3:fb:e5:37:5c:fd:d9:2c:
41:20:44:c7:dc:67:0e:5a:4b:98:00:7b:a8:b8:f4:29:37:72:
b9:86:bb:86:dd:63:0b:d5:cd:57:9b:ee:7b:d6:d5:df:0d:87:
2a:9c:df:66:34:55:20:aa:36:52:96:62:1f:d2:0a:01:1c:ae:
ee:8d:5c:76:41:ee:8c:27:95:98:3f:8b:5f:08:f8:a2:48:b3:
fe:17:22:7a:4d:c6:88:8d:d3:4d:4f:4e:a3:76:9d:59:50:b2:
24:88:2f:2b:09:6e:ed:f3:20:6f:b5:87:75:65:ec:bd:e4:78:
12:01:83:e0:a5:51:e8:08:7e:cf:04:f7:86:3b:12:17:99:fa:
06:b0:a5:13:f3:d7:13:c5:54:70:44:35:6b:ed:7e:2e:21:cf:
95:50:28:46:ae:76:99:f9:cd:9b:91:7b:52:91:7a:bd:6e:55:
26:c6:59:f8:d6:42:84:2c:c5:1f:b7:c1:b6:f6:60:0d:5d:3a:
b6:0c:04:a1:d3:11:25:ee:de:27:84:19:8b:13:b8:f0:c0:87:
44:5a:6e:26
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8UZ5U0C8IM6FWHvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
ODhkMjE1NmQtMDhiZS00MzlmLTkxNzktMGMwY2RiNWFiMjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrrHhPGjDWKt607NqYxeERd8C9MNXcu/OURi
IuibXhNsK/tWoIMwPbbG5vA0d7Tpswm5iJTC2VmLMapEgAG7OJrvsCeiYMooKftS
zNBK0hWQBEaG/MBC4h8MZZWJREinHvL9KvOTYgqlrwvjhGpqvK4fpEFr/9vuSl2c
Ec5GafD0yuekFqDi3XigsLkg4PHF7JCcXDwzOHlXRVQ3RSQjjiUle+Tp7Ay0xl2j
bISwUK+5csFfjSUqKICUdZ7ZjOSb9jlSdntvn+vjP6m8BXzownd7CTpvkEZ8Nvxf
8g6BqY5hC6NgGwEyuhWZhrPTH3Tbg+knAXP+naCg7rP2j2LLUwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMpztv4yNRQ6TVBTNqYRbkr66WsKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDhkYzg2Y2ItMTYxZi0z
OTk1LThkOTktZGQyNDBkZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtVAwQA
aPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGgREvcQc4FdihptW8jeBi1JzPb451GnUOM/syb9pljbBH9R
tbnxKrp/Hbidn7rj++U3XP3ZLEEgRMfcZw5aS5gAe6i49Ck3crmGu4bdYwvVzVeb
7nvW1d8Nhyqc32Y0VSCqNlKWYh/SCgEcru6NXHZB7ownlZg/i18I+KJIs/4XInpN
xoiN001PTqN2nVlQsiSILysJbu3zIG+1h3Vl7L3keBIBg+ClUegIfs8E94Y7EheZ
+gawpRPz1xPFVHBENWvtfi4hz5VQKEaudpn5zZuRe1KRer1uVSbGWfjWQoQsxR+3
wbb2YA1dOrYMBKHTESXu3ieEGYsTuPDAh0RabiY=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:20:08 2026 by rpki-client