
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa
File: 74cca517-9428-314a-9bf6-c27e43608e8b.roa (raw, json)
Hash identifier: 9WqlX/eYu4Xb8lg6vvrsxqpExs/p7BX+GNAs7gWwt+4=
Subject key identifier: 43:30:A1:13:D6:5C:34:78:E3:2B:AD:41:C3:A4:CA:7C:B1:7E:08:21
Certificate issuer: /CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
Certificate serial: 010D0C9F4328584F10378CCBD52879CDF0CB5B80
Authority key identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 394935
IP address blocks: 23.136.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:8c:cb:d5:28:79:cd:f0:cb:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=8b3ff157-c6e9-4497-9b08-6e39da7fa076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:1c:f4:ea:9b:b2:52:ed:c5:85:c6:bd:df:
51:77:c9:27:dc:a4:54:14:df:c2:a6:28:a2:04:e7:
b2:7c:ab:9a:b0:31:cf:da:65:18:58:81:3d:c4:b2:
b0:ab:37:43:65:11:90:3e:17:b7:67:38:a5:ab:25:
a8:d6:b0:35:db:aa:bb:d2:5e:06:97:01:c6:d0:82:
1e:06:ce:c2:09:6e:ce:34:f8:46:0b:b2:2e:6e:6a:
3e:9d:5d:8d:4b:d3:94:3d:c0:9e:38:9f:99:0e:50:
d3:d4:cb:61:43:ae:2d:a8:2c:16:e6:ba:2c:3f:7e:
ba:c0:bb:44:71:cd:d3:33:37:8a:e5:43:21:47:25:
df:f7:f8:b5:d7:48:17:f7:9d:d4:c7:7d:63:ef:7e:
c0:49:cb:de:9c:76:17:98:2a:6e:cd:a4:42:24:84:
87:75:67:ca:30:3c:0b:49:d5:ec:a0:25:96:fc:74:
e6:a1:91:4f:e4:f0:81:30:6e:80:b0:c5:b6:89:49:
b2:f4:af:bf:ed:7a:1b:62:47:f0:61:81:d1:78:0c:
7a:35:c1:a0:9c:5d:53:7c:4c:5b:53:8f:7e:dc:fe:
ab:8b:8b:75:84:14:94:6c:a7:0b:78:93:79:8e:e8:
94:87:59:9a:2a:2c:5e:1c:56:5d:81:48:c6:12:b2:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:A1:13:D6:5C:34:78:E3:2B:AD:41:C3:A4:CA:7C:B1:7E:08:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl
X509v3 Authority Key Identifier:
keyid:F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:2e:69:80:ba:5d:bd:d8:57:cc:76:15:5a:00:12:ba:94:14:
9f:cb:87:61:c0:59:15:d7:ee:7d:b2:e5:5c:11:8f:13:da:12:
22:34:43:a7:2e:7d:13:f8:55:38:26:a0:e5:8d:4d:81:89:b9:
5a:16:ce:cb:a2:1c:ef:01:53:ec:88:80:da:99:7d:a7:43:ae:
2c:ae:8e:bc:20:9c:7d:ca:73:d3:2f:31:c4:27:a2:06:5a:04:
ca:df:4e:e4:19:67:2e:1c:bb:e3:65:55:96:c3:77:56:40:9e:
50:16:44:8c:10:f1:9b:74:83:e5:7b:43:b2:4e:66:c7:a0:e7:
8c:e6:cd:e5:bd:a6:98:ed:32:2d:1f:19:d0:03:0d:0d:8f:30:
e4:7b:c9:0d:d5:38:8d:9a:5c:d9:78:3c:66:1e:b5:4f:8b:41:
b7:ca:7a:86:ae:e3:a4:a5:9a:81:cd:44:fe:d3:6b:4c:b9:7e:
dd:39:73:6d:2d:45:22:c3:9f:42:69:69:07:31:ae:e9:7c:ef:
06:db:5b:36:d8:08:81:bd:dd:31:ad:ef:fc:34:cf:08:ae:9b:
be:1a:52:f5:62:ef:81:99:84:13:d7:4a:59:3f:b6:fb:c3:7d:
d3:45:44:ea:66:ba:cc:87:34:12:de:18:72:73:c2:f1:f1:f1:
e2:16:6c:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4zL1Sh5zfDLW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhODI4ZWQtYzllMi00ODFiLTg3MTUtNDFiNGQ1ZjVm
YTU0MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
OGIzZmYxNTctYzZlOS00NDk3LTliMDgtNmUzOWRhN2ZhMDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdEc9OqbslLtxYXGvd9Rd8kn3KRUFN/Cpiii
BOeyfKuasDHP2mUYWIE9xLKwqzdDZRGQPhe3ZzilqyWo1rA126q70l4GlwHG0IIe
Bs7CCW7ONPhGC7Iubmo+nV2NS9OUPcCeOJ+ZDlDT1MthQ64tqCwW5rosP366wLtE
cc3TMzeK5UMhRyXf9/i110gX953Ux31j737AScvenHYXmCpuzaRCJISHdWfKMDwL
SdXsoCWW/HTmoZFP5PCBMG6AsMW2iUmy9K+/7XobYkfwYYHReAx6NcGgnF1TfExb
U49+3P6ri4t1hBSUbKcLeJN5juiUh1maKixeHFZdgUjGErJPowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMwoRPWXDR44yutQcOkynyxfgghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4
MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVmNWZhNTQvNzRjY2E1MTctOTQyOC0z
MTRhLTliZjYtYzI3ZTQzNjA4ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDlhODI4ZWQtYzllMi00ODFiLTg3
MTUtNDFiNGQ1ZjVmYTU0LzA5YTgyOGVkLWM5ZTItNDgxYi04NzE1LTQxYjRkNWY1
ZmE1NC5jcmwwHwYDVR0jBBgwFoAU9De2wyqBMn9+7TP2eXzabHVxEzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0
ZDVmNWZhNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsuaYC6Xb3YV8x2FVoAErqUFJ/Lh2HAWRXX7n2y5VwRjxPaEiI0Q6cu
fRP4VTgmoOWNTYGJuVoWzsuiHO8BU+yIgNqZfadDriyujrwgnH3Kc9MvMcQnogZa
BMrfTuQZZy4cu+NlVZbDd1ZAnlAWRIwQ8Zt0g+V7Q7JOZseg54zmzeW9ppjtMi0f
GdADDQ2PMOR7yQ3VOI2aXNl4PGYetU+LQbfKeoau46SlmoHNRP7Ta0y5ft05c20t
RSLDn0JpaQcxrul87wbbWzbYCIG93TGt7/w0zwium74aUvVi74GZhBPXSlk/tvvD
fdNFROpmusyHNBLeGHJzwvHx8eIWbEg=
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:43:14 2026 by rpki-client