
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/b6963c56-57eb-38e7-9383-0b341bfe3acf.roa
File: b6963c56-57eb-38e7-9383-0b341bfe3acf.roa (raw, json)
Hash identifier: 0ZxW2gAz//LkW1y3A1TOdtfurqNB4dJ1xHXd8Ks02l4=
Subject key identifier: 5F:1E:4A:8D:1B:DC:1C:8C:0D:43:84:66:45:21:C0:68:DF:F1:DC:F5
Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial: 010D0C9F4328584F49880E100F85D3AB09E50700
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/b6963c56-57eb-38e7-9383-0b341bfe3acf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30221
IP address blocks: 208.122.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:0e:10:0f:85:d3:ab:09:e5:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f1f2e836-c0fa-4f09-aac9-aac491d1a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e3:19:36:e3:a4:0c:2c:ad:6b:e6:ff:62:04:
f0:e9:db:ee:64:26:e0:6f:ab:f1:2d:da:fb:b6:a7:
18:e7:01:06:3b:4b:e9:48:4b:c4:6e:f4:51:14:73:
81:52:ca:e3:01:d6:d9:90:14:03:05:ca:a4:7d:68:
7c:34:d9:15:f0:f2:66:58:19:05:b3:45:ce:11:25:
1e:33:2f:8e:bb:c4:f1:6e:24:1c:b7:df:ac:f1:42:
80:ed:2f:81:a1:14:8f:e7:a1:29:64:04:1e:b3:14:
17:ce:58:4d:33:d4:b7:32:52:ca:74:d9:b4:f7:3d:
7e:d9:a7:01:79:fc:8d:32:82:64:25:0b:f3:4a:a9:
44:d5:af:09:a7:38:07:a4:b1:4a:99:6a:04:07:11:
37:da:39:5e:31:91:20:59:cc:d9:13:e2:98:df:8e:
66:27:d1:04:19:3d:b3:bb:86:0f:37:30:f0:bb:ed:
4e:d2:66:0d:c6:52:7c:c7:51:1f:c9:03:8c:94:78:
1d:44:b6:50:35:6f:84:e6:be:d8:93:98:e9:2e:1e:
9b:ea:08:ea:9d:7a:f6:15:17:9c:4b:53:1f:e5:7d:
d3:4b:ec:02:4f:c1:11:a1:ec:de:10:8e:26:74:86:
18:ce:72:9e:63:41:bc:bc:09:38:9a:eb:f0:65:5c:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:4A:8D:1B:DC:1C:8C:0D:43:84:66:45:21:C0:68:DF:F1:DC:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/b6963c56-57eb-38e7-9383-0b341bfe3acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
X509v3 Authority Key Identifier:
keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
sbgp-ipAddrBlock: critical
IPv4:
208.122.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:76:8b:a8:47:00:f1:12:05:68:4a:5d:33:8b:e7:11:85:b1:
7f:6f:9d:a6:0a:a2:00:10:1c:d1:ee:1f:63:fe:c2:a3:b8:41:
46:a2:60:32:69:59:5b:be:60:55:a6:1e:0e:20:01:20:3c:3d:
81:f1:86:44:19:43:9e:ef:6d:f8:14:b6:ea:10:ba:bc:68:f8:
b6:36:3b:76:5a:09:fc:5f:b9:0c:c6:ab:6e:e8:7c:52:6e:31:
f2:2c:69:aa:c2:c0:bc:9c:53:ec:9d:85:9c:e3:a6:d7:aa:97:
24:2e:0f:3d:c5:cd:da:f9:1b:9a:6e:4b:b9:00:64:c2:8d:9f:
36:4b:92:8b:54:73:a8:b6:e0:7d:ff:cb:fd:42:65:7d:80:3e:
62:7a:a4:fd:2d:e5:d2:0b:b6:75:fc:e4:cc:f6:38:ba:56:44:
17:f7:33:cc:b1:32:6b:23:c4:12:04:38:e4:ac:bb:a1:c6:53:
ec:fd:95:54:ea:4a:61:5e:dc:f4:5b:c2:3f:56:f5:9f:5a:5c:
e8:91:3e:eb:cf:b3:d3:84:d9:c0:a6:c6:43:f1:03:09:64:32:
30:27:1d:61:23:d6:8b:d9:59:a5:3c:4b:6d:b8:09:0a:a0:e2:
66:da:6a:23:bc:1f:cb:d8:31:b8:36:f7:83:ec:5d:15:6c:c8:
df:0f:2d:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiA4QD4XTqwnlBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQw
MDM2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjFmMmU4MzYtYzBmYS00ZjA5LWFhYzktYWFjNDkxZDFhOWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+MZNuOkDCyta+b/YgTw6dvuZCbgb6vxLdr7
tqcY5wEGO0vpSEvEbvRRFHOBUsrjAdbZkBQDBcqkfWh8NNkV8PJmWBkFs0XOESUe
My+Ou8TxbiQct9+s8UKA7S+BoRSP56EpZAQesxQXzlhNM9S3MlLKdNm09z1+2acB
efyNMoJkJQvzSqlE1a8JpzgHpLFKmWoEBxE32jleMZEgWczZE+KY345mJ9EEGT2z
u4YPNzDwu+1O0mYNxlJ8x1EfyQOMlHgdRLZQNW+E5r7Yk5jpLh6b6gjqnXr2FRec
S1Mf5X3TS+wCT8ERoezeEI4mdIYYznKeY0G8vAk4muvwZVxFNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8eSo0b3ByMDUOEZkUhwGjf8dz1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YzJh
NzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvYjY5NjNjNTYtNTdlYi0z
OGU3LTkzODMtMGIzNDFiZmUzYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWMyYTcyMjUtZGZlYS00NjBkLWFh
NjktODA0YWU1NzQwMDM2LzljMmE3MjI1LWRmZWEtNDYwZC1hYTY5LTgwNGFlNTc0
MDAzNi5jcmwwHwYDVR0jBBgwFoAUlYr+xsgzCViBPpDo757JLDrbd8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRh
ZTU3NDAwMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB12i6hHAPESBWhKXTOL5xGFsX9vnaYKogAQHNHuH2P+wqO4QUaiYDJp
WVu+YFWmHg4gASA8PYHxhkQZQ57vbfgUtuoQurxo+LY2O3ZaCfxfuQzGq27ofFJu
MfIsaarCwLycU+ydhZzjpteqlyQuDz3Fzdr5G5puS7kAZMKNnzZLkotUc6i24H3/
y/1CZX2APmJ6pP0t5dILtnX85Mz2OLpWRBf3M8yxMmsjxBIEOOSsu6HGU+z9lVTq
SmFe3PRbwj9W9Z9aXOiRPuvPs9OE2cCmxkPxAwlkMjAnHWEj1ovZWaU8S224CQqg
4mbaaiO8H8vYMbg294PsXRVsyN8PLSg=
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:58:27 2026 by rpki-client