
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
File: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json)
Hash identifier: J3zPmVLSmekIjJl4W64lllEye3lVC6a05kmj47TIvng=
Subject key identifier: B3:A7:CA:49:7F:E2:9A:70:84:84:AB:B5:DC:F1:94:4A:AF:30:73:54
Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Certificate serial: 010D0C9F4328584DD8F06517CF57DE93BC510DC0
Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
Signing time: Sat 16 May 2026 01:00:26 +0000
ROA not before: Sat 16 May 2026 01:00:26 +0000
ROA not after: Fri 14 Aug 2026 01:00:26 +0000
asID: 62516
IP address blocks: 23.140.104.0/24 maxlen: 32
2604:4940::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d8:f0:65:17:cf:57:de:93:bc:51:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Validity
Not Before: May 16 01:00:26 2026 GMT
Not After : Aug 14 01:00:26 2026 GMT
Subject: CN=cf329aff-6a4d-4fa5-bf32-380b94fca3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:1b:7c:58:20:d7:1d:51:30:9f:09:ec:f5:
69:ef:52:c4:0b:b3:3a:ec:57:e6:ff:d2:ce:f7:28:
f0:87:35:5a:c4:6a:53:63:ee:f8:69:c5:ca:8c:ae:
c2:dc:41:b2:25:3e:be:e5:63:82:61:26:2e:ce:e3:
a5:01:17:0b:a6:6d:16:71:a5:a0:b5:38:a8:7b:c6:
95:54:eb:c2:2f:92:e3:0e:04:97:19:40:a8:fc:79:
86:1c:82:71:51:16:fc:20:1b:56:f0:e9:97:e1:fd:
7b:ae:8c:2e:07:80:79:5f:1f:5c:8c:35:34:c1:59:
c1:70:68:1c:59:25:ef:87:48:49:0d:cc:c8:de:5e:
26:7f:ce:cf:f7:13:a8:36:d5:df:a3:83:80:f9:d3:
52:20:b4:ba:00:a7:b0:83:3d:89:43:52:dc:8d:88:
83:ad:f2:ef:66:22:11:85:75:01:51:0b:1d:af:c7:
bd:32:c9:b8:a6:eb:79:fd:1e:d4:57:e8:ba:07:ac:
42:10:c4:b9:c6:25:d4:4a:74:1c:f0:81:ba:6b:15:
b7:0d:25:cf:48:e0:f7:68:c6:24:b2:e6:9a:5f:2e:
6e:4c:10:27:3b:ee:bb:91:ff:f3:53:31:6c:ed:e4:
4e:4f:e6:e9:46:a9:c6:c4:86:d2:05:51:cd:41:b6:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:CA:49:7F:E2:9A:70:84:84:AB:B5:DC:F1:94:4A:AF:30:73:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
X509v3 Authority Key Identifier:
keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.104.0/24
IPv6:
2604:4940::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:dd:ff:e0:e9:b3:b7:51:b1:b3:ca:a5:6f:75:67:4e:4e:5b:
8f:ae:eb:2e:80:af:18:e0:82:77:21:0b:b6:93:ae:84:26:e6:
b4:2a:73:00:c8:fc:27:ff:93:ea:20:6a:74:3b:70:cb:db:16:
90:da:3c:6e:60:be:cb:c7:bc:38:22:f6:e0:0b:d0:c0:bd:dc:
82:66:e0:b9:d3:3e:0d:53:3c:ea:5e:ef:7a:23:55:a9:7b:38:
18:c7:3e:81:68:5c:24:90:95:bf:1c:c9:22:db:41:57:50:95:
c5:06:30:a2:fb:5b:7e:66:3b:5b:e5:0d:8f:a3:ba:57:f9:ab:
39:22:69:2d:89:dc:58:42:39:64:fa:0a:5e:5a:91:77:78:d6:
8d:e8:b0:c9:d8:c9:5c:91:b5:91:e2:53:af:07:d6:d1:a2:03:
27:e4:e3:1e:02:f2:54:26:ba:86:64:5a:8f:db:1b:2c:67:ef:
c6:11:21:8f:fe:61:cb:79:e4:75:bb:8c:71:56:ca:37:c5:82:
cd:b7:78:8f:d2:39:75:0b:fe:8b:93:2c:e3:44:81:13:ab:f4:
ad:58:d2:04:be:ac:0f:69:4f:1f:f8:0f:53:42:32:92:3e:fd:
8a:96:5e:40:f8:7b:ce:82:50:40:e5:99:a5:a3:fe:6c:08:d2:
5f:22:09:0b
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE3Y8GUXz1fek7xRDcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4
ZmEyMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
Y2YzMjlhZmYtNmE0ZC00ZmE1LWJmMzItMzgwYjk0ZmNhM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxsbfFgg1x1RMJ8J7PVp71LEC7M67Ffm/9LO
9yjwhzVaxGpTY+74acXKjK7C3EGyJT6+5WOCYSYuzuOlARcLpm0WcaWgtTioe8aV
VOvCL5LjDgSXGUCo/HmGHIJxURb8IBtW8OmX4f17rowuB4B5Xx9cjDU0wVnBcGgc
WSXvh0hJDczI3l4mf87P9xOoNtXfo4OA+dNSILS6AKewgz2JQ1LcjYiDrfLvZiIR
hXUBUQsdr8e9Msm4put5/R7UV+i6B6xCEMS5xiXUSnQc8IG6axW3DSXPSOD3aMYk
suaaXy5uTBAnO+67kf/zUzFs7eROT+bpRqnGxIbSBVHNQbZxXwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFLOnykl/4ppwhISrtdzxlEqvMHNUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1
ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvOTdhOTAyM2MtM2I2ZS0z
MTU4LTg5ZDgtZWZlNjMwMDFmNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl
MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5
OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw
YWJkOThmYTIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4xoMA0E
AgACMAcDBQAmBElAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAHTd/+Dps7dRsbPKpW91Z05OW4+u6y6Arxjg
gnchC7aTroQm5rQqcwDI/Cf/k+oganQ7cMvbFpDaPG5gvsvHvDgi9uAL0MC93IJm
4LnTPg1TPOpe73ojVal7OBjHPoFoXCSQlb8cySLbQVdQlcUGMKL7W35mO1vlDY+j
ulf5qzkiaS2J3FhCOWT6Cl5akXd41o3osMnYyVyRtZHiU68H1tGiAyfk4x4C8lQm
uoZkWo/bGyxn78YRIY/+Yct55HW7jHFWyjfFgs23eI/SOXUL/ouTLONEgROr9K1Y
0gS+rA9pTx/4D1NCMpI+/YqWXkD4e86CUEDlmaWj/mwI0l8iCQs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:42 2026 by rpki-client