
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa
File: 0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa (raw, json)
Hash identifier: LwELIS5tAARwI7KziGqQdDHiyA85b6x+TEkKnY8mefg=
Subject key identifier: B4:65:1D:5C:FA:40:2A:3F:CA:C9:35:ED:F1:59:35:52:05:F6:4D:52
Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial: 010D0C9F4328584EDC92095D4E9461B2B22CEE80
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 10430
IP address blocks: 72.233.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:09:5d:4e:94:61:b2:b2:2c:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=7a0775cd-3428-4577-bb84-bdf5522f8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:65:41:1f:19:b8:9b:6a:bf:f4:94:17:d3:
6b:b9:3f:bf:9b:26:1e:8b:5d:90:cb:36:31:40:f9:
8b:69:4d:d2:c6:45:3a:08:95:f3:89:0e:51:e9:ac:
d7:16:60:b0:b9:37:64:7f:f9:74:15:96:da:c0:e3:
f7:09:df:ad:1f:4a:be:00:07:ba:83:4d:62:ea:ac:
a4:78:a3:51:c9:c9:b9:c2:14:7c:d8:d1:0d:3e:4d:
3a:4f:57:c2:c3:79:4d:e3:c6:ad:39:fc:d7:d0:5e:
23:6a:63:ea:fd:bb:8f:16:5b:3a:42:01:c7:92:5c:
a3:b7:c5:2f:29:92:1e:f6:90:89:54:6f:ed:98:0c:
24:af:d4:57:4d:df:c1:38:86:bf:08:c9:18:67:c6:
83:32:79:a4:42:e8:f3:a1:8b:a1:7b:76:ab:d3:64:
f5:69:85:cf:ef:2c:8a:9c:d7:11:08:eb:65:01:34:
64:72:35:25:2b:0b:2b:da:b8:46:df:73:86:29:50:
3e:5c:40:1b:bc:12:e8:d6:cb:09:98:5d:f3:fb:db:
fd:c6:0e:23:3f:2f:d9:a7:9e:1a:00:d7:ad:ff:53:
29:3d:c4:42:00:3e:f6:8a:7c:b5:c0:5b:65:62:d9:
a8:86:64:a0:36:aa:6d:3b:db:94:ec:4b:57:45:67:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:1D:5C:FA:40:2A:3F:CA:C9:35:ED:F1:59:35:52:05:F6:4D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
X509v3 Authority Key Identifier:
keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.233.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b7:09:09:e5:b3:ed:43:87:8a:16:ff:7d:28:ce:b6:b7:bd:
86:09:3e:0e:79:70:0b:87:10:ce:d0:a0:6c:18:20:41:3d:7d:
1a:2c:79:60:72:22:42:7c:a2:c4:ea:03:6d:66:fa:75:b7:ca:
4d:9f:b3:5c:e9:95:5c:16:89:9f:01:c0:6c:1a:20:2c:a4:ff:
7e:78:43:0f:a6:24:c9:84:5a:78:0e:e6:24:cf:16:d1:5a:43:
8d:be:c7:18:3c:eb:85:91:70:80:6f:da:6a:22:7d:6a:a2:5f:
b2:20:df:c4:2c:40:c7:51:5e:b3:40:25:43:64:d8:fe:90:66:
34:21:a2:d7:6f:4a:03:4b:80:59:ed:ea:aa:81:db:2a:f2:cc:
4f:a6:f9:cd:d0:b7:2e:d3:4a:2a:23:fc:d1:b7:f1:35:27:79:
16:01:3f:58:c9:3c:cd:38:a1:64:9e:93:c7:c0:05:dd:b5:f6:
6d:f8:8c:ba:ca:f9:bc:f4:af:72:12:dc:bf:67:5b:d0:74:4a:
93:ef:99:09:cc:66:08:d8:1c:45:6a:a1:90:6b:3b:de:2c:3d:
aa:04:3f:39:c5:fa:34:82:ad:c0:3a:38:29:fb:59:fe:be:e7:
b7:93:ed:30:e6:36:14:2f:a8:1d:e5:24:18:43:3a:0d:8a:c7:
10:3a:69:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgldTpRhsrIs7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz
NzNmMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
N2EwNzc1Y2QtMzQyOC00NTc3LWJiODQtYmRmNTUyMmY4NjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF5lQR8ZuJtqv/SUF9NruT+/myYei12QyzYx
QPmLaU3SxkU6CJXziQ5R6azXFmCwuTdkf/l0FZbawOP3Cd+tH0q+AAe6g01i6qyk
eKNRycm5whR82NENPk06T1fCw3lN48atOfzX0F4jamPq/buPFls6QgHHklyjt8Uv
KZIe9pCJVG/tmAwkr9RXTd/BOIa/CMkYZ8aDMnmkQujzoYuhe3ar02T1aYXP7yyK
nNcRCOtlATRkcjUlKwsr2rhG33OGKVA+XEAbvBLo1ssJmF3z+9v9xg4jPy/Zp54a
ANet/1MpPcRCAD72iny1wFtlYtmohmSgNqptO9uU7EtXRWccSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRlHVz6QCo/ysk17fFZNVIF9k1SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi
YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMGFmOWU2YTctZWMyNi0z
Yjg4LThmYTQtOGQzMjU0OTg2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5
ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj
MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy
OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSOmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD23CQnls+1Dh4oW/30ozra3vYYJPg55cAuHEM7QoGwYIEE9fRoseWBy
IkJ8osTqA21m+nW3yk2fs1zplVwWiZ8BwGwaICyk/354Qw+mJMmEWngO5iTPFtFa
Q42+xxg864WRcIBv2moifWqiX7Ig38QsQMdRXrNAJUNk2P6QZjQhotdvSgNLgFnt
6qqB2yryzE+m+c3Qty7TSioj/NG38TUneRYBP1jJPM04oWSek8fABd219m34jLrK
+bz0r3IS3L9nW9B0SpPvmQnMZgjYHEVqoZBrO94sPaoEPznF+jSCrcA6OCn7Wf6+
57eT7TDmNhQvqB3lJBhDOg2KxxA6af8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:10 2026 by rpki-client