
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa
File: d6700884-10a1-34b7-9970-7d3f38008d31.roa (raw, json)
Hash identifier: xUTu7WXb1wXeNYwL4A0k3ekh2EIo4GeqHqL3TsxJeRI=
Subject key identifier: 3B:9E:9C:EE:86:59:5D:B9:2C:10:81:C2:00:A0:D7:B3:61:58:A3:8B
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F14678D40F68286B82DABC500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 62904
IP address blocks: 23.231.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:8d:40:f6:82:86:b8:2d:ab:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=1774fc2a-0845-4ee7-ab62-a5e8abd77c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:54:26:af:56:f7:be:7f:c9:ee:f0:a8:94:
9a:43:e4:48:72:c0:20:28:70:f5:99:3d:ea:8b:7d:
e8:2c:0b:a6:19:a0:9a:41:4b:70:40:bb:4a:79:27:
15:55:58:6e:e2:7b:a2:f1:bf:f9:5a:d1:70:93:21:
45:d9:83:9e:e5:26:e4:c4:5c:57:c6:3b:1c:f1:6e:
50:e1:44:b2:22:d1:23:b3:44:64:aa:52:f0:b1:b0:
a5:74:e9:dc:3a:35:0b:25:57:8d:7d:48:87:de:ac:
2e:f8:3d:05:94:74:5c:0c:41:2a:53:31:5a:57:93:
a5:68:0f:79:a6:78:ca:5a:e9:03:c2:3f:c9:cd:90:
99:ae:9c:bc:bc:cc:52:07:41:b1:20:fb:b8:24:21:
bf:fd:17:14:99:59:21:e1:09:15:ff:de:04:b6:25:
0e:4e:e2:12:53:7e:78:27:db:2a:22:56:3d:81:32:
1f:e8:92:3f:e9:f1:d9:91:ad:d5:a6:f4:34:b8:e0:
e9:4d:99:fb:2a:d2:af:f0:3a:c6:ce:fc:05:16:b1:
39:44:7b:e4:b3:cf:df:6a:6c:3a:0f:c3:1e:83:37:
00:3f:d6:88:17:5e:21:76:44:70:1a:2e:8d:0e:ca:
bc:47:b7:64:dd:37:25:df:06:be:d4:92:11:3d:f3:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:9C:EE:86:59:5D:B9:2C:10:81:C2:00:A0:D7:B3:61:58:A3:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
23.231.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:95:71:77:c0:ed:1d:fa:fb:8c:32:49:34:a5:f2:8f:eb:28:
32:15:37:5a:07:55:06:35:e3:47:49:26:0a:60:a9:51:e8:13:
02:61:f1:d0:0f:7f:31:44:2f:f8:2f:99:e8:b9:fe:fb:a7:83:
6d:16:e6:1b:d1:47:36:1e:f8:1f:65:55:cc:a8:99:25:7e:15:
78:a6:52:39:ba:86:37:5c:d1:bc:a6:d5:c2:99:36:81:29:fe:
e7:a4:b9:22:95:d0:e5:cb:2d:d7:34:30:78:f3:f9:d6:52:7d:
7c:65:ee:2a:ae:ab:73:91:98:e9:f2:4c:6f:7f:3b:f9:79:73:
ac:78:86:8f:dc:de:02:d5:b7:b8:9a:66:43:59:e0:df:00:96:
b0:fa:d8:42:e2:58:d7:35:ef:4f:33:87:1a:57:63:77:ed:ef:
dd:50:ec:37:b2:ea:f9:99:a5:c5:e4:0a:2f:86:90:39:fa:f4:
94:04:c4:9b:fa:39:c6:cc:f2:fc:02:2c:5a:f5:0a:02:b6:cf:
07:e1:1c:85:90:0c:83:1b:a9:2c:e3:02:f8:f0:50:09:1b:66:
1e:2a:cf:42:b6:b0:73:b9:83:7f:6d:44:3b:c2:eb:35:d3:f8:
10:7d:9b:11:98:2c:c9:23:44:37:77:8d:5a:81:86:22:9e:31:
ae:00:a0:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ41A9oKGuC2rxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
MTc3NGZjMmEtMDg0NS00ZWU3LWFiNjItYTVlOGFiZDc3YzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvktUJq9W975/ye7wqJSaQ+RIcsAgKHD1mT3q
i33oLAumGaCaQUtwQLtKeScVVVhu4nui8b/5WtFwkyFF2YOe5SbkxFxXxjsc8W5Q
4USyItEjs0RkqlLwsbCldOncOjULJVeNfUiH3qwu+D0FlHRcDEEqUzFaV5OlaA95
pnjKWukDwj/JzZCZrpy8vMxSB0GxIPu4JCG//RcUmVkh4QkV/94EtiUOTuISU354
J9sqIlY9gTIf6JI/6fHZka3VpvQ0uODpTZn7KtKv8DrGzvwFFrE5RHvks8/famw6
D8MegzcAP9aIF14hdkRwGi6NDsq8R7dk3Tcl3wa+1JIRPfOl2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuenO6GWV25LBCBwgCg17NhWKOLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDY3MDA4ODQtMTBhMS0z
NGI3LTk5NzAtN2QzZjM4MDA4ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+dkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCVcXfA7R36+4wySTSl8o/rKDIVN1oHVQY140dJJgpgqVHoEwJh8dAP
fzFEL/gvmei5/vung20W5hvRRzYe+B9lVcyomSV+FXimUjm6hjdc0bym1cKZNoEp
/uekuSKV0OXLLdc0MHjz+dZSfXxl7iquq3ORmOnyTG9/O/l5c6x4ho/c3gLVt7ia
ZkNZ4N8AlrD62ELiWNc1708zhxpXY3ft791Q7Dey6vmZpcXkCi+GkDn69JQExJv6
OcbM8vwCLFr1CgK2zwfhHIWQDIMbqSzjAvjwUAkbZh4qz0K2sHO5g39tRDvC6zXT
+BB9mxGYLMkjRDd3jVqBhiKeMa4AoEs=
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:10:58 2026 by rpki-client