
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/4965ad2d-fd25-3b71-9c94-b4653ef1c5e1.roa
File: 4965ad2d-fd25-3b71-9c94-b4653ef1c5e1.roa (raw, json)
Hash identifier: CHRkTydp/gmiTTDOHRrn48Rv+bPgHtKNcOmsZ++xkdE=
Subject key identifier: FA:50:DD:1B:53:B7:60:49:46:FB:66:57:C4:3F:DB:F6:FA:7D:8C:DD
Certificate issuer: /CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
Certificate serial: 010D0C9F4328584F374D1971E198F61B7B78E080
Authority key identifier: 99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/4965ad2d-fd25-3b71-9c94-b4653ef1c5e1.roa
Signing time: Fri 18 Sep 2026 13:00:12 +0000
ROA not before: Fri 18 Sep 2026 13:00:12 +0000
ROA not after: Thu 17 Dec 2026 14:00:12 +0000
asID: 25693
IP address blocks: 23.136.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:4d:19:71:e1:98:f6:1b:7b:78:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
Validity
Not Before: Sep 18 13:00:12 2026 GMT
Not After : Dec 17 14:00:12 2026 GMT
Subject: CN=bbe993d6-691b-489e-a6df-11548f788ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7b:05:ab:62:d9:34:fa:68:31:69:0e:fc:3e:
f9:1b:29:65:dd:e0:7d:e1:01:8c:9a:db:01:cd:b8:
67:c5:27:66:3a:64:a5:ff:ea:86:2a:1a:6e:47:e0:
78:7f:3f:c0:4d:1b:e6:c6:da:47:dd:0a:39:4b:8f:
c8:dd:90:71:42:ab:ec:1a:4e:2f:0f:3a:e9:ef:d3:
2b:e9:db:ed:0c:ac:52:eb:cb:15:80:db:01:9a:3b:
e7:d7:b6:a1:f0:02:af:ae:78:11:61:38:4a:7d:d4:
12:d8:1a:26:e1:19:20:4f:6e:04:d8:46:10:37:55:
ec:12:c9:0a:14:d3:1b:8a:7a:ad:91:f9:0a:b7:6b:
93:fa:22:a5:ba:60:04:7b:72:98:2d:a5:98:e4:7e:
b3:3b:f7:50:7f:87:d1:c7:e4:ef:ec:a8:e2:3f:b4:
f1:ee:15:85:29:c8:75:29:76:04:5a:85:60:4e:60:
69:47:66:66:63:a4:e8:f2:f5:61:25:22:06:b3:b6:
25:43:22:30:38:d1:44:e4:14:c0:c8:1d:f4:bf:be:
d3:a7:3e:ea:41:80:90:13:97:91:04:4a:2d:21:be:
7a:e7:42:8a:cc:6a:b4:9a:46:f7:8e:a6:37:5b:45:
e0:32:89:f7:94:5f:34:d8:01:3f:bb:63:1b:03:96:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:50:DD:1B:53:B7:60:49:46:FB:66:57:C4:3F:DB:F6:FA:7D:8C:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/4965ad2d-fd25-3b71-9c94-b4653ef1c5e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl
X509v3 Authority Key Identifier:
keyid:99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ca:c8:fe:7a:b3:e7:36:17:c8:c0:8d:5b:d7:1b:96:1e:90:
01:ae:76:aa:7e:90:ea:f0:2e:ba:2f:ac:e6:d8:c8:d7:f5:2f:
17:e6:35:72:41:dc:bb:27:41:60:03:2e:62:1a:34:cd:ae:5b:
fc:8a:a9:6a:34:56:be:dd:2e:29:1f:8f:43:58:56:f7:bd:51:
82:0b:80:7c:5c:ec:95:69:39:64:a8:f2:76:71:81:17:81:4f:
de:03:20:27:8d:5d:72:ac:e8:88:96:dd:7c:04:cb:d7:75:00:
7f:c2:11:ac:b7:b8:8c:15:bf:99:f8:9c:27:01:3f:52:01:c1:
e2:f6:f3:6f:01:ef:69:ce:54:ff:9a:80:d7:7f:91:91:fa:1f:
c9:d5:0a:c3:29:53:27:98:82:ca:fc:e1:73:ba:e7:5f:3c:88:
49:00:45:9c:b9:0c:08:0b:1a:55:a9:51:eb:21:7c:5c:4a:db:
1c:c3:cc:75:1e:1b:bd:fb:9c:6b:98:ee:49:e7:8f:6c:52:e9:
64:e5:2c:96:45:a2:ac:73:c9:a2:f4:65:86:1e:51:f7:b8:df:
ae:47:12:27:b1:17:2b:5d:73:61:74:8e:85:86:e8:55:82:53:
8f:0f:a9:b7:5a:73:4a:99:b2:3a:57:4f:85:cb:67:30:ba:25:
a3:17:17:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRlx4Zj2G3t44IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmM2E4NTQtMzQ0Yi00OGU4LWE5ZmYtN2UxMjhkYmQy
NjFkMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
YmJlOTkzZDYtNjkxYi00ODllLWE2ZGYtMTE1NDhmNzg4YWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3sFq2LZNPpoMWkO/D75Gyll3eB94QGMmtsB
zbhnxSdmOmSl/+qGKhpuR+B4fz/ATRvmxtpH3Qo5S4/I3ZBxQqvsGk4vDzrp79Mr
6dvtDKxS68sVgNsBmjvn17ah8AKvrngRYThKfdQS2Bom4RkgT24E2EYQN1XsEskK
FNMbinqtkfkKt2uT+iKlumAEe3KYLaWY5H6zO/dQf4fRx+Tv7KjiP7Tx7hWFKch1
KXYEWoVgTmBpR2ZmY6To8vVhJSIGs7YlQyIwONFE5BTAyB30v77Tpz7qQYCQE5eR
BEotIb5650KKzGq0mkb3jqY3W0XgMon3lF802AE/u2MbA5bzTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPpQ3RtTt2BJRvtmV8Q/2/b6fYzdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMmYz
YTg1NC0zNDRiLTQ4ZTgtYTlmZi03ZTEyOGRiZDI2MWQvNDk2NWFkMmQtZmQyNS0z
YjcxLTljOTQtYjQ2NTNlZjFjNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjJmM2E4NTQtMzQ0Yi00OGU4LWE5
ZmYtN2UxMjhkYmQyNjFkL2IyZjNhODU0LTM0NGItNDhlOC1hOWZmLTdlMTI4ZGJk
MjYxZC5jcmwwHwYDVR0jBBgwFoAUmRku8d6T6pl/7GwTuk7PbwXVyXswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMmYzYTg1NC0zNDRiLTQ4ZTgtYTlmZi03ZTEy
OGRiZDI2MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4hsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPKyP56s+c2F8jAjVvXG5YekAGudqp+kOrwLrovrObYyNf1LxfmNXJB
3LsnQWADLmIaNM2uW/yKqWo0Vr7dLikfj0NYVve9UYILgHxc7JVpOWSo8nZxgReB
T94DICeNXXKs6IiW3XwEy9d1AH/CEay3uIwVv5n4nCcBP1IBweL2828B72nOVP+a
gNd/kZH6H8nVCsMpUyeYgsr84XO65188iEkARZy5DAgLGlWpUeshfFxK2xzDzHUe
G737nGuY7knnj2xS6WTlLJZFoqxzyaL0ZYYeUfe4365HEiexFytdc2F0joWG6FWC
U48Pqbdac0qZsjpXT4XLZzC6JaMXF3w=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:21 2026 by rpki-client