
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa
File: 10f9106f-38d7-334c-be0c-2e81c68cb772.roa (raw, json)
Hash identifier: sWqmq3hMt8NPvJKxovVd9NWE16lyXQGAn8bqL5w/4tw=
Subject key identifier: 45:94:B8:D7:2F:B3:DC:9C:90:72:88:B7:A1:68:A0:1D:8F:1B:A3:C8
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EF9E21E785E35A9A97E128520
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa
Signing time: Thu 27 Aug 2026 13:00:12 +0000
ROA not before: Thu 27 Aug 2026 13:00:12 +0000
ROA not after: Wed 25 Nov 2026 14:00:12 +0000
asID: 3257
IP address blocks: 72.245.192.0/21 maxlen: 24
72.245.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f9:e2:1e:78:5e:35:a9:a9:7e:12:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 27 13:00:12 2026 GMT
Not After : Nov 25 14:00:12 2026 GMT
Subject: CN=ded57d9e-b26c-4d8b-880f-0da992043664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:e6:52:51:33:43:0c:ed:34:1f:67:10:5c:
ad:b1:3f:35:e5:51:2b:85:b0:48:d7:18:1f:2b:cb:
b0:fe:4f:e8:43:2e:b1:c5:61:a4:f3:52:d8:56:7e:
e2:8c:b7:0f:d1:84:77:5f:4a:1a:3b:5a:47:9b:89:
a8:6d:c9:79:e5:db:fb:91:42:30:8d:55:ad:f6:20:
4b:1a:7d:47:c2:d3:ce:50:93:63:c9:44:02:35:68:
82:00:ac:8c:39:9a:95:dd:f1:ca:a3:d8:b4:50:ce:
7c:d4:2d:c2:0d:3c:38:cd:34:ff:9b:67:dd:cb:b8:
15:14:80:af:b6:58:68:4a:71:a9:9d:ce:79:ec:c7:
ed:d9:32:60:3b:4e:9b:b5:16:d2:da:49:86:81:ca:
ee:90:60:07:71:6f:68:00:56:92:fa:b3:14:2e:a3:
59:ef:82:40:11:6b:7c:37:d1:78:97:ea:cc:e7:0b:
da:43:3c:02:da:cd:9d:0f:43:c4:25:34:c0:64:99:
e1:bf:a2:4b:4b:93:bc:60:c6:a6:17:32:6e:3c:9f:
da:06:66:0f:46:18:08:59:a0:1c:54:76:aa:7e:2b:
6e:4a:c3:a3:09:e0:f9:20:00:84:52:b4:4d:46:36:
a6:8b:ea:74:d2:c6:b1:72:6c:df:f2:24:76:67:d5:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:B8:D7:2F:B3:DC:9C:90:72:88:B7:A1:68:A0:1D:8F:1B:A3:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.245.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:4d:f7:dc:60:89:63:a1:dd:1b:00:ef:10:fb:b4:c4:58:7b:
43:b0:7a:85:c9:ec:84:a6:2a:8a:14:55:da:e5:b1:2d:54:bc:
b1:bd:cc:12:c3:f6:8d:80:0a:a3:f8:7b:58:a4:ae:12:72:06:
2b:48:33:87:14:7a:8c:c5:b4:b1:71:e8:a9:d3:8b:f3:58:20:
96:52:93:4e:3a:2f:b7:4b:c5:a1:9c:27:08:51:98:0b:5e:5c:
4c:10:9c:05:ec:fc:8d:dd:9a:ad:21:0f:95:0e:ed:06:88:de:
db:9f:ee:ea:1f:c2:54:da:a0:45:8e:51:24:8c:82:1d:3e:71:
6a:39:fa:b1:59:96:94:87:4c:a4:38:d1:e9:17:18:04:e8:77:
e6:b4:0d:e6:87:63:ea:a1:c9:30:6e:1f:07:7e:09:c1:79:b4:
df:3a:b8:dc:16:3f:3e:03:dd:3c:51:9d:e0:eb:34:34:0b:ec:
26:73:3b:ea:b9:56:73:fa:3b:73:71:a0:5f:b4:62:89:6e:46:
ab:66:e2:dd:8f:d0:c7:76:5e:7a:ca:c0:ad:50:88:36:89:00:
b4:cd:75:d3:d7:f2:52:73:f2:7b:64:b5:a4:04:72:78:e6:62:
62:67:34:eb:79:06:a8:5f:ef:80:06:37:3e:18:0b:65:9d:1a:
78:81:0b:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754h54XjWpqX4ShSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk
ZGVkNTdkOWUtYjI2Yy00ZDhiLTg4MGYtMGRhOTkyMDQzNjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbnmUlEzQwztNB9nEFytsT815VErhbBI1xgf
K8uw/k/oQy6xxWGk81LYVn7ijLcP0YR3X0oaO1pHm4mobcl55dv7kUIwjVWt9iBL
Gn1HwtPOUJNjyUQCNWiCAKyMOZqV3fHKo9i0UM581C3CDTw4zTT/m2fdy7gVFICv
tlhoSnGpnc557Mft2TJgO06btRbS2kmGgcrukGAHcW9oAFaS+rMULqNZ74JAEWt8
N9F4l+rM5wvaQzwC2s2dD0PEJTTAZJnhv6JLS5O8YMamFzJuPJ/aBmYPRhgIWaAc
VHaqfituSsOjCeD5IACEUrRNRjami+p00saxcmzf8iR2Z9V5sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWUuNcvs9yckHKIt6FooB2PG6PIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTBmOTEwNmYtMzhkNy0z
MzRjLWJlMGMtMmU4MWM2OGNiNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxN99xgiWOh3RsA7xD7tMRYe0OweoXJ7ISmKooUVdrlsS1UvLG9zBLD
9o2ACqP4e1ikrhJyBitIM4cUeozFtLFx6KnTi/NYIJZSk046L7dLxaGcJwhRmAte
XEwQnAXs/I3dmq0hD5UO7QaI3tuf7uofwlTaoEWOUSSMgh0+cWo5+rFZlpSHTKQ4
0ekXGATod+a0DeaHY+qhyTBuHwd+CcF5tN86uNwWPz4D3TxRneDrNDQL7CZzO+q5
VnP6O3NxoF+0YoluRqtm4t2P0Md2XnrKwK1QiDaJALTNddPX8lJz8ntktaQEcnjm
YmJnNOt5Bqhf74AGNz4YC2WdGniBC08=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:30:41 2026 by rpki-client