
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5550559f-2761-3d7e-bc61-658f8f814985.roa
File: 5550559f-2761-3d7e-bc61-658f8f814985.roa (raw, json)
Hash identifier: cmjEFpjR9i1gcXxNR0w6orrLDhtVrCck5D68REVMfQo=
Subject key identifier: 11:56:46:57:79:78:B4:68:EF:42:36:71:27:EE:EC:8D:6B:CB:8C:06
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F3052747F2451FCCAEB1B6800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5550559f-2761-3d7e-bc61-658f8f814985.roa
Signing time: Wed 16 Sep 2026 01:00:12 +0000
ROA not before: Wed 16 Sep 2026 01:00:12 +0000
ROA not after: Tue 15 Dec 2026 02:00:12 +0000
asID: 399955
IP address blocks: 72.244.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:30:52:74:7f:24:51:fc:ca:eb:1b:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 16 01:00:12 2026 GMT
Not After : Dec 15 02:00:12 2026 GMT
Subject: CN=7e66876a-cddf-41f1-aa28-bc1fe8964263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:c2:b4:85:36:4d:03:7c:6e:2f:05:05:8d:
23:75:93:3f:f4:b4:98:f7:3b:59:90:49:d2:4e:0a:
0f:78:10:66:2f:38:1f:d9:9a:29:90:60:5e:0f:4a:
ba:07:09:1c:e4:8c:68:d5:72:5f:72:81:12:3c:df:
58:ca:2c:68:4c:df:5c:88:26:f4:a1:0d:38:b6:8c:
2f:94:6e:ed:ad:87:bd:a0:47:1f:a6:27:d6:a2:7b:
45:45:12:9a:c3:33:94:cd:02:bb:11:b0:01:1f:a8:
31:7d:21:c6:87:5a:49:b7:5d:d6:ec:eb:82:43:1b:
5b:09:6b:d9:9f:b2:0d:52:8b:90:7d:a0:48:b8:a2:
37:a3:07:0c:22:d4:43:a9:ec:73:7f:0d:95:a8:3a:
41:15:6b:01:b8:79:d2:92:76:99:5f:bd:c5:0e:51:
35:2c:cf:49:9a:02:d9:9c:ec:5e:10:14:8f:fa:e5:
07:67:f0:dc:e6:72:af:38:f3:8e:10:0e:16:c1:ee:
3a:ce:76:4a:b7:9c:31:bf:d9:c0:8b:d1:59:d1:f1:
de:d8:52:d9:9c:d8:1f:b1:f8:38:ea:21:29:9b:5d:
17:c5:47:ef:b2:d2:3b:3e:94:67:7e:2f:12:25:cc:
94:b1:26:06:b7:f1:5b:2d:09:21:08:36:0d:f1:1a:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:46:57:79:78:B4:68:EF:42:36:71:27:EE:EC:8D:6B:CB:8C:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5550559f-2761-3d7e-bc61-658f8f814985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.244.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:5b:c1:d5:0a:9e:db:04:0e:a9:e0:a2:71:09:31:c3:29:b6:
4e:5c:6d:8d:8e:29:d8:a9:3b:14:06:44:ed:14:50:b2:f9:c7:
77:c9:eb:c7:15:40:7b:10:3f:a2:96:e7:3c:62:41:31:e3:fe:
cd:5f:54:90:9d:81:8f:9e:cc:f3:6f:c8:ad:8e:d3:ad:3a:9f:
04:b3:20:3e:5a:cc:e0:fe:61:54:54:30:d3:a7:45:ea:7a:79:
64:48:f8:9f:93:f8:24:be:24:e8:d8:a7:80:3a:44:c2:46:92:
f4:e7:89:36:7c:ff:7c:ae:44:6d:81:54:41:29:dc:68:74:c2:
86:6b:89:d9:e9:bc:41:36:68:51:14:ba:77:20:9b:7c:4d:5c:
99:60:43:cb:16:af:9d:78:d7:76:e2:41:8e:0d:c8:e6:15:44:
a4:41:8f:43:96:c7:0e:b2:f7:99:3a:6a:0b:b8:ea:ed:f5:9c:
e8:3f:58:ea:d7:a9:58:21:85:53:ee:c6:ea:8a:c2:3c:02:2e:
18:aa:f6:7b:64:ae:84:14:14:76:6b:5c:28:1b:ef:9e:b9:4a:
32:81:bf:32:5b:13:2b:28:ce:7b:e8:6b:2e:32:78:48:00:cf:
93:07:37:f1:3d:43:13:b6:8d:98:b8:e8:82:ad:3c:db:42:ef:
47:54:4a:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnR/JFH8yusbaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
N2U2Njg3NmEtY2RkZi00MWYxLWFhMjgtYmMxZmU4OTY0MjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi87CtIU2TQN8bi8FBY0jdZM/9LSY9ztZkEnS
TgoPeBBmLzgf2ZopkGBeD0q6Bwkc5Ixo1XJfcoESPN9YyixoTN9ciCb0oQ04towv
lG7trYe9oEcfpifWontFRRKawzOUzQK7EbABH6gxfSHGh1pJt13W7OuCQxtbCWvZ
n7INUouQfaBIuKI3owcMItRDqexzfw2VqDpBFWsBuHnSknaZX73FDlE1LM9JmgLZ
nOxeEBSP+uUHZ/Dc5nKvOPOOEA4Wwe46znZKt5wxv9nAi9FZ0fHe2FLZnNgfsfg4
6iEpm10XxUfvstI7PpRnfi8SJcyUsSYGt/FbLQkhCDYN8Ro0TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFWRld5eLRo70I2cSfu7I1ry4wGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTU1MDU1OWYtMjc2MS0z
ZDdlLWJjNjEtNjU4ZjhmODE0OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZbwdUKntsEDqngonEJMcMptk5cbY2OKdipOxQGRO0UULL5x3fJ68cV
QHsQP6KW5zxiQTHj/s1fVJCdgY+ezPNvyK2O0606nwSzID5azOD+YVRUMNOnRep6
eWRI+J+T+CS+JOjYp4A6RMJGkvTniTZ8/3yuRG2BVEEp3Gh0woZridnpvEE2aFEU
uncgm3xNXJlgQ8sWr51413biQY4NyOYVRKRBj0OWxw6y95k6agu46u31nOg/WOrX
qVghhVPuxuqKwjwCLhiq9ntkroQUFHZrXCgb7565SjKBvzJbEysoznvoay4yeEgA
z5MHN/E9QxO2jZi46IKtPNtC70dUSv4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:02:11 2026 by rpki-client