
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98f5b772-1580-32eb-bba1-9444e2b87f8b.roa
File: 98f5b772-1580-32eb-bba1-9444e2b87f8b.roa (raw, json)
Hash identifier: q3sCQlLLHD4quykY3bLic26lFnm22/+USFdU4+f09P4=
Subject key identifier: A3:48:AD:25:39:1F:18:A3:4E:A2:85:9C:B9:12:49:0D:C4:96:0C:A2
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F3BBF5C832B6CCADFC43FEE80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98f5b772-1580-32eb-bba1-9444e2b87f8b.roa
Signing time: Sun 20 Sep 2026 03:13:43 +0000
ROA not before: Sun 20 Sep 2026 03:13:43 +0000
ROA not after: Sat 19 Dec 2026 04:13:43 +0000
asID: 402288
IP address blocks: 64.205.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3b:bf:5c:83:2b:6c:ca:df:c4:3f:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 20 03:13:43 2026 GMT
Not After : Dec 19 04:13:43 2026 GMT
Subject: CN=a23401f5-9da9-49aa-9566-121b41f0e4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:b0:ac:dc:0a:ff:79:c7:bb:6e:95:40:c2:
09:d7:56:43:78:dd:04:7e:50:90:85:cb:27:66:14:
17:5f:2f:34:d4:b8:7c:2c:53:d9:39:32:9f:67:e1:
a9:5e:46:f0:f6:ab:35:04:09:38:cb:b3:1a:ff:4d:
2e:23:6c:0e:a5:ef:ef:19:14:6a:cf:19:b2:ed:47:
f4:e6:93:0c:d6:18:9a:1d:aa:97:6b:71:8a:e2:31:
ad:3c:e9:c8:ee:22:1d:72:56:e5:f9:ab:12:ff:b5:
24:10:92:5d:81:b3:3a:7a:79:c4:b2:eb:e4:ae:35:
20:05:fb:3b:8e:66:8c:20:cf:5a:ef:34:a7:e9:6a:
0f:9c:cb:f2:63:af:78:23:8b:74:b5:f0:f9:3d:cb:
9c:57:d0:36:cf:f5:53:60:c6:97:a5:c9:59:d9:24:
ff:cc:4f:ba:cf:d9:c8:12:31:62:4e:b9:46:f1:f2:
9f:d1:8f:68:7c:cf:b3:d7:cb:38:22:b0:27:8a:9b:
a5:9f:60:df:89:14:40:cf:82:38:5e:1c:56:6c:97:
3c:60:5f:7f:6e:10:39:7c:11:96:e8:38:24:7b:6d:
19:3e:31:90:c8:66:e4:c6:d6:be:e9:12:df:c6:e9:
14:06:5c:7c:57:6b:c1:62:59:f8:1c:15:2c:e9:24:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:48:AD:25:39:1F:18:A3:4E:A2:85:9C:B9:12:49:0D:C4:96:0C:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98f5b772-1580-32eb-bba1-9444e2b87f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.205.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:0e:df:37:9f:e6:cc:59:8d:a2:42:32:4a:fa:44:79:92:3f:
c3:c8:d1:8c:46:0a:33:0d:09:bc:95:28:3e:8d:6f:58:be:c7:
20:83:82:90:95:87:3f:e6:a0:3d:ae:c1:57:0e:e3:86:1e:16:
ba:63:82:03:2a:2e:97:27:92:31:81:1f:9a:e7:a7:e2:b9:bd:
3e:65:3f:46:00:11:39:bd:54:d9:ba:a1:14:48:b3:b0:21:b4:
b5:55:20:05:d3:08:3a:ac:cb:d6:e8:01:07:fa:6f:ac:56:9e:
8c:c6:96:a0:7a:79:2f:12:05:5d:f3:f0:c8:8f:45:d0:51:72:
5a:0e:f5:ae:20:f8:a1:4a:fa:88:bb:df:b7:3b:a6:14:e0:0f:
6a:8e:01:f2:82:56:b7:d8:4d:e8:74:fa:72:c4:ef:f4:9a:42:
16:14:84:eb:6c:79:d4:61:c4:3f:52:db:1a:1d:72:a0:29:0a:
37:12:9e:fe:18:77:b0:c6:ae:ae:fb:a8:f3:f5:d2:8a:99:4f:
fe:2a:4f:92:3f:f4:b9:e1:6b:11:3b:2b:ba:07:7a:4e:04:ca:
c0:5d:7a:8d:92:e7:d9:e9:a9:75:68:57:9e:df:bd:e6:93:64:
ed:03:10:bb:c3:7e:cd:9a:02:94:53:88:f3:04:fe:af:f1:7f:
48:58:f0:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87v1yDK2zK38Q/7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyMDAzMTM0M1oXDTI2MTIxOTA0MTM0M1owLzEtMCsGA1UEAxMk
YTIzNDAxZjUtOWRhOS00OWFhLTk1NjYtMTIxYjQxZjBlNGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFiwrNwK/3nHu26VQMIJ11ZDeN0EflCQhcsn
ZhQXXy801Lh8LFPZOTKfZ+GpXkbw9qs1BAk4y7Ma/00uI2wOpe/vGRRqzxmy7Uf0
5pMM1hiaHaqXa3GK4jGtPOnI7iIdclbl+asS/7UkEJJdgbM6ennEsuvkrjUgBfs7
jmaMIM9a7zSn6WoPnMvyY694I4t0tfD5PcucV9A2z/VTYMaXpclZ2ST/zE+6z9nI
EjFiTrlG8fKf0Y9ofM+z18s4IrAnipuln2DfiRRAz4I4XhxWbJc8YF9/bhA5fBGW
6Dgke20ZPjGQyGbkxta+6RLfxukUBlx8V2vBYln4HBUs6STWiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNIrSU5HxijTqKFnLkSSQ3ElgyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOThmNWI3NzItMTU4MC0z
MmViLWJiYTEtOTQ0NGUyYjg3ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM1lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsO3zef5sxZjaJCMkr6RHmSP8PI0YxGCjMNCbyVKD6Nb1i+xyCDgpCV
hz/moD2uwVcO44YeFrpjggMqLpcnkjGBH5rnp+K5vT5lP0YAETm9VNm6oRRIs7Ah
tLVVIAXTCDqsy9boAQf6b6xWnozGlqB6eS8SBV3z8MiPRdBRcloO9a4g+KFK+oi7
37c7phTgD2qOAfKCVrfYTeh0+nLE7/SaQhYUhOtsedRhxD9S2xodcqApCjcSnv4Y
d7DGrq77qPP10oqZT/4qT5I/9LnhaxE7K7oHek4EysBdeo2S59npqXVoV57fveaT
ZO0DELvDfs2aApRTiPME/q/xf0hY8FQ=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:55:18 2026 by rpki-client