
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa
File: 8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa (raw, json)
Hash identifier: srsL2yeSG2Tny6/RyMGCDYc8YhC60ktqofY0k1NVbFo=
Subject key identifier: 81:39:B2:DD:BE:8C:82:1E:E0:FB:49:31:6E:2E:99:6B:EF:D2:98:AF
Certificate issuer: /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
Certificate serial: 010D0C9F4328584E9EAFE79B52F2E42DFABFB490
Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 397376
IP address blocks: 104.251.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:af:e7:9b:52:f2:e4:2d:fa:bf:b4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=73fd3eab-0db2-41ed-a66b-446dfa4d66fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:8e:3f:d7:92:07:a9:38:68:24:dc:94:d6:
a2:af:db:7b:37:d0:59:58:30:86:f7:17:d1:f0:f2:
9b:27:9d:fd:51:85:89:3a:16:96:88:68:29:9d:d1:
ae:a2:de:69:29:a1:3d:e2:6f:4c:47:7f:3e:87:70:
69:94:54:f6:6e:7c:b6:21:47:07:51:83:f5:5e:02:
45:46:39:a8:5a:d1:68:6f:dd:e1:6c:dd:ec:b7:4a:
58:e6:41:ec:45:11:b8:e1:f8:e9:26:47:90:80:29:
76:6c:6b:5f:e6:6d:5b:21:e8:aa:37:0b:85:e2:d2:
43:ef:9c:80:59:c5:53:93:3d:27:49:35:c0:44:9f:
2f:c7:a9:28:84:04:27:0f:57:f6:7a:e8:4a:fc:bf:
53:58:84:76:64:79:e4:1c:52:5f:f4:1d:14:da:cd:
c2:44:79:6a:de:ae:fc:9c:85:5b:61:ef:b6:ba:b1:
aa:b6:dc:29:4c:9b:6e:a5:ea:1a:df:fd:2c:40:7c:
1e:22:d7:d3:fe:a9:e7:7f:37:47:64:b3:db:2c:6f:
29:6f:19:28:70:58:4f:d0:50:69:53:7a:5b:a2:88:
57:6e:d7:f1:e5:41:af:cb:3c:a0:fb:8e:b1:26:42:
e1:51:e1:21:c6:09:af:4b:8a:a2:6f:43:3d:fe:17:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:39:B2:DD:BE:8C:82:1E:E0:FB:49:31:6E:2E:99:6B:EF:D2:98:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl
X509v3 Authority Key Identifier:
keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:c1:e6:00:ea:30:e7:3f:f9:2c:d8:e7:33:1f:47:48:fe:db:
18:07:13:df:1a:45:67:c3:85:95:ba:7f:30:0e:69:51:44:ce:
55:1e:09:e8:c7:fc:99:cd:63:8f:9b:91:f0:2e:02:89:4d:72:
8f:dd:22:33:35:a2:16:c9:80:06:de:a2:ac:09:0e:14:7a:87:
75:1e:64:0a:55:ed:d4:a6:ed:60:1a:9c:98:d6:51:cd:ef:b1:
0e:17:36:8c:32:91:36:c2:74:ab:3d:67:41:eb:d4:50:9e:67:
ae:a4:3d:07:03:a3:70:1a:fe:0d:2d:69:3b:80:a5:ae:59:99:
db:e8:72:a5:cd:33:4b:ec:bc:37:5d:f8:64:a3:92:2b:50:b9:
03:04:46:98:a2:12:58:0a:2d:3b:43:c9:2c:c0:56:f7:22:53:
6d:a7:8b:88:cd:c1:7d:12:23:69:4d:d4:70:84:1a:41:b8:d6:
22:13:19:88:98:48:ba:59:bd:51:94:7c:e8:6d:fc:47:4f:fe:
61:c8:bd:e3:92:5f:5c:dd:d5:14:af:ee:57:9a:8e:ff:29:8e:
60:ca:ff:07:b1:62:51:20:91:36:d6:43:67:14:cc:0a:ea:bd:
85:d1:e3:7a:fd:2a:8d:44:31:79:24:d7:7e:04:8f:b1:93:df:
a0:e6:0e:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+ebUvLkLfq/tJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi
MjNmMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
NzNmZDNlYWItMGRiMi00MWVkLWE2NmItNDQ2ZGZhNGQ2NmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKKOP9eSB6k4aCTclNair9t7N9BZWDCG9xfR
8PKbJ539UYWJOhaWiGgpndGuot5pKaE94m9MR38+h3BplFT2bny2IUcHUYP1XgJF
RjmoWtFob93hbN3st0pY5kHsRRG44fjpJkeQgCl2bGtf5m1bIeiqNwuF4tJD75yA
WcVTkz0nSTXARJ8vx6kohAQnD1f2euhK/L9TWIR2ZHnkHFJf9B0U2s3CRHlq3q78
nIVbYe+2urGqttwpTJtupeoa3/0sQHweItfT/qnnfzdHZLPbLG8pbxkocFhP0FBp
U3pboohXbtfx5UGvyzyg+46xJkLhUeEhxgmvS4qib0M9/hdCCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIE5st2+jIIe4PtJMW4umWvv0pivMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw
NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvOGM0Zjc4NTItYTA3YS0z
ZWJhLWJlNzctYjdiNDAwODJiM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh
MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm
YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5
OWExZmIyM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPu8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIzB5gDqMOc/+SzY5zMfR0j+2xgHE98aRWfDhZW6fzAOaVFEzlUeCejH
/JnNY4+bkfAuAolNco/dIjM1ohbJgAbeoqwJDhR6h3UeZApV7dSm7WAanJjWUc3v
sQ4XNowykTbCdKs9Z0Hr1FCeZ66kPQcDo3Aa/g0taTuApa5ZmdvocqXNM0vsvDdd
+GSjkitQuQMERpiiElgKLTtDySzAVvciU22ni4jNwX0SI2lN1HCEGkG41iITGYiY
SLpZvVGUfOht/EdP/mHIveOSX1zd1RSv7leajv8pjmDK/wexYlEgkTbWQ2cUzArq
vYXR43r9Ko1EMXkk134Ej7GT36DmDok=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:52 2026 by rpki-client