
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/5a079c07-d9ee-3d0e-a1de-f25dee70a27f.roa
File: 5a079c07-d9ee-3d0e-a1de-f25dee70a27f.roa (raw, json)
Hash identifier: SQyClS+KXDh9VXLE3dbdjH9ILS+Ut2Xmw+ap/pcvC+w=
Subject key identifier: D9:2B:74:16:EC:60:87:45:80:27:C3:C3:F3:52:37:17:9C:5E:23:03
Certificate issuer: /CN=df942add-d6be-4a15-ae72-38bdca0242c4
Certificate serial: 010D0C9F4328584F3CE2A8840E9A46F244615280
Authority key identifier: 8F:7E:EE:40:4C:90:3A:63:E5:05:24:16:0C:25:74:CF:A7:A0:E0:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/5a079c07-d9ee-3d0e-a1de-f25dee70a27f.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 393434
IP address blocks: 172.83.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:a8:84:0e:9a:46:f2:44:61:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df942add-d6be-4a15-ae72-38bdca0242c4
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=f2759a13-a150-4bb0-80cc-728dd773ce7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d5:49:4b:3a:24:b5:9f:ef:1c:c4:c1:7c:78:
cb:14:dd:53:a5:c1:ad:46:c7:c2:2e:87:a9:53:a9:
f8:35:6c:98:97:84:c9:eb:23:74:e7:ce:bc:f2:06:
44:22:13:6c:98:46:13:b9:d0:66:25:d9:12:02:5e:
be:d8:3d:52:3a:50:85:a7:7e:eb:56:a2:2e:04:3c:
58:31:c2:11:bf:e6:db:1b:54:0a:36:0f:52:5b:93:
44:41:ef:95:35:63:f3:a0:73:59:cb:03:f2:ea:41:
3e:3f:fe:10:0f:cd:cf:2d:00:d1:50:b8:0f:9f:b2:
bd:a5:d1:65:18:6b:52:2d:25:4f:ef:93:7f:42:eb:
3e:96:6b:81:92:7f:e0:4e:be:ba:f2:8e:6c:cf:a3:
61:ea:b3:88:e7:07:aa:7b:b8:28:a5:53:bb:41:6c:
22:7f:12:ae:63:66:24:95:f8:04:4c:21:1a:94:50:
36:7c:47:33:99:ee:f4:e9:28:79:c6:03:98:29:3d:
4c:2c:c1:af:4e:4c:75:5a:20:1f:25:3b:9c:92:86:
74:ab:8c:92:05:da:0e:59:30:f1:8d:12:06:4b:19:
d2:82:94:d5:21:15:8d:c2:8c:88:9e:33:ea:86:ff:
cf:a5:96:71:2d:63:3e:ce:91:67:a7:b3:9a:1a:d4:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:74:16:EC:60:87:45:80:27:C3:C3:F3:52:37:17:9C:5E:23:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/5a079c07-d9ee-3d0e-a1de-f25dee70a27f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.crl
X509v3 Authority Key Identifier:
keyid:8F:7E:EE:40:4C:90:3A:63:E5:05:24:16:0C:25:74:CF:A7:A0:E0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:53:d9:43:0b:19:f2:52:eb:87:d5:70:97:c6:7a:06:b2:78:
80:93:f2:bf:9d:46:b2:c2:36:ca:a1:bc:db:97:36:94:70:ca:
d4:82:f7:b6:5b:ca:fa:f0:18:a1:c9:40:b4:e3:bb:1e:8e:1b:
b4:44:73:b5:2a:4a:61:5b:4c:86:79:aa:2a:c3:e1:af:2b:33:
18:f8:a0:a1:ae:9b:dd:71:74:95:23:fd:3b:bc:db:4b:cc:c1:
37:38:ae:c6:53:29:50:b4:2c:d0:21:14:8a:f5:a4:98:4d:65:
83:78:ce:bb:1a:3a:bb:51:f8:7e:a3:ab:94:ee:bc:46:71:3e:
7d:24:4e:53:f6:f6:2c:43:8c:85:63:99:04:9e:7e:aa:0b:34:
9d:cd:7a:43:70:70:8f:cf:e7:65:0b:35:c5:92:ce:9a:da:26:
e5:5f:d5:b9:a7:f0:bd:94:80:bb:61:10:bd:fe:4b:61:d2:59:
c9:7d:a8:97:12:f2:e4:3f:5c:96:81:92:a6:4c:ed:29:98:94:
39:34:46:84:b1:2e:b7:2b:21:de:88:31:56:a7:6f:59:7c:1b:
a5:fd:78:89:99:bb:07:54:32:3b:b7:ab:eb:67:ae:c9:20:f6:
8d:e9:af:af:c6:a3:55:2f:73:d6:29:da:ed:89:cb:3d:2f:fe:
09:6c:21:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qiEDppG8kRhUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY5NDJhZGQtZDZiZS00YTE1LWFlNzItMzhiZGNhMDI0
MmM0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
ZjI3NTlhMTMtYTE1MC00YmIwLTgwY2MtNzI4ZGQ3NzNjZTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdVJSzoktZ/vHMTBfHjLFN1TpcGtRsfCLoep
U6n4NWyYl4TJ6yN058688gZEIhNsmEYTudBmJdkSAl6+2D1SOlCFp37rVqIuBDxY
McIRv+bbG1QKNg9SW5NEQe+VNWPzoHNZywPy6kE+P/4QD83PLQDRULgPn7K9pdFl
GGtSLSVP75N/Qus+lmuBkn/gTr668o5sz6Nh6rOI5weqe7gopVO7QWwifxKuY2Yk
lfgETCEalFA2fEczme706Sh5xgOYKT1MLMGvTkx1WiAfJTuckoZ0q4ySBdoOWTDx
jRIGSxnSgpTVIRWNwoyInjPqhv/PpZZxLWM+zpFnp7OaGtRXQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkrdBbsYIdFgCfDw/NSNxecXiMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZjk0
MmFkZC1kNmJlLTRhMTUtYWU3Mi0zOGJkY2EwMjQyYzQvNWEwNzljMDctZDllZS0z
ZDBlLWExZGUtZjI1ZGVlNzBhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZGY5NDJhZGQtZDZiZS00YTE1LWFl
NzItMzhiZGNhMDI0MmM0L2RmOTQyYWRkLWQ2YmUtNGExNS1hZTcyLTM4YmRjYTAy
NDJjNC5jcmwwHwYDVR0jBBgwFoAUj37uQEyQOmPlBSQWDCV0z6eg4KkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZjk0MmFkZC1kNmJlLTRhMTUtYWU3Mi0zOGJk
Y2EwMjQyYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFPOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANT2UMLGfJS64fVcJfGegayeICT8r+dRrLCNsqhvNuXNpRwytSC97Zb
yvrwGKHJQLTjux6OG7REc7UqSmFbTIZ5qirD4a8rMxj4oKGum91xdJUj/Tu820vM
wTc4rsZTKVC0LNAhFIr1pJhNZYN4zrsaOrtR+H6jq5TuvEZxPn0kTlP29ixDjIVj
mQSefqoLNJ3NekNwcI/P52ULNcWSzpraJuVf1bmn8L2UgLthEL3+S2HSWcl9qJcS
8uQ/XJaBkqZM7SmYlDk0RoSxLrcrId6IMVanb1l8G6X9eImZuwdUMju3q+tnrskg
9o3pr6/Go1Uvc9Yp2u2Jyz0v/glsIR0=
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:55:31 2026 by rpki-client