
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa
File: d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa (raw, json)
Hash identifier: ioxAJStIrkZBj9T2WWla/RvvKdgVJSJPAO0RkgbMHsM=
Subject key identifier: 7D:1B:FB:E6:26:E6:36:52:F2:41:5F:72:36:50:96:2F:5F:BF:40:F0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F15CCF48988E6AF39D9147F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa
Signing time: Sun 06 Sep 2026 13:00:12 +0000
ROA not before: Sun 06 Sep 2026 13:00:12 +0000
ROA not after: Sat 05 Dec 2026 14:00:12 +0000
asID: 16625
IP address blocks: 104.68.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:15:cc:f4:89:88:e6:af:39:d9:14:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 6 13:00:12 2026 GMT
Not After : Dec 5 14:00:12 2026 GMT
Subject: CN=2bed3b5a-debe-47a8-be4d-fbde43db1c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:cc:cc:d7:70:6f:67:f2:f1:e8:3d:a7:ae:
08:16:e3:2e:46:34:b5:7f:2e:df:14:8f:7e:3a:b5:
a6:55:5d:85:49:de:eb:a2:ff:e8:b0:16:36:b3:93:
ad:c7:55:f1:b3:e7:c7:c5:0e:c9:4f:71:db:ec:0e:
4b:6b:dd:c3:0d:a3:5e:f3:c7:f9:ce:ba:da:31:40:
be:53:2c:5b:04:9f:1e:3f:a9:f4:3d:87:d7:3b:59:
2d:e4:1b:50:72:63:b9:dd:0e:66:81:20:02:d9:6e:
6e:bf:a5:46:4c:31:86:e5:5f:a1:db:2f:79:ad:e4:
1f:65:1f:e0:2e:3c:24:1f:56:9e:af:92:0d:09:2e:
46:03:45:10:35:2d:37:90:9a:9b:cd:0d:ef:a8:73:
fc:84:a8:87:74:a8:12:26:33:31:ff:fd:dd:ff:3e:
ab:0a:04:3f:0a:fe:ca:ee:ec:d6:19:3b:54:dc:ab:
9c:fe:60:8e:32:53:a6:93:42:e3:6f:28:76:25:0d:
8c:64:ef:ee:b8:12:6f:90:7e:6f:e0:2f:de:fb:9c:
cc:64:dc:f2:07:85:9c:bb:8c:56:7d:fd:9d:0a:b9:
d0:47:ee:d2:65:bf:1f:f7:2f:34:12:97:6e:be:88:
bc:97:97:5d:2e:d5:23:54:b7:26:21:09:4c:28:a5:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:FB:E6:26:E6:36:52:F2:41:5F:72:36:50:96:2F:5F:BF:40:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.68.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:99:72:81:22:5c:6b:d0:36:70:e2:22:00:4b:f2:a1:ed:ce:
a3:6a:ec:7f:64:c0:71:34:e7:57:f7:1a:73:04:61:93:da:72:
10:bc:bc:b3:4d:e8:c9:cd:35:fe:c0:82:28:02:f8:6f:46:ba:
63:75:77:9c:4b:de:c9:de:9c:c1:d7:8b:a5:fa:fd:f6:b8:cd:
9f:50:86:96:56:63:76:3c:09:d7:b2:cc:5d:b3:70:f3:21:4f:
18:89:1b:ca:58:07:60:78:7f:9b:d3:88:89:fb:8e:9d:e4:5f:
a5:93:de:22:79:d5:7c:3d:a7:bb:7f:ed:67:44:78:1c:e7:39:
1d:05:c4:8f:74:24:26:14:52:63:e3:6a:fd:e1:3c:ca:62:95:
d0:31:ae:b7:fa:85:20:bf:9d:82:7d:56:47:7a:33:6d:58:15:
ed:0b:65:bc:be:7b:01:5b:0d:ca:33:f9:98:fc:cd:d1:74:ed:
78:ba:47:34:15:eb:00:da:ed:8f:a6:f1:68:5b:3c:ba:41:87:
b1:5c:f2:9b:82:bc:c0:34:eb:db:d9:e5:37:a1:e2:2e:96:39:
bf:13:54:4f:b6:1f:ae:91:ee:88:c0:1e:d1:a3:05:43:91:93:
93:d1:52:5e:81:1e:5e:b8:76:66:bc:22:4a:7e:09:74:31:dc:
1a:87:f4:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPSJiOavOdkUf0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk
MmJlZDNiNWEtZGViZS00N2E4LWJlNGQtZmJkZTQzZGIxYzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RnMzNdwb2fy8eg9p64IFuMuRjS1fy7fFI9+
OrWmVV2FSd7rov/osBY2s5Otx1Xxs+fHxQ7JT3Hb7A5La93DDaNe88f5zrraMUC+
UyxbBJ8eP6n0PYfXO1kt5BtQcmO53Q5mgSAC2W5uv6VGTDGG5V+h2y95reQfZR/g
LjwkH1aer5INCS5GA0UQNS03kJqbzQ3vqHP8hKiHdKgSJjMx//3d/z6rCgQ/Cv7K
7uzWGTtU3Kuc/mCOMlOmk0Ljbyh2JQ2MZO/uuBJvkH5v4C/e+5zMZNzyB4Wcu4xW
ff2dCrnQR+7SZb8f9y80Epduvoi8l5ddLtUjVLcmIQlMKKWVVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0b++Ym5jZS8kFfcjZQli9fv0DwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRhYjc5ZmEtNDhjMi0z
NDZjLWI4MTctNTJlN2IyY2M4ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+ZcoEiXGvQNnDiIgBL8qHtzqNq7H9kwHE051f3GnMEYZPachC8vLNN
6MnNNf7AgigC+G9GumN1d5xL3snenMHXi6X6/fa4zZ9QhpZWY3Y8CdeyzF2zcPMh
TxiJG8pYB2B4f5vTiIn7jp3kX6WT3iJ51Xw9p7t/7WdEeBznOR0FxI90JCYUUmPj
av3hPMpildAxrrf6hSC/nYJ9Vkd6M21YFe0LZby+ewFbDcoz+Zj8zdF07Xi6RzQV
6wDa7Y+m8WhbPLpBh7Fc8puCvMA069vZ5Teh4i6WOb8TVE+2H66R7ojAHtGjBUOR
k5PRUl6BHl64dma8Ikp+CXQx3BqH9LY=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:13:35 2026 by rpki-client