
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa
File: cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa (raw, json)
Hash identifier: BhqcXPjPUUJE+aUs2HVTPUfnFyw9pm74PQxskrSb9to=
Subject key identifier: D2:7D:9D:A8:21:80:3D:A0:48:A8:64:94:32:CE:8F:D0:EC:35:77:D1
Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9
Certificate serial: 010D0C9F4328584EA78F16B1B2A09A65EAAEA000
Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 32821
IP address blocks: 208.94.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:16:b1:b2:a0:9a:65:ea:ae:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d9399086-ec26-445d-8bd2-2ba7055ea47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:b5:6b:86:18:cc:23:f8:9f:e2:aa:6d:18:
ea:60:92:b9:68:3a:ba:bf:ce:f3:4e:b3:77:76:db:
89:a6:3e:4b:d9:c7:24:ef:3a:19:3e:74:11:f3:ff:
18:f9:1c:1c:07:ff:56:6a:39:e0:18:73:ee:74:4b:
a8:64:1e:38:1e:4d:32:04:12:45:39:9c:49:f3:c8:
19:23:18:b5:da:63:15:39:9a:8f:03:d2:c7:1c:8d:
95:cd:4d:5e:ac:68:d4:3b:4a:29:3f:13:fb:34:3d:
e3:12:b7:19:0c:91:a8:57:24:78:58:0b:31:95:62:
59:17:65:e0:9c:05:fc:a9:f2:9e:38:2c:e5:e9:6d:
bf:91:f3:af:2d:32:2b:be:e2:c2:a7:6f:c2:86:a5:
57:cb:dc:02:ba:b0:a5:a2:b8:22:5f:70:b4:01:c6:
11:a8:84:1e:1b:29:e5:b4:80:3d:8b:3f:51:33:ed:
c3:e9:d5:b6:40:bf:99:1c:72:d7:f6:9f:4c:ae:91:
a2:b7:19:8c:6b:74:00:5f:1c:45:e2:6a:cf:74:83:
a6:4d:a1:07:22:cc:37:ba:37:c0:10:9c:14:d7:97:
40:5e:ec:25:77:25:76:e9:9a:9d:97:3e:33:fb:1e:
7b:8d:0b:8f:76:65:f7:67:29:e6:bf:a1:f0:31:15:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:9D:A8:21:80:3D:A0:48:A8:64:94:32:CE:8F:D0:EC:35:77:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl
X509v3 Authority Key Identifier:
keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:74:2e:d4:2e:42:cb:7f:f2:7c:34:e5:b4:8d:15:da:59:06:
56:14:0e:f4:3f:0f:40:ad:51:58:0a:81:ed:bd:41:43:e4:1a:
ed:7f:08:a3:ce:6f:36:15:67:69:5a:97:c5:df:23:c2:22:3d:
bc:da:e0:4d:47:74:c1:14:8d:03:45:ea:7e:8c:ee:33:14:5f:
63:cc:77:10:89:3b:f5:fa:e5:2b:29:ad:35:ab:05:b2:88:7f:
8f:34:9e:d0:56:21:b3:8f:a2:33:7a:fb:7f:f0:ae:28:a8:d7:
11:ec:11:02:96:29:ba:83:3a:3e:92:c9:76:60:93:f1:1c:1f:
2e:b0:9e:2c:f1:24:2c:be:c3:8c:44:3e:ea:34:3d:c0:58:e0:
1c:3a:77:98:fa:77:26:fb:f0:4f:ac:86:92:cf:20:ba:57:08:
c4:07:cd:6e:bf:17:da:65:cc:32:be:0d:f0:42:31:13:31:dd:
92:06:72:20:0f:c3:5a:c0:75:66:90:1b:f3:9f:ad:a3:2f:d8:
56:48:0d:d2:24:16:97:22:16:9d:af:97:ca:42:a8:8c:75:87:
2d:46:32:35:46:d8:81:37:19:11:43:72:25:8d:ae:2d:84:7f:
75:76:b0:0a:ea:45:e9:7a:6c:1f:b0:c8:b3:ad:89:36:79:63:
87:c5:89:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njxaxsqCaZequoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj
YmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDkzOTkwODYtZWMyNi00NDVkLThiZDItMmJhNzA1NWVhNDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoS1a4YYzCP4n+KqbRjqYJK5aDq6v87zTrN3
dtuJpj5L2cck7zoZPnQR8/8Y+RwcB/9WajngGHPudEuoZB44Hk0yBBJFOZxJ88gZ
Ixi12mMVOZqPA9LHHI2VzU1erGjUO0opPxP7ND3jErcZDJGoVyR4WAsxlWJZF2Xg
nAX8qfKeOCzl6W2/kfOvLTIrvuLCp2/ChqVXy9wCurClorgiX3C0AcYRqIQeGynl
tIA9iz9RM+3D6dW2QL+ZHHLX9p9MrpGitxmMa3QAXxxF4mrPdIOmTaEHIsw3ujfA
EJwU15dAXuwldyV26Zqdlz4z+x57jQuPdmX3Zynmv6HwMRW5VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJ9naghgD2gSKhklDLOj9DsNXfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk
YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvY2M1NWMwNTQtNTBhZC0z
ZTUwLWI1YmEtMDQ4NmMwOGIwOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz
NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm
Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl
ZGJlZmNiZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F50MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEt0LtQuQst/8nw05bSNFdpZBlYUDvQ/D0CtUVgKge29QUPkGu1/CKPO
bzYVZ2lal8XfI8IiPbza4E1HdMEUjQNF6n6M7jMUX2PMdxCJO/X65SsprTWrBbKI
f480ntBWIbOPojN6+3/wriio1xHsEQKWKbqDOj6SyXZgk/EcHy6wnizxJCy+w4xE
Puo0PcBY4Bw6d5j6dyb78E+shpLPILpXCMQHzW6/F9plzDK+DfBCMRMx3ZIGciAP
w1rAdWaQG/OfraMv2FZIDdIkFpciFp2vl8pCqIx1hy1GMjVG2IE3GRFDciWNri2E
f3V2sArqRel6bB+wyLOtiTZ5Y4fFifQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:22:30 2026 by rpki-client