
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa
File: f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa (raw, json)
Hash identifier: E2/glg9xkENUORhgK2QHJMux6a8TWvdL4SMiFZ+5JTU=
Subject key identifier: E4:FC:66:60:0C:78:4A:18:F1:41:95:CD:91:E8:22:AA:32:06:91:A8
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F4328584E296F0EB2EE45448DD8072D80
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa
Signing time: Sat 13 Jun 2026 21:00:12 +0000
ROA not before: Sat 13 Jun 2026 21:00:12 +0000
ROA not after: Fri 11 Sep 2026 21:00:12 +0000
asID: 5645
IP address blocks: 104.246.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:6f:0e:b2:ee:45:44:8d:d8:07:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Sep 11 21:00:12 2026 GMT
Subject: CN=4094ae35-8141-41e3-a13f-2dfe5f2e17e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:a2:3c:45:52:14:8b:2e:74:0c:86:46:aa:
ff:bc:06:f8:db:b3:90:4c:48:82:f3:89:dc:40:ac:
5e:14:ee:a5:4b:9c:8f:79:ee:31:c9:c4:cf:4b:fd:
1b:83:04:53:ea:99:cf:81:e6:bc:d9:58:9d:59:32:
51:94:3a:a4:bc:6f:bc:dc:cc:78:7f:1a:2b:79:40:
3a:87:bd:17:0b:8b:2c:14:4d:18:f2:6e:ab:e8:0e:
b2:61:f0:f9:f5:69:98:67:81:de:3e:34:35:c5:e0:
72:da:65:ac:7f:01:fe:ca:31:2d:0f:59:53:41:9f:
a5:58:35:94:21:e0:03:af:ab:b7:df:87:29:c3:d5:
c1:34:2e:98:db:3b:14:8d:ac:9b:75:3c:fd:0e:6b:
4d:45:77:9c:07:c0:f1:6c:15:34:90:24:07:c6:4a:
63:31:c4:c8:bf:c2:ff:3f:eb:74:b4:07:3a:f2:ea:
3d:ae:88:b2:b0:a6:b3:a2:40:6f:de:27:e1:f4:3c:
fb:82:82:16:63:6c:a9:ca:93:bb:52:30:8c:7d:3f:
b4:5f:c0:1c:26:0e:03:17:53:d6:15:2a:52:8b:ef:
04:df:2c:3b:d4:72:df:6b:e4:b5:35:03:ab:60:e3:
d1:4b:bf:6e:f0:ff:c3:b8:69:62:ae:06:ce:44:36:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:66:60:0C:78:4A:18:F1:41:95:CD:91:E8:22:AA:32:06:91:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
104.246.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:cb:ac:05:35:b6:04:ee:da:ab:de:41:85:03:06:83:7d:54:
2b:50:18:8c:af:52:67:04:16:71:db:02:9d:b4:78:71:a6:d1:
9f:cd:f4:f3:c0:0b:01:ae:4c:47:2a:c8:50:be:ab:6d:82:df:
f6:26:2e:83:e7:4a:01:14:3b:a7:9d:47:46:23:fe:04:77:d1:
84:36:4b:1d:e3:e9:1c:e4:f0:93:9b:6d:fb:21:16:b6:a9:1b:
c2:90:d1:d0:22:e0:f3:59:dc:16:c7:76:6f:5f:79:dc:b3:b6:
79:d9:83:56:0d:dc:6b:e7:6e:10:c0:a5:79:4b:4d:07:a1:ed:
26:41:98:d0:78:c1:f0:b9:43:49:df:ba:25:c4:87:12:13:d7:
1a:ab:d9:c3:71:b9:cd:89:ca:14:fd:c5:9a:1e:1d:59:57:38:
7e:7b:df:55:b6:f1:cf:bc:7e:73:d3:e9:3d:88:5e:77:e3:be:
e0:7a:8c:19:b2:de:a2:df:95:7d:c3:23:7e:0f:64:7d:a9:66:
ec:72:43:c4:24:b9:9a:f7:19:96:bc:88:8a:46:2b:26:32:9c:
76:55:0b:06:fd:fb:7f:0e:25:db:6c:55:7e:31:e1:74:b6:72:
b4:50:32:c5:8c:6f:6a:48:e3:e0:73:d3:da:75:9d:ad:b4:ba:
40:ed:da:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbw6y7kVEjdgHLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi
MWNjMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
NDA5NGFlMzUtODE0MS00MWUzLWExM2YtMmRmZTVmMmUxN2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p6iPEVSFIsudAyGRqr/vAb427OQTEiC84nc
QKxeFO6lS5yPee4xycTPS/0bgwRT6pnPgea82VidWTJRlDqkvG+83Mx4fxoreUA6
h70XC4ssFE0Y8m6r6A6yYfD59WmYZ4HePjQ1xeBy2mWsfwH+yjEtD1lTQZ+lWDWU
IeADr6u334cpw9XBNC6Y2zsUjaybdTz9DmtNRXecB8DxbBU0kCQHxkpjMcTIv8L/
P+t0tAc68uo9roiysKazokBv3ifh9Dz7goIWY2ypypO7UjCMfT+0X8AcJg4DF1PW
FSpSi+8E3yw71HLfa+S1NQOrYOPRS79u8P/DuGlirgbORDZEFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOT8ZmAMeEoY8UGVzZHoIqoyBpGoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl
NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZjBiZjA5Y2ItMGJhNi0z
ZjBkLTg1ZDktZDIxYTRjYjg1Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3
NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm
YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh
ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPasMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjLrAU1tgTu2qveQYUDBoN9VCtQGIyvUmcEFnHbAp20eHGm0Z/N9PPA
CwGuTEcqyFC+q22C3/YmLoPnSgEUO6edR0Yj/gR30YQ2Sx3j6Rzk8JObbfshFrap
G8KQ0dAi4PNZ3BbHdm9fedyztnnZg1YN3GvnbhDApXlLTQeh7SZBmNB4wfC5Q0nf
uiXEhxIT1xqr2cNxuc2JyhT9xZoeHVlXOH5731W28c+8fnPT6T2IXnfjvuB6jBmy
3qLflX3DI34PZH2pZuxyQ8QkuZr3GZa8iIpGKyYynHZVCwb9+38OJdtsVX4x4XS2
crRQMsWMb2pI4+Bz09p1na20ukDt2is=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:52:53 2026 by rpki-client