
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa
File: dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa (raw, json)
Hash identifier: N/zCQGA2W82sGHx/krYAH3m0k31hfJZpFThOmt5dGLs=
Subject key identifier: 79:9D:E8:94:B4:8D:2E:FF:9F:1E:9D:EE:0A:62:46:06:21:AD:65:FB
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584EF2E7676D5AA9FA226EF8B9D0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa
Signing time: Tue 25 Aug 2026 01:00:12 +0000
ROA not before: Tue 25 Aug 2026 01:00:12 +0000
ROA not after: Mon 23 Nov 2026 02:00:12 +0000
asID: 27235
IP address blocks: 65.120.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:e7:67:6d:5a:a9:fa:22:6e:f8:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Aug 25 01:00:12 2026 GMT
Not After : Nov 23 02:00:12 2026 GMT
Subject: CN=27f18fbc-3fe3-47a0-aaac-c1421938876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:77:fe:15:01:2d:4f:9a:8b:c2:a5:44:06:
16:75:3e:b8:db:94:97:36:cd:68:a4:76:79:43:0a:
33:c6:69:17:e0:3b:35:6a:f5:5d:21:f3:98:e9:a7:
5d:62:3f:94:2f:7f:81:4d:55:f2:cb:01:9e:74:08:
5e:57:d5:51:25:82:b2:20:ae:e2:d4:73:29:1a:54:
07:74:eb:46:c7:c1:34:bc:5b:bb:c7:82:f3:27:41:
72:a6:bf:dd:46:28:f2:80:10:c6:a6:36:13:18:9a:
bf:69:83:03:17:27:60:84:71:dc:d7:a0:1e:a8:2c:
72:9e:2c:6f:f6:33:02:f7:29:48:03:9c:5e:6b:66:
50:9e:ad:97:e8:00:fa:8b:12:df:b9:81:93:63:0d:
9a:8e:18:cd:ef:af:1b:90:a0:bb:f2:de:d8:bb:f1:
d8:90:a2:cc:ed:2c:40:fd:cf:45:d4:a7:19:8c:bb:
49:c1:d6:5e:05:c6:57:9c:9f:56:b5:23:5d:e6:c4:
21:e7:23:cd:b0:0e:aa:a3:fb:95:94:5d:f3:7a:65:
d0:c4:b3:08:fa:d2:00:4c:2d:71:5a:a7:07:ae:ca:
b2:c0:ab:64:d2:d6:fe:bc:dc:3a:80:f5:f9:a2:22:
57:19:89:11:03:6d:62:c0:c7:db:72:fb:6c:b3:b8:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:E8:94:B4:8D:2E:FF:9F:1E:9D:EE:0A:62:46:06:21:AD:65:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
65.120.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ed:98:e6:e1:7a:e8:b6:3b:80:61:88:01:53:59:c9:2c:7a:
c0:c4:b0:31:3e:5d:44:ff:28:ef:eb:ec:0a:68:b7:e4:7d:3c:
14:0a:f1:f7:ea:2f:c8:03:55:34:48:b0:38:84:03:d0:c9:60:
23:6d:27:b9:7d:11:25:b6:5f:71:0f:a7:d9:94:89:b7:95:16:
33:c2:db:89:1f:77:c7:f5:9c:10:18:11:ea:c9:84:a6:ae:bd:
f1:61:19:28:c5:b0:4e:8f:65:63:79:a5:d5:d6:81:57:95:a1:
46:cb:32:78:9e:c9:dc:9f:84:af:de:ab:66:37:15:2f:e8:6a:
9a:a4:5b:ea:e8:70:e6:a5:6f:5b:33:8a:31:ea:c8:f8:cf:1a:
3e:b6:b5:06:99:82:63:5a:ca:68:6b:3c:23:ca:a1:85:ee:7c:
b2:8e:e8:bb:bf:2f:34:47:94:b8:5a:98:a5:17:2e:47:26:31:
c6:f7:05:e6:30:53:c3:d8:89:a1:79:07:d2:93:1b:e8:d0:03:
37:58:ef:95:11:1e:ba:c5:01:24:df:76:f7:05:f3:cf:5b:9c:
b9:21:87:da:e3:74:ad:fa:39:64:7a:c6:8b:6a:52:71:cd:e8:
cb:dd:24:0d:e6:13:53:4f:af:c7:8e:18:e8:e7:2b:fb:ea:fe:
8c:23:9b:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52dtWqn6Im74udAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk
MjdmMThmYmMtM2ZlMy00N2EwLWFhYWMtYzE0MjE5Mzg4NzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVx3/hUBLU+ai8KlRAYWdT6425SXNs1opHZ5
QwozxmkX4Ds1avVdIfOY6addYj+UL3+BTVXyywGedAheV9VRJYKyIK7i1HMpGlQH
dOtGx8E0vFu7x4LzJ0Fypr/dRijygBDGpjYTGJq/aYMDFydghHHc16AeqCxynixv
9jMC9ylIA5xea2ZQnq2X6AD6ixLfuYGTYw2ajhjN768bkKC78t7Yu/HYkKLM7SxA
/c9F1KcZjLtJwdZeBcZXnJ9WtSNd5sQh5yPNsA6qo/uVlF3zemXQxLMI+tIATC1x
WqcHrsqywKtk0tb+vNw6gPX5oiJXGYkRA21iwMfbcvtss7gNrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmd6JS0jS7/nx6d7gpiRgYhrWX7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZGZlMGVjM2MtMTRiMS0z
YmRmLTlmMjUtNmRjZTc1MWRlMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQXgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATtmObheui2O4BhiAFTWcksesDEsDE+XUT/KO/r7Apot+R9PBQK8ffq
L8gDVTRIsDiEA9DJYCNtJ7l9ESW2X3EPp9mUibeVFjPC24kfd8f1nBAYEerJhKau
vfFhGSjFsE6PZWN5pdXWgVeVoUbLMnieydyfhK/eq2Y3FS/oapqkW+rocOalb1sz
ijHqyPjPGj62tQaZgmNaymhrPCPKoYXufLKO6Lu/LzRHlLhamKUXLkcmMcb3BeYw
U8PYiaF5B9KTG+jQAzdY75URHrrFASTfdvcF889bnLkhh9rjdK36OWR6xotqUnHN
6MvdJA3mE1NPr8eOGOjnK/vq/owjm0g=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:48:51 2026 by rpki-client