
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa
File: 8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa (raw, json)
Hash identifier: /AnfbuGGTZTnQtSUopFzxbF1WG9ROaBxwJj0d1YOlXU=
Subject key identifier: AB:1E:14:16:F5:30:E6:9D:62:97:30:76:CD:A9:B9:21:4D:1B:71:C8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E7A64E47904D638B5899234C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa
Signing time: Sun 12 Jul 2026 21:00:13 +0000
ROA not before: Sun 12 Jul 2026 21:00:13 +0000
ROA not after: Sat 10 Oct 2026 21:00:13 +0000
asID: 20940
IP address blocks: 104.125.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7a:64:e4:79:04:d6:38:b5:89:92:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 12 21:00:13 2026 GMT
Not After : Oct 10 21:00:13 2026 GMT
Subject: CN=5a3ca43a-bd3d-437d-a03d-8f46fb53c84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:d4:3a:4e:ec:27:7b:a9:f1:b4:94:06:b6:
e1:01:ee:6a:18:c7:7d:28:83:37:08:f4:2a:50:fe:
f7:87:60:0d:44:c7:a5:aa:a2:90:c9:df:42:71:69:
70:91:33:94:11:54:fb:c7:00:c1:29:ef:7b:f2:4f:
59:07:e2:c6:fa:51:9c:85:40:95:eb:17:99:91:24:
2a:a9:9c:c7:9d:6b:08:bd:7f:cb:80:80:1c:b3:db:
7b:6a:21:d3:02:bb:82:96:88:26:c7:9a:cf:5f:38:
03:8d:01:e3:be:cc:4c:ea:32:f5:5b:24:1d:a4:49:
c8:50:ba:ff:32:5d:be:cb:0b:ca:46:09:6b:b2:a1:
f7:97:8b:f2:d6:0a:71:09:04:18:04:5a:9e:af:94:
95:b8:8c:20:17:80:3f:41:d8:aa:8e:d8:dc:71:55:
95:8b:c9:47:b6:5a:1c:2f:0d:6e:90:c5:8a:59:07:
9d:97:5e:6c:ac:54:ac:56:ab:30:77:93:cb:25:ce:
17:d6:49:32:91:a3:b8:da:fd:40:a2:58:2a:8b:1a:
20:f4:0e:11:76:c9:44:ee:fc:f4:80:f4:c6:c4:31:
2c:45:3a:2b:e0:b5:a2:9d:cc:af:ef:24:02:f6:b1:
05:57:28:59:80:e6:a7:a5:2e:5e:c7:ba:95:a8:c3:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:14:16:F5:30:E6:9D:62:97:30:76:CD:A9:B9:21:4D:1B:71:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.125.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e2:54:4a:5a:e7:f4:cc:7b:35:77:bb:6f:0e:5f:95:a2:45:
da:ad:ba:a8:a2:96:fc:7c:fb:ab:61:2c:7a:b1:8e:49:56:34:
b0:4d:68:3f:1e:e8:82:a8:31:a0:e9:f5:7c:f2:c5:a9:4c:79:
74:6d:94:50:66:64:5d:5c:ca:a8:5a:94:d3:a1:2a:63:06:02:
75:f6:74:34:f2:5e:bc:ec:35:55:9f:b7:b7:a2:2d:a2:db:d5:
ab:81:1b:0f:77:2c:58:c1:ca:8c:24:d5:e7:39:d6:e3:01:5f:
95:49:14:95:9c:f0:46:36:19:c9:90:9a:52:4c:f6:bb:66:26:
c1:90:05:a5:2b:44:48:61:ba:1d:64:07:e8:91:89:93:de:44:
fe:fb:06:b2:ba:b1:f2:b5:00:9b:d8:cb:21:7a:da:cd:30:65:
9c:ea:da:69:65:64:a1:eb:b6:95:fd:78:33:11:91:34:a8:3f:
98:72:4b:c1:8e:b4:3d:1d:8f:8f:77:b5:92:fc:73:5c:4f:f5:
95:5a:f5:9b:75:2d:d4:b2:d5:ab:e7:29:24:36:2f:6b:ef:80:
80:41:25:35:cf:03:37:a6:ee:60:06:36:be:22:d7:00:df:59:
e8:d0:f8:78:4a:29:ce:8f:c9:cc:8e:00:3f:42:32:cf:ed:eb:
5e:40:88:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOR5BNY4tYmSNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
NWEzY2E0M2EtYmQzZC00MzdkLWEwM2QtOGY0NmZiNTNjODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliDUOk7sJ3up8bSUBrbhAe5qGMd9KIM3CPQq
UP73h2ANRMelqqKQyd9CcWlwkTOUEVT7xwDBKe978k9ZB+LG+lGchUCV6xeZkSQq
qZzHnWsIvX/LgIAcs9t7aiHTAruClogmx5rPXzgDjQHjvsxM6jL1WyQdpEnIULr/
Ml2+ywvKRglrsqH3l4vy1gpxCQQYBFqer5SVuIwgF4A/QdiqjtjccVWVi8lHtloc
Lw1ukMWKWQedl15srFSsVqswd5PLJc4X1kkykaO42v1Aolgqixog9A4RdslE7vz0
gPTGxDEsRTor4LWincyv7yQC9rEFVyhZgOanpS5ex7qVqMMsaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKseFBb1MOadYpcwds2puSFNG3HIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMyZGQyMjQtMzI0OS0z
M2Y1LTkxNTktYzE2OTRjNGYxY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH1SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTiVEpa5/TMezV3u28OX5WiRdqtuqiilvx8+6thLHqxjklWNLBNaD8e
6IKoMaDp9XzyxalMeXRtlFBmZF1cyqhalNOhKmMGAnX2dDTyXrzsNVWft7eiLaLb
1auBGw93LFjByowk1ec51uMBX5VJFJWc8EY2GcmQmlJM9rtmJsGQBaUrREhhuh1k
B+iRiZPeRP77BrK6sfK1AJvYyyF62s0wZZzq2mllZKHrtpX9eDMRkTSoP5hyS8GO
tD0dj493tZL8c1xP9ZVa9Zt1LdSy1avnKSQ2L2vvgIBBJTXPAzem7mAGNr4i1wDf
WejQ+HhKKc6PycyOAD9CMs/t615AiPI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:33 2026 by rpki-client