
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa
File: 9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa (raw, json)
Hash identifier: VbZNe4svPkx9Yd5Zc9eLEYMOgeQ2M/aydZ6ChapiY7E=
Subject key identifier: AA:46:C4:72:B6:93:97:9F:9F:26:98:90:10:10:DD:92:B9:08:F0:D5
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F549DAC1175B8609FD0ED1120
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 63.142.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:ac:11:75:b8:60:9f:d0:ed:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=12f88885-8911-4bfe-94ea-828c1d82194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:fd:d6:4c:ab:bb:b1:b0:c2:2b:3e:14:6d:
1d:67:fa:2e:47:fb:04:f6:36:de:99:33:10:fe:bf:
c0:70:3e:36:1c:ca:3f:3d:13:b1:c1:ad:95:d2:7d:
8a:5d:29:93:e0:5c:19:a5:95:58:71:1d:44:dd:e5:
73:7b:24:a6:b6:54:2e:0c:fe:17:95:02:c8:f0:a8:
40:14:54:eb:eb:53:68:4d:3b:e3:0e:fe:2c:8e:04:
72:21:74:8c:74:09:1e:a0:7f:34:53:fd:40:50:4a:
35:11:05:1d:d2:05:9b:94:10:de:14:85:34:b9:bb:
c4:6a:ca:69:b9:25:bf:d3:8c:03:fe:84:d4:35:93:
5c:47:17:c6:cc:5c:15:22:90:f6:dd:2c:19:1b:db:
77:ee:01:93:99:40:d9:84:40:16:cb:d4:9a:b9:d4:
9c:ac:61:ae:82:d7:6f:59:9e:f9:fb:3e:86:fd:75:
34:91:0c:7c:c9:b8:7a:1a:8c:00:ea:22:99:18:11:
bc:75:11:80:34:56:31:aa:a3:3e:b3:91:c9:aa:35:
3b:bc:fc:ab:d7:ce:e8:c1:35:c7:ab:61:48:80:bf:
29:b2:8d:e4:47:ec:ba:99:1a:60:32:8c:98:b9:a9:
2f:a0:af:3b:f9:81:a9:f6:07:92:3d:17:5d:04:da:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:C4:72:B6:93:97:9F:9F:26:98:90:10:10:DD:92:B9:08:F0:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
63.142.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:c5:b3:cd:20:5b:83:0c:f1:cf:da:00:7a:d6:a7:c2:41:98:
f0:16:20:64:09:fe:58:56:8d:d0:c9:a9:78:b4:ef:d7:f9:1a:
06:e7:7b:20:a2:45:b9:83:36:61:a9:6a:49:f0:04:23:27:83:
97:ce:07:19:59:8f:0f:dd:5c:cd:8a:32:37:d2:1b:fc:0c:fa:
d8:93:18:6a:af:bb:1a:24:a8:c0:12:d2:5f:db:39:83:0a:48:
a7:8e:9a:bc:45:b4:1f:75:19:37:d8:ab:64:2f:35:cd:94:c3:
51:de:dc:f6:85:17:6d:8f:b5:26:fb:1e:a1:73:40:59:2e:4a:
1e:e1:f2:d9:93:51:cd:fa:24:c8:5b:3a:f4:02:df:dc:e0:52:
5c:ea:5d:ff:ed:4e:52:a1:53:64:1a:c6:2e:38:fd:ec:b1:d8:
88:18:a1:c0:d5:73:2b:c5:e3:e2:6c:56:7e:33:0b:02:e1:bf:
ac:e8:70:dc:ee:d0:89:82:86:32:b6:d3:94:2b:61:3f:6c:5a:
27:fa:ef:92:a8:8f:6c:ac:37:0c:a3:88:b0:5d:6b:72:4e:4f:
c5:ce:fa:54:6a:15:74:30:ab:e1:83:6e:10:6e:52:71:be:9d:
20:5a:dc:74:b7:81:a4:25:8f:39:e0:41:cf:cd:74:a5:e6:49:
be:77:e5:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnawRdbhgn9DtESAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MTJmODg4ODUtODkxMS00YmZlLTk0ZWEtODI4YzFkODIxOTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TT91kyru7Gwwis+FG0dZ/ouR/sE9jbemTMQ
/r/AcD42HMo/PROxwa2V0n2KXSmT4FwZpZVYcR1E3eVzeySmtlQuDP4XlQLI8KhA
FFTr61NoTTvjDv4sjgRyIXSMdAkeoH80U/1AUEo1EQUd0gWblBDeFIU0ubvEaspp
uSW/04wD/oTUNZNcRxfGzFwVIpD23SwZG9t37gGTmUDZhEAWy9SaudScrGGugtdv
WZ75+z6G/XU0kQx8ybh6GowA6iKZGBG8dRGANFYxqqM+s5HJqjU7vPyr187owTXH
q2FIgL8pso3kR+y6mRpgMoyYuakvoK87+YGp9geSPRddBNrDkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpGxHK2k5efnyaYkBAQ3ZK5CPDVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWNhZTMyNDgtMGViOC0z
NDY5LWI0YWYtYWVjYjQxZDVlZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFP44gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfFs80gW4MM8c/aAHrWp8JBmPAWIGQJ/lhWjdDJqXi079f5GgbneyCi
RbmDNmGpaknwBCMng5fOBxlZjw/dXM2KMjfSG/wM+tiTGGqvuxokqMAS0l/bOYMK
SKeOmrxFtB91GTfYq2QvNc2Uw1He3PaFF22PtSb7HqFzQFkuSh7h8tmTUc36JMhb
OvQC39zgUlzqXf/tTlKhU2Qaxi44/eyx2IgYocDVcyvF4+JsVn4zCwLhv6zocNzu
0ImChjK205QrYT9sWif675Koj2ysNwyjiLBda3JOT8XO+lRqFXQwq+GDbhBuUnG+
nSBa3HS3gaQljzngQc/NdKXmSb535TE=
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:10:56 2026 by rpki-client