
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa
File: a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa (raw, json)
Hash identifier: jaS0O0Lh9WgBclgvpTWBvg0gCugktFwRunZXAqJ8g8c=
Subject key identifier: 23:1E:26:D1:C4:BB:96:6F:B0:38:C4:85:FF:E6:F6:46:BB:16:BF:B0
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584F5A32DC8DA2DC318B3B718EC0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 63062
IP address blocks: 67.44.16.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:32:dc:8d:a2:dc:31:8b:3b:71:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=8f57a979-4df0-4c5a-b339-7a6b1a841543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b9:44:6a:e6:12:9a:a4:1e:4b:24:68:58:51:
d5:f5:c8:45:f1:21:20:9c:97:38:b8:a2:80:d5:fa:
65:30:6b:72:2b:66:54:ad:6f:82:7d:34:f0:98:6e:
0f:17:94:c0:87:56:05:6a:fb:b4:82:87:55:97:70:
de:82:a0:0f:bb:28:da:92:fc:82:de:a2:58:23:16:
b4:11:62:8b:b6:9e:bd:0e:e6:ed:63:2b:9b:9f:80:
af:d3:b8:ea:dd:27:d0:69:b6:f1:0d:c1:b6:1c:2f:
a2:15:15:01:98:ac:6e:2f:97:0f:2a:38:b9:04:e7:
ca:49:71:d9:dc:4c:8c:11:27:cd:6e:2c:c6:be:75:
2b:2a:b9:e9:1a:59:31:52:59:83:65:dd:25:98:84:
11:a0:2b:3d:19:55:2c:ee:7c:cb:f6:76:21:39:5d:
14:37:50:3c:8f:4d:ed:f2:43:5e:08:20:39:d7:0c:
c8:f0:97:fc:3a:33:8a:e5:b6:c9:eb:4f:f1:25:08:
34:a1:bb:54:b4:b3:08:64:a2:31:97:6f:e2:44:1b:
88:0b:ce:fd:27:a1:28:91:b9:9d:52:5e:f2:c4:97:
a0:e6:3c:0d:61:23:29:fd:c1:3a:65:ed:b7:cb:5e:
86:67:b0:c6:d9:8b:5a:8d:b8:5c:06:b5:be:ac:4a:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:26:D1:C4:BB:96:6F:B0:38:C4:85:FF:E6:F6:46:BB:16:BF:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.44.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:7d:78:d8:31:67:25:c7:d5:fb:26:e8:67:21:97:d3:64:af:
a9:09:91:e3:aa:75:a9:61:a1:7b:e7:4b:60:49:44:a2:22:7b:
ac:46:6a:bd:b7:da:c3:1e:d9:e1:56:b2:c9:a7:93:c2:d3:09:
e0:e1:0f:96:42:14:ed:93:cb:69:0c:72:ae:00:73:05:cd:4e:
74:72:9d:1c:29:b9:bf:c7:07:c2:43:ed:2c:ee:58:ca:90:dd:
e8:51:54:30:f1:c7:d7:5c:b6:8c:4e:4c:ea:02:f1:b8:dd:3d:
32:31:ab:49:74:60:8b:d0:d2:79:c3:dd:b6:da:d8:32:2e:91:
37:26:be:88:e6:e0:ee:8c:10:53:02:10:a0:73:41:65:f3:be:
84:1a:4f:75:a8:6c:5e:4f:5f:7b:d0:44:9e:c2:86:50:8d:8a:
89:7b:a2:11:6a:92:a3:7f:d1:03:09:86:e6:70:1e:39:0c:40:
22:bb:4a:20:55:81:68:d5:22:88:6b:0f:9a:7f:f8:42:a2:f7:
b7:ca:21:8a:12:b6:17:60:15:3d:bd:26:2a:b7:85:4a:c7:00:
9e:dd:09:cf:40:56:75:20:61:e4:44:dd:5d:8c:62:dc:05:7d:
ce:9c:96:5c:14:2f:fa:40:15:4e:f6:e8:91:1c:59:bd:87:4d:
3f:9e:3f:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtyNotwxiztxjsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
OGY1N2E5NzktNGRmMC00YzVhLWIzMzktN2E2YjFhODQxNTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57lEauYSmqQeSyRoWFHV9chF8SEgnJc4uKKA
1fplMGtyK2ZUrW+CfTTwmG4PF5TAh1YFavu0godVl3DegqAPuyjakvyC3qJYIxa0
EWKLtp69DubtYyubn4Cv07jq3SfQabbxDcG2HC+iFRUBmKxuL5cPKji5BOfKSXHZ
3EyMESfNbizGvnUrKrnpGlkxUlmDZd0lmIQRoCs9GVUs7nzL9nYhOV0UN1A8j03t
8kNeCCA51wzI8Jf8OjOK5bbJ60/xJQg0obtUtLMIZKIxl2/iRBuIC879J6Eokbmd
Ul7yxJeg5jwNYSMp/cE6Ze23y16GZ7DG2YtajbhcBrW+rEpZyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMeJtHEu5ZvsDjEhf/m9ka7Fr+wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvYTAzMmUwYWItZjViNS0z
YzZjLWE4OGItOTFkNWY4MzYwMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIR9eNgxZyXH1fsm6Gchl9Nkr6kJkeOqdalhoXvnS2BJRKIie6xGar23
2sMe2eFWssmnk8LTCeDhD5ZCFO2Ty2kMcq4AcwXNTnRynRwpub/HB8JD7SzuWMqQ
3ehRVDDxx9dctoxOTOoC8bjdPTIxq0l0YIvQ0nnD3bba2DIukTcmvojm4O6MEFMC
EKBzQWXzvoQaT3WobF5PX3vQRJ7ChlCNiol7ohFqkqN/0QMJhuZwHjkMQCK7SiBV
gWjVIohrD5p/+EKi97fKIYoSthdgFT29Jiq3hUrHAJ7dCc9AVnUgYeRE3V2MYtwF
fc6cllwUL/pAFU726JEcWb2HTT+eP5M=
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:30:04 2026 by rpki-client