
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/204d7b97-e726-3fcc-8c81-894c3dd971b1.roa
File: 204d7b97-e726-3fcc-8c81-894c3dd971b1.roa (raw, json)
Hash identifier: lbtyKAwGodStHRaBQ3VncTfzK1SnR0iuGJfnWq3xaVQ=
Subject key identifier: 0A:49:49:B5:CD:89:08:95:D9:AE:44:F4:A2:39:6C:3C:0F:19:22:28
Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Certificate serial: 010D0C9F4328584F5FE7261877555E2F61A88880
Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/204d7b97-e726-3fcc-8c81-894c3dd971b1.roa
Signing time: Sat 03 Oct 2026 02:02:59 +0000
ROA not before: Sat 03 Oct 2026 02:02:59 +0000
ROA not after: Fri 01 Jan 2027 03:02:59 +0000
asID: 14299
IP address blocks: 170.146.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5f:e7:26:18:77:55:5e:2f:61:a8:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Validity
Not Before: Oct 3 02:02:59 2026 GMT
Not After : Jan 1 03:02:59 2027 GMT
Subject: CN=8104bdfa-94fa-423f-a410-e7bf933fa202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:3e:73:c2:d3:38:ec:9a:b0:c7:ad:67:f4:
40:09:2c:ad:9d:cf:46:d3:ea:44:8f:97:2b:12:58:
98:12:78:73:63:76:78:bd:01:01:c8:57:df:d3:32:
8a:9b:e0:d4:be:e3:80:37:ac:e5:ad:34:e5:e9:86:
a7:29:6d:03:85:ae:93:cd:e1:76:57:b8:b6:0e:50:
fc:f9:04:df:30:b9:57:8f:f6:19:7f:e6:f0:1c:86:
23:5b:91:86:ec:38:f7:36:21:d3:8c:8f:0c:d3:d3:
44:87:83:60:22:1e:a4:58:c8:aa:a4:8f:4a:ff:8c:
c3:99:1f:d1:0d:34:ed:14:85:bc:f5:12:5f:a5:a8:
c9:eb:89:01:ed:dd:8a:8b:fb:76:69:99:e2:1c:f7:
49:fb:53:64:59:84:14:01:be:a5:d3:dc:e0:3b:7f:
13:14:bb:f7:b1:bd:8b:b6:0b:b1:bd:51:a9:5d:e1:
a3:12:72:57:86:e1:86:c7:b1:79:42:94:49:af:0c:
34:b1:67:d8:10:0c:67:df:0d:e1:64:f0:50:30:96:
14:d5:6b:1e:82:3b:08:43:d9:81:a4:7f:a6:e1:7f:
88:5a:f3:ec:f5:ea:4e:eb:c6:aa:85:48:6b:06:61:
e1:ae:0f:69:7d:7e:ec:4f:8d:05:f7:b2:e9:19:6f:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:49:49:B5:CD:89:08:95:D9:AE:44:F4:A2:39:6C:3C:0F:19:22:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/204d7b97-e726-3fcc-8c81-894c3dd971b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
X509v3 Authority Key Identifier:
keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
sbgp-ipAddrBlock: critical
IPv4:
170.146.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:46:7c:19:e8:0e:28:8e:3e:f5:5c:0b:10:62:0e:64:76:11:
74:12:8a:f3:00:5f:93:cb:c3:fe:82:51:89:6a:4b:cd:32:4a:
bb:ff:25:dd:f1:10:2d:79:ff:74:cf:05:03:01:c9:78:86:6b:
14:75:08:e5:7f:9b:0d:92:28:13:ce:13:6c:ee:d5:5b:7d:8b:
ef:7d:ad:c0:ea:60:36:f6:81:38:47:19:de:30:b7:50:08:5d:
07:80:66:1e:34:35:bd:81:97:a5:29:59:fc:59:01:69:a1:3f:
2b:5b:72:43:9b:b9:4a:6f:cd:13:79:49:2e:a6:61:d6:da:33:
f5:22:c9:ad:cb:b8:ba:71:3e:4b:eb:74:55:37:eb:0f:cc:f4:
48:3f:e5:7a:eb:d4:55:55:7e:b4:0a:21:a7:5c:8f:cb:85:5b:
ed:fb:cc:1f:13:fb:eb:ce:64:75:02:65:49:26:23:44:41:d4:
51:85:49:64:3b:d9:74:7f:1e:16:38:6b:cf:c4:b4:07:15:77:
d2:a1:1b:eb:b7:d3:a2:51:15:50:3b:e1:ff:98:f9:ca:6a:ad:
30:79:47:fd:2d:39:c2:34:99:4d:5f:ab:0d:ae:59:ba:58:59:
f0:40:39:26:5b:d2:5e:09:e6:e1:cb:e4:2c:8d:9a:e6:1c:30:
74:7f:94:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f5yYYd1VeL2GoiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1
OWI1MB4XDTI2MTAwMzAyMDI1OVoXDTI3MDEwMTAzMDI1OVowLzEtMCsGA1UEAxMk
ODEwNGJkZmEtOTRmYS00MjNmLWE0MTAtZTdiZjkzM2ZhMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn40+c8LTOOyasMetZ/RACSytnc9G0+pEj5cr
EliYEnhzY3Z4vQEByFff0zKKm+DUvuOAN6zlrTTl6YanKW0Dha6TzeF2V7i2DlD8
+QTfMLlXj/YZf+bwHIYjW5GG7Dj3NiHTjI8M09NEh4NgIh6kWMiqpI9K/4zDmR/R
DTTtFIW89RJfpajJ64kB7d2Ki/t2aZniHPdJ+1NkWYQUAb6l09zgO38TFLv3sb2L
tguxvVGpXeGjEnJXhuGGx7F5QpRJrww0sWfYEAxn3w3hZPBQMJYU1WsegjsIQ9mB
pH+m4X+IWvPs9epO68aqhUhrBmHhrg9pfX7sT40F97LpGW8MoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApJSbXNiQiV2a5E9KI5bDwPGSIoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi
MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvMjA0ZDdiOTctZTcyNi0z
ZmNjLThjODEtODk0YzNkZDk3MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl
ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz
NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw
YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpLdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1GfBnoDiiOPvVcCxBiDmR2EXQSivMAX5PLw/6CUYlqS80ySrv/Jd3x
EC15/3TPBQMByXiGaxR1COV/mw2SKBPOE2zu1Vt9i+99rcDqYDb2gThHGd4wt1AI
XQeAZh40Nb2Bl6UpWfxZAWmhPytbckObuUpvzRN5SS6mYdbaM/Uiya3LuLpxPkvr
dFU36w/M9Eg/5Xrr1FVVfrQKIadcj8uFW+37zB8T++vOZHUCZUkmI0RB1FGFSWQ7
2XR/HhY4a8/EtAcVd9KhG+u306JRFVA74f+Y+cpqrTB5R/0tOcI0mU1fqw2uWbpY
WfBAOSZb0l4J5uHL5CyNmuYcMHR/lBk=
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:22:42 2026 by rpki-client