
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa
File: a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa (raw, json)
Hash identifier: AHyqh8u3YTVN/7+jqO/h6u++IQSmdKSP1H5zB4WQV8k=
Subject key identifier: BC:E7:C6:C2:40:E3:46:28:9C:E5:E2:93:C7:4A:0E:A1:C1:96:E6:C5
Certificate issuer: /CN=4171706d-65e0-4ab5-bbb3-8d0f79345c7b
Certificate serial: 010D0C9F4328584F7A8B4B1D7535A1EF68D9B4C0
Authority key identifier: 64:C4:F3:81:41:41:01:CA:54:69:CB:43:47:F3:57:0F:0A:07:0A:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa
Signing time: Mon 12 Oct 2026 15:04:44 +0000
ROA not before: Mon 12 Oct 2026 15:04:44 +0000
ROA not after: Sun 10 Jan 2027 16:04:44 +0000
asID: 47022
IP address blocks: 199.87.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:8b:4b:1d:75:35:a1:ef:68:d9:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4171706d-65e0-4ab5-bbb3-8d0f79345c7b
Validity
Not Before: Oct 12 15:04:44 2026 GMT
Not After : Jan 10 16:04:44 2027 GMT
Subject: CN=f2ac30ed-dd35-4fe7-a312-2d7b832fce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:06:72:25:8d:1b:d7:35:c7:9e:09:2d:b4:
72:4d:ce:60:49:55:c9:88:7b:5b:08:19:99:18:b8:
2c:5d:79:d3:86:84:d4:a1:24:30:fa:29:f9:46:58:
81:f5:fd:50:bb:0a:0f:f0:84:47:fa:0a:63:56:25:
67:28:1e:f3:51:e9:a6:a5:1d:2c:1b:d7:f8:a9:07:
7d:43:d6:d3:35:9b:32:8e:6b:78:17:54:b4:e2:f1:
ce:ef:0f:d9:2d:28:1a:30:b2:5e:a8:ed:c3:e1:0d:
99:69:fc:81:9f:dd:19:b2:4d:25:84:9e:ff:89:d3:
13:8c:24:c4:f3:72:90:7c:54:54:fd:34:db:8c:90:
41:74:10:eb:d5:7a:14:46:61:3f:6e:e0:bc:db:4b:
d5:89:79:72:c1:3c:86:6c:0c:6c:af:1d:fc:3f:65:
cc:8b:d5:b1:18:3d:d1:63:84:d6:21:21:05:15:c1:
06:44:b3:79:36:43:21:96:a5:da:0c:11:6e:89:b5:
49:f1:2e:17:cd:73:50:b3:6c:36:6c:ab:8e:02:a1:
1c:c7:14:5a:80:65:da:9b:62:d1:9b:ca:7a:0e:dd:
2f:5a:53:64:c5:3c:cb:8a:05:24:33:75:9d:07:27:
c5:de:76:28:ca:1e:e1:9a:0b:f4:0e:1e:a7:ff:e7:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:C6:C2:40:E3:46:28:9C:E5:E2:93:C7:4A:0E:A1:C1:96:E6:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.crl
X509v3 Authority Key Identifier:
keyid:64:C4:F3:81:41:41:01:CA:54:69:CB:43:47:F3:57:0F:0A:07:0A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:73:e1:a6:e9:6b:70:94:16:44:06:f8:00:ca:99:83:b0:0d:
5a:a9:46:44:f9:8a:a4:89:27:f9:ad:71:97:11:93:ac:79:73:
e3:51:ac:f4:68:c0:41:48:d4:6d:9e:ec:f1:a9:54:58:a4:42:
93:af:c0:8a:4e:9b:29:60:e5:03:79:8c:73:d2:c8:5d:68:cb:
c0:1d:5b:f2:d3:cf:3b:57:80:b9:cc:c4:cc:a2:dd:3a:71:1c:
14:c2:18:5c:88:44:ae:18:69:0e:e3:40:14:c7:5f:95:00:20:
26:92:93:da:e2:eb:99:6d:1d:c0:ba:19:cc:78:9e:3a:26:7b:
d6:9a:5a:71:48:98:c3:63:2c:b9:2a:b4:75:23:40:07:d0:63:
da:47:5a:be:a4:80:8e:ed:dc:b8:bb:82:59:7d:45:6f:7b:1e:
b5:81:86:5d:28:6d:56:c1:6e:17:1e:72:93:80:7a:ab:95:13:
15:68:a7:4a:87:f4:59:bd:f1:48:b7:d7:05:ff:c8:05:6a:df:
c0:3a:4f:e0:12:3b:05:24:07:49:33:51:c3:cb:48:55:43:3b:
0f:91:23:9b:2d:9f:c1:4e:c9:54:1a:eb:9c:0a:2c:b2:81:97:
83:5b:1a:4d:62:9b:ad:af:95:3f:af:7d:da:69:1a:71:bd:0b:
fc:8e:d2:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96i0sddTWh72jZtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE3MTcwNmQtNjVlMC00YWI1LWJiYjMtOGQwZjc5MzQ1
YzdiMB4XDTI2MTAxMjE1MDQ0NFoXDTI3MDExMDE2MDQ0NFowLzEtMCsGA1UEAxMk
ZjJhYzMwZWQtZGQzNS00ZmU3LWEzMTItMmQ3YjgzMmZjZTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuQGciWNG9c1x54JLbRyTc5gSVXJiHtbCBmZ
GLgsXXnThoTUoSQw+in5RliB9f1QuwoP8IRH+gpjViVnKB7zUemmpR0sG9f4qQd9
Q9bTNZsyjmt4F1S04vHO7w/ZLSgaMLJeqO3D4Q2ZafyBn90Zsk0lhJ7/idMTjCTE
83KQfFRU/TTbjJBBdBDr1XoURmE/buC820vViXlywTyGbAxsrx38P2XMi9WxGD3R
Y4TWISEFFcEGRLN5NkMhlqXaDBFuibVJ8S4XzXNQs2w2bKuOAqEcxxRagGXam2LR
m8p6Dt0vWlNkxTzLigUkM3WdByfF3nYoyh7hmgv0Dh6n/+fMMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLznxsJA40YonOXik8dKDqHBlubFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80MTcx
NzA2ZC02NWUwLTRhYjUtYmJiMy04ZDBmNzkzNDVjN2IvYTMxZjdmNGMtOWYwNS0z
YWQ5LTg3MTItYzQ0MDkxOTc2ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDE3MTcwNmQtNjVlMC00YWI1LWJi
YjMtOGQwZjc5MzQ1YzdiLzQxNzE3MDZkLTY1ZTAtNGFiNS1iYmIzLThkMGY3OTM0
NWM3Yi5jcmwwHwYDVR0jBBgwFoAUZMTzgUFBAcpUactDR/NXDwoHClowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS80MTcxNzA2ZC02NWUwLTRhYjUtYmJiMy04ZDBm
NzkzNDVjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1fMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFz4abpa3CUFkQG+ADKmYOwDVqpRkT5iqSJJ/mtcZcRk6x5c+NRrPRo
wEFI1G2e7PGpVFikQpOvwIpOmylg5QN5jHPSyF1oy8AdW/LTzztXgLnMxMyi3Tpx
HBTCGFyIRK4YaQ7jQBTHX5UAICaSk9ri65ltHcC6Gcx4njome9aaWnFImMNjLLkq
tHUjQAfQY9pHWr6kgI7t3Li7gll9RW97HrWBhl0obVbBbhcecpOAequVExVop0qH
9Fm98Ui31wX/yAVq38A6T+ASOwUkB0kzUcPLSFVDOw+RI5stn8FOyVQa65wKLLKB
l4NbGk1im62vlT+vfdppGnG9C/yO0h4=
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:16:37 2026 by rpki-client