
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f33a797-5563-3b01-8358-2ccd576bcdd4.roa
File: 3f33a797-5563-3b01-8358-2ccd576bcdd4.roa (raw, json)
Hash identifier: /lij38PS2xUSo5XgS6ob17W4fcaZg0ZF6+SFIJMHNAo=
Subject key identifier: 1B:DC:D8:AD:28:5A:04:0D:69:07:5F:8E:B9:59:76:FD:C1:9B:60:31
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584F5A3329597DE930E8DBB80380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f33a797-5563-3b01-8358-2ccd576bcdd4.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 401152
IP address blocks: 23.26.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:33:29:59:7d:e9:30:e8:db:b8:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=6a3597de-0d49-46bc-b701-b8919e8c0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:ec:59:dc:4c:7d:7b:2f:31:8b:11:bc:43:
74:ab:8e:7f:46:85:67:a3:c2:4e:21:0c:56:41:cd:
16:08:d2:f4:b6:9a:80:b4:b2:26:cb:87:e0:eb:32:
4d:99:be:c7:e0:df:be:74:03:d8:41:12:93:44:7a:
ee:72:35:c2:80:5f:7a:a7:35:b0:ad:95:0e:6c:48:
e0:35:e9:d8:24:0b:ef:fd:71:db:3d:e0:c2:ed:2e:
15:42:d3:85:3a:7f:5d:95:69:2a:48:4a:86:50:6d:
cf:5c:69:dd:aa:d8:8b:93:f1:00:f1:b0:fd:8d:b7:
00:22:06:b5:aa:82:4e:b9:5c:4a:56:55:8a:56:33:
92:8e:28:67:0d:73:32:16:5c:a2:17:20:64:c6:33:
eb:63:c9:42:66:29:47:be:62:b6:e8:96:49:18:4f:
d7:63:0b:f6:9b:8e:ec:7e:61:32:00:0f:3d:43:3f:
40:48:ad:d7:f8:9c:05:c2:46:4a:ee:f9:85:31:3c:
ef:45:7c:9e:b2:ad:f0:17:9b:ea:46:95:2e:5f:d8:
4c:dc:7c:8e:47:77:37:ea:3e:2b:be:32:c4:bc:ce:
00:e0:d5:dc:08:79:18:49:2c:7f:14:cf:86:f0:be:
7e:c2:82:cd:11:41:29:08:55:bb:9a:85:f0:82:21:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:D8:AD:28:5A:04:0D:69:07:5F:8E:B9:59:76:FD:C1:9B:60:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f33a797-5563-3b01-8358-2ccd576bcdd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:80:00:be:25:e5:45:dc:08:2c:00:48:c4:11:d0:3b:2f:67:
a7:5e:10:a4:ac:d1:3c:71:1a:28:a4:41:a7:5d:72:14:31:1c:
e4:51:ce:2f:e7:e8:00:51:fd:f9:b6:a2:00:d0:2c:cd:84:5c:
9e:3a:97:32:10:4a:ed:55:a1:36:44:be:1b:5f:d2:09:b2:a4:
06:9a:d0:03:20:f8:fb:20:86:63:ab:71:20:c3:0c:26:83:9e:
76:a8:c8:8e:6e:73:17:7c:dc:19:aa:08:ed:af:be:cc:58:06:
42:f8:8f:58:9d:95:10:8b:00:fb:2f:86:9e:39:65:3d:a2:6c:
72:59:f6:11:50:3c:d9:1e:12:fb:2d:7f:77:e7:b1:cf:5a:e1:
86:9d:16:20:31:49:c6:55:71:ca:ca:b3:e4:3b:a0:83:e1:67:
e0:a2:cc:8d:1a:aa:a2:a3:cd:ca:01:a6:26:8b:0b:03:0c:bf:
19:5a:e4:40:aa:5d:59:71:6c:68:f7:82:5c:8a:6a:8e:a0:53:
c2:fb:fb:ea:70:e2:4b:e3:79:23:2a:b4:75:25:68:0d:6e:b9:
47:6d:43:d1:a2:c3:40:a8:df:47:a3:53:f1:a3:c2:e3:5d:03:
6e:c7:b5:d0:cf:9e:ea:c8:54:b6:f2:b5:36:9b:48:ae:52:22:
8a:1c:5d:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMylZfekw6Nu4A4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NmEzNTk3ZGUtMGQ0OS00NmJjLWI3MDEtYjg5MTllOGMwYmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfLsWdxMfXsvMYsRvEN0q45/RoVno8JOIQxW
Qc0WCNL0tpqAtLImy4fg6zJNmb7H4N++dAPYQRKTRHrucjXCgF96pzWwrZUObEjg
NenYJAvv/XHbPeDC7S4VQtOFOn9dlWkqSEqGUG3PXGndqtiLk/EA8bD9jbcAIga1
qoJOuVxKVlWKVjOSjihnDXMyFlyiFyBkxjPrY8lCZilHvmK26JZJGE/XYwv2m47s
fmEyAA89Qz9ASK3X+JwFwkZK7vmFMTzvRXyesq3wF5vqRpUuX9hM3HyOR3c36j4r
vjLEvM4A4NXcCHkYSSx/FM+G8L5+woLNEUEpCFW7moXwgiHaSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvc2K0oWgQNaQdfjrlZdv3Bm2AxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2YzM2E3OTctNTU2My0z
YjAxLTgzNTgtMmNjZDU3NmJjZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmAAL4l5UXcCCwASMQR0DsvZ6deEKSs0TxxGiikQaddchQxHORRzi/n
6ABR/fm2ogDQLM2EXJ46lzIQSu1VoTZEvhtf0gmypAaa0AMg+PsghmOrcSDDDCaD
nnaoyI5ucxd83BmqCO2vvsxYBkL4j1idlRCLAPsvhp45ZT2ibHJZ9hFQPNkeEvst
f3fnsc9a4YadFiAxScZVccrKs+Q7oIPhZ+CizI0aqqKjzcoBpiaLCwMMvxla5ECq
XVlxbGj3glyKao6gU8L7++pw4kvjeSMqtHUlaA1uuUdtQ9Giw0Co30ejU/GjwuNd
A27HtdDPnurIVLbytTabSK5SIoocXR0=
-----END CERTIFICATE-----
Generated at Mon Nov 2 23:43:24 2026 by rpki-client