
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/b83d7f40-77ef-31a5-a2fa-e5280d96efb0.roa
File: b83d7f40-77ef-31a5-a2fa-e5280d96efb0.roa (raw, json)
Hash identifier: lk9FCbtNtFqsY1AFTzG6MDeN/CP22fmR2x8futo6iCM=
Subject key identifier: 51:E5:C6:CA:36:24:51:E6:A1:38:3C:AC:0C:7E:8D:DC:24:99:28:AA
Certificate issuer: /CN=789d5664-f06e-4109-b1d3-3b74abba3346
Certificate serial: 010D0C9F4328584F6A10BA389BB7CA44F96A8E00
Authority key identifier: 33:62:E5:22:3C:C3:FE:3D:EF:55:3A:24:E8:04:6E:4F:37:CA:2A:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/b83d7f40-77ef-31a5-a2fa-e5280d96efb0.roa
Signing time: Tue 06 Oct 2026 17:24:50 +0000
ROA not before: Tue 06 Oct 2026 17:24:50 +0000
ROA not after: Mon 04 Jan 2027 18:24:50 +0000
asID: 8103
IP address blocks: 169.139.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6a:10:ba:38:9b:b7:ca:44:f9:6a:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789d5664-f06e-4109-b1d3-3b74abba3346
Validity
Not Before: Oct 6 17:24:50 2026 GMT
Not After : Jan 4 18:24:50 2027 GMT
Subject: CN=d3952beb-fb85-4bcc-b97f-84ded58fcf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:54:0d:43:0f:2b:cd:75:6b:e2:3a:37:9f:b6:
6c:ef:e5:8c:11:03:06:42:e9:fc:0a:05:de:c4:55:
29:92:d9:57:a3:7a:7e:97:7e:0f:7b:9c:d4:3f:c5:
10:85:66:4e:48:5b:2a:fc:cc:b1:64:d0:c7:df:5b:
35:ee:ae:de:12:9a:b2:71:e3:db:8a:fd:d5:0b:56:
d3:27:6e:72:72:33:8b:ed:8e:0b:f2:a7:de:f7:b3:
cf:86:08:ca:e4:8b:6a:58:10:a6:cc:82:04:0c:44:
0c:99:5e:30:26:d2:1d:30:ed:d4:be:e8:b7:08:29:
ae:4c:1c:27:22:4a:2b:ba:4d:19:06:22:a0:cf:66:
c1:d3:90:b9:de:24:45:59:72:b1:32:21:be:56:8c:
8d:36:43:e4:67:82:3a:ec:43:5d:37:69:dc:72:96:
74:e4:95:22:d1:c6:3a:c5:fb:49:28:cf:ee:68:02:
b4:82:3a:53:16:fa:da:02:be:84:ec:b7:11:6e:cb:
05:11:76:79:f7:89:2f:66:db:cc:25:ad:b3:33:4a:
55:f1:71:70:d1:9f:fe:7c:47:f3:fa:f8:63:65:77:
2f:24:6f:e5:85:1e:1e:c4:7d:95:df:2c:6c:4b:01:
84:55:59:f1:34:1e:3a:5a:6e:4f:1c:95:f3:ea:40:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:C6:CA:36:24:51:E6:A1:38:3C:AC:0C:7E:8D:DC:24:99:28:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/b83d7f40-77ef-31a5-a2fa-e5280d96efb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.crl
X509v3 Authority Key Identifier:
keyid:33:62:E5:22:3C:C3:FE:3D:EF:55:3A:24:E8:04:6E:4F:37:CA:2A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346.cer
sbgp-ipAddrBlock: critical
IPv4:
169.139.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d3:57:0c:9c:4b:b1:32:58:70:1c:d4:9a:c0:80:95:16:a0:
41:fc:0a:9f:29:35:0e:9c:0e:fb:3c:81:d2:9a:35:c8:ed:d5:
df:77:01:d1:cb:35:fa:52:ae:2d:0a:6a:f2:86:3d:37:95:b2:
a1:f1:92:42:cf:8a:c7:7a:06:db:93:83:ac:ac:77:e4:1d:d5:
90:b7:7a:18:f1:9b:51:33:bd:a1:74:fa:7b:17:14:43:55:d7:
c0:28:ea:d9:24:a5:97:ba:e9:59:1e:f0:3f:07:60:84:20:d0:
d3:7f:c6:5d:a9:7d:82:90:71:af:ae:f8:1c:f5:d4:65:bd:63:
f8:fa:30:24:25:73:6b:42:90:d4:bf:be:c8:1a:5b:49:6e:a7:
b2:09:bb:44:0a:b5:1b:06:db:80:dc:46:0f:93:9a:09:07:30:
1e:e2:c4:01:2b:ef:5a:97:31:c1:93:21:3d:7b:da:24:4e:fd:
93:d1:7f:c9:85:c2:37:11:22:02:58:4d:bc:36:53:48:05:ed:
7f:1c:18:48:2e:65:3a:4f:56:a8:79:f2:63:28:5f:be:97:09:
ae:e7:8b:ea:fe:39:02:11:a5:53:88:3f:a9:06:ef:db:95:ee:
e0:b1:92:d1:16:e1:65:ff:a2:c2:08:39:23:77:0a:fd:5f:56:
03:bb:19:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9qELo4m7fKRPlqjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg5ZDU2NjQtZjA2ZS00MTA5LWIxZDMtM2I3NGFiYmEz
MzQ2MB4XDTI2MTAwNjE3MjQ1MFoXDTI3MDEwNDE4MjQ1MFowLzEtMCsGA1UEAxMk
ZDM5NTJiZWItZmI4NS00YmNjLWI5N2YtODRkZWQ1OGZjZjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFQNQw8rzXVr4jo3n7Zs7+WMEQMGQun8CgXe
xFUpktlXo3p+l34Pe5zUP8UQhWZOSFsq/MyxZNDH31s17q7eEpqycePbiv3VC1bT
J25ycjOL7Y4L8qfe97PPhgjK5ItqWBCmzIIEDEQMmV4wJtIdMO3Uvui3CCmuTBwn
Ikoruk0ZBiKgz2bB05C53iRFWXKxMiG+VoyNNkPkZ4I67ENdN2nccpZ05JUi0cY6
xftJKM/uaAK0gjpTFvraAr6E7LcRbssFEXZ594kvZtvMJa2zM0pV8XFw0Z/+fEfz
+vhjZXcvJG/lhR4exH2V3yxsSwGEVVnxNB46Wm5PHJXz6kC5LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHlxso2JFHmoTg8rAx+jdwkmSiqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ODlk
NTY2NC1mMDZlLTQxMDktYjFkMy0zYjc0YWJiYTMzNDYvYjgzZDdmNDAtNzdlZi0z
MWE1LWEyZmEtZTUyODBkOTZlZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzg5ZDU2NjQtZjA2ZS00MTA5LWIx
ZDMtM2I3NGFiYmEzMzQ2Lzc4OWQ1NjY0LWYwNmUtNDEwOS1iMWQzLTNiNzRhYmJh
MzM0Ni5jcmwwHwYDVR0jBBgwFoAUM2LlIjzD/j3vVTok6ARuTzfKKqQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83ODlkNTY2NC1mMDZlLTQxMDktYjFkMy0zYjc0
YWJiYTMzNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYuaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbTVwycS7EyWHAc1JrAgJUWoEH8Cp8pNQ6cDvs8gdKaNcjt1d93AdHL
NfpSri0KavKGPTeVsqHxkkLPisd6BtuTg6ysd+Qd1ZC3ehjxm1EzvaF0+nsXFENV
18Ao6tkkpZe66Vke8D8HYIQg0NN/xl2pfYKQca+u+Bz11GW9Y/j6MCQlc2tCkNS/
vsgaW0lup7IJu0QKtRsG24DcRg+TmgkHMB7ixAEr71qXMcGTIT172iRO/ZPRf8mF
wjcRIgJYTbw2U0gF7X8cGEguZTpPVqh58mMoX76XCa7ni+r+OQIRpVOIP6kG79uV
7uCxktEW4WX/osIIOSN3Cv1fVgO7GVc=
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:15:45 2026 by rpki-client