
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f2080ba3-0987-3949-a7d7-9fc22265700f.roa
File: f2080ba3-0987-3949-a7d7-9fc22265700f.roa (raw, json)
Hash identifier: Lcv3KgB3jyxydp7yfbs7OAmLQ5smOsofpYtAahwOCQs=
Subject key identifier: 65:08:1D:9A:C6:CA:CC:D6:F4:E0:DB:54:CA:F0:DF:B5:DC:5A:1B:47
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584F655D776844D718B7A4529100
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f2080ba3-0987-3949-a7d7-9fc22265700f.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 11537
IP address blocks: 163.253.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:77:68:44:d7:18:b7:a4:52:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=4ef69118-28a2-4ff9-83d2-23ab2d170a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:92:98:0d:a1:e6:0b:cc:35:a8:0c:e0:d9:
96:91:5b:00:4a:cb:9c:48:f0:05:39:de:4e:e2:50:
db:33:04:08:3b:5a:e9:75:01:92:18:f4:a5:42:c4:
34:6d:7b:c6:4a:6e:c4:d2:74:de:f2:03:dc:55:9b:
5c:2a:20:c2:67:a7:1b:b9:d6:2d:24:cd:e5:2d:07:
6c:08:a3:7d:51:47:5a:17:a9:58:01:c2:07:2f:05:
d2:f7:4e:c2:ce:bf:9e:b4:92:29:68:ab:11:e3:75:
b7:61:ef:43:ee:8b:16:28:08:bd:7d:25:7c:0c:ed:
7f:3e:3c:8c:fc:da:18:82:41:59:9b:ba:7b:1d:d6:
94:aa:65:99:ee:85:38:25:9e:63:1e:de:bf:7a:46:
fd:5b:a4:f3:3d:7b:3a:12:ad:cd:9c:a8:85:11:52:
51:82:15:0d:03:72:e5:52:1b:7a:aa:b6:f1:09:56:
3f:0b:c2:ef:78:07:85:2a:65:e2:4e:c7:2e:3e:81:
29:51:89:8c:26:f1:52:37:15:0c:10:b8:4c:1b:2f:
ff:30:46:ad:7d:4a:70:df:c3:a8:b9:30:2f:c6:7b:
b5:0b:1b:71:f3:06:d5:db:de:4c:9d:93:22:e1:9c:
2b:6c:e9:8e:e7:1a:01:59:23:4e:eb:00:97:25:b2:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:1D:9A:C6:CA:CC:D6:F4:E0:DB:54:CA:F0:DF:B5:DC:5A:1B:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f2080ba3-0987-3949-a7d7-9fc22265700f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:0f:8d:84:b1:2c:99:13:41:2b:3b:7c:58:02:a4:1f:0d:11:
8d:97:f5:9c:75:b7:80:48:69:76:29:9b:48:db:81:e9:0d:e6:
5d:39:2c:6b:ab:37:2f:05:cd:f3:35:94:1a:1a:7d:1c:50:1f:
9c:3e:25:39:dc:2a:ed:47:41:04:d9:4c:45:b6:41:32:36:19:
f1:be:08:3f:e8:15:1f:1e:be:e8:72:5a:a1:4c:12:a7:9f:1f:
fd:1d:a5:f5:59:40:b4:7d:20:62:e0:05:01:a5:50:dd:1c:cd:
14:28:27:60:dc:79:82:0e:90:8a:0e:65:d8:10:ff:87:bc:a9:
ab:34:5f:13:74:ad:ca:5f:6b:2f:3f:08:08:00:3b:81:4d:a3:
80:ed:a4:65:c6:77:0f:69:2e:0d:75:1a:63:4c:65:29:5f:ea:
0a:9b:47:d1:6a:0e:1f:43:09:60:b4:4b:84:20:80:b5:24:76:
9a:87:dd:94:fc:76:90:de:b1:ef:02:c9:98:89:a2:8c:71:d5:
d8:7b:15:52:a3:5c:e2:71:6a:64:6a:74:0b:a7:06:95:fd:7b:
82:e8:af:61:e4:5d:84:8d:20:44:e4:51:21:65:f9:eb:e7:8a:
d5:ad:03:98:b3:02:7f:b4:62:40:34:a8:94:32:c9:0a:6f:15:
04:69:08:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXdoRNcYt6RSkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
NGVmNjkxMTgtMjhhMi00ZmY5LTgzZDItMjNhYjJkMTcwYTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ieSmA2h5gvMNagM4NmWkVsASsucSPAFOd5O
4lDbMwQIO1rpdQGSGPSlQsQ0bXvGSm7E0nTe8gPcVZtcKiDCZ6cbudYtJM3lLQds
CKN9UUdaF6lYAcIHLwXS907Czr+etJIpaKsR43W3Ye9D7osWKAi9fSV8DO1/PjyM
/NoYgkFZm7p7HdaUqmWZ7oU4JZ5jHt6/ekb9W6TzPXs6Eq3NnKiFEVJRghUNA3Ll
Uht6qrbxCVY/C8LveAeFKmXiTscuPoEpUYmMJvFSNxUMELhMGy//MEatfUpw38Oo
uTAvxnu1Cxtx8wbV295MnZMi4ZwrbOmO5xoBWSNO6wCXJbIfmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUIHZrGyszW9ODbVMrw37XcWhtHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZjIwODBiYTMtMDk4Ny0z
OTQ5LWE3ZDctOWZjMjIyNjU3MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0PjYSxLJkTQSs7fFgCpB8NEY2X9Zx1t4BIaXYpm0jbgekN5l05LGur
Ny8FzfM1lBoafRxQH5w+JTncKu1HQQTZTEW2QTI2GfG+CD/oFR8evuhyWqFMEqef
H/0dpfVZQLR9IGLgBQGlUN0czRQoJ2DceYIOkIoOZdgQ/4e8qas0XxN0rcpfay8/
CAgAO4FNo4DtpGXGdw9pLg11GmNMZSlf6gqbR9FqDh9DCWC0S4QggLUkdpqH3ZT8
dpDese8CyZiJooxx1dh7FVKjXOJxamRqdAunBpX9e4Lor2HkXYSNIETkUSFl+evn
itWtA5izAn+0YkA0qJQyyQpvFQRpCKQ=
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:34:39 2026 by rpki-client