
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/33da5110-46ee-387b-9122-1d21c013ca36.roa
File: 33da5110-46ee-387b-9122-1d21c013ca36.roa (raw, json)
Hash identifier: cW5N6JDZR6M4v1S33L29GpW5xg3RmiJWBDPS0lZ21ME=
Subject key identifier: 36:DA:CB:40:86:85:EB:15:66:BA:0C:76:ED:E7:F5:D4:96:D7:09:C5
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EAE81A7BC85007EA2AAD5DB80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/33da5110-46ee-387b-9122-1d21c013ca36.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 11404
IP address blocks: 198.66.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:a7:bc:85:00:7e:a2:aa:d5:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=a05f6823-68bd-4a47-bf90-387d8e648894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:7d:f7:12:f7:b2:4f:4c:54:d0:95:3e:63:
cf:c8:0b:10:60:a0:df:40:44:4d:0f:21:7e:b9:48:
a2:e7:87:55:b5:c0:b5:89:d8:c2:23:99:eb:6f:90:
86:e1:17:d6:a4:d1:8c:15:ea:93:21:6f:25:dc:68:
f0:6e:d0:0c:d8:22:e2:bb:f1:17:d4:45:ae:1b:bd:
09:3d:e1:17:2f:bc:bf:65:aa:67:93:dc:72:fb:e0:
d2:f7:f0:9c:58:6c:ae:41:66:be:42:d4:9f:db:52:
9c:27:5f:ac:9b:62:7b:a7:6b:97:5d:93:18:62:07:
fa:9d:5a:06:13:77:b7:4c:7f:08:ca:03:59:b6:23:
0f:d1:ef:ea:4c:df:be:61:9a:3d:9f:e8:96:6c:e9:
0e:05:90:65:9d:2b:98:61:48:66:ae:4f:37:1d:b4:
65:81:ac:ad:4f:c2:99:c7:79:70:7f:1c:70:ac:06:
76:2d:0f:44:d4:8d:e6:d9:c9:5c:66:53:ad:8e:69:
fe:bc:6e:8e:1d:38:46:2a:c3:c0:e2:1b:72:1b:30:
17:6b:f0:5e:a8:1c:54:68:d7:03:28:fa:5e:52:a8:
2c:0a:96:2e:f4:ce:17:27:49:74:7d:bd:00:29:31:
fe:f3:a9:10:43:e7:05:b0:ef:56:dc:97:f2:52:f8:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:CB:40:86:85:EB:15:66:BA:0C:76:ED:E7:F5:D4:96:D7:09:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/33da5110-46ee-387b-9122-1d21c013ca36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:9a:2d:21:c7:b5:ac:01:23:4a:f7:a8:cb:3e:c5:41:7c:0b:
17:ae:69:fe:2a:a7:8b:5a:09:19:cd:c7:01:b9:c9:86:db:1a:
ca:da:19:b3:63:c5:36:fe:3d:aa:fb:ca:33:6f:29:3a:65:bc:
88:bb:f4:16:f6:48:d9:03:c2:2d:19:82:9b:45:58:26:64:e6:
0e:55:d0:56:63:b7:99:23:f4:c8:b3:96:3b:1f:37:96:09:7a:
f0:9b:ad:9a:97:73:12:c8:05:60:46:a6:e6:07:0e:8d:1c:65:
54:25:61:e7:98:14:3d:73:89:72:32:13:da:ff:e9:dc:e5:18:
89:75:40:ca:54:35:c1:2a:fa:c7:6e:ce:1f:a5:5a:2d:db:b3:
81:fa:a0:6e:42:78:ca:d9:43:ad:84:71:3c:19:ab:68:91:67:
9a:bd:a4:08:29:ba:1b:a5:e9:ab:10:e5:c4:dc:67:88:6d:62:
bc:69:52:78:fe:ec:80:bb:21:05:4f:ba:67:f4:ee:56:4c:77:
79:7a:05:1c:21:10:a6:60:23:b9:07:5b:1b:cd:c2:5d:27:a2:
63:4b:7b:5d:ee:4c:99:b9:67:23:23:10:ad:4a:19:fb:14:f5:
de:fe:a7:fe:96:e7:d2:0a:ae:a6:6f:2f:54:06:aa:f0:fb:47:
9c:e5:a8:54
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6ugae8hQB+oqrV24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
YTA1ZjY4MjMtNjhiZC00YTQ3LWJmOTAtMzg3ZDhlNjQ4ODk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlux99xL3sk9MVNCVPmPPyAsQYKDfQERNDyF+
uUii54dVtcC1idjCI5nrb5CG4RfWpNGMFeqTIW8l3GjwbtAM2CLiu/EX1EWuG70J
PeEXL7y/Zapnk9xy++DS9/CcWGyuQWa+QtSf21KcJ1+sm2J7p2uXXZMYYgf6nVoG
E3e3TH8IygNZtiMP0e/qTN++YZo9n+iWbOkOBZBlnSuYYUhmrk83HbRlgaytT8KZ
x3lwfxxwrAZ2LQ9E1I3m2clcZlOtjmn+vG6OHThGKsPA4htyGzAXa/BeqBxUaNcD
KPpeUqgsCpYu9M4XJ0l0fb0AKTH+86kQQ+cFsO9W3JfyUvjnbwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDbay0CGhesVZroMdu3n9dSW1wnFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzNkYTUxMTAtNDZlZS0z
ODdiLTkxMjItMWQyMWMwMTNjYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAx5otIce1rAEjSveoyz7FQXwLF65p/iqni1oJGc3HAbnJhtsaytoZs2PF
Nv49qvvKM28pOmW8iLv0FvZI2QPCLRmCm0VYJmTmDlXQVmO3mSP0yLOWOx83lgl6
8JutmpdzEsgFYEam5gcOjRxlVCVh55gUPXOJcjIT2v/p3OUYiXVAylQ1wSr6x27O
H6VaLduzgfqgbkJ4ytlDrYRxPBmraJFnmr2kCCm6G6XpqxDlxNxniG1ivGlSeP7s
gLshBU+6Z/TuVkx3eXoFHCEQpmAjuQdbG83CXSeiY0t7Xe5MmblnIyMQrUoZ+xT1
3v6n/pbn0gqupm8vVAaq8PtHnOWoVA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:47:41 2026 by rpki-client