
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2d0ca016-1614-37fc-aada-e73a723128de.roa
File: 2d0ca016-1614-37fc-aada-e73a723128de.roa (raw, json)
Hash identifier: 6zADbUNX8U1TjwXRnrGAM8ik1JmLIh8jqinDd9VTV8I=
Subject key identifier: 8F:C2:96:2F:3D:DB:99:77:4A:DF:8B:8C:71:19:C1:0E:C1:AF:92:CC
Certificate issuer: /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
Certificate serial: 010D0C9F4328584E6F0D3A43BF67B6A41974E880
Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2d0ca016-1614-37fc-aada-e73a723128de.roa
Signing time: Wed 08 Jul 2026 19:29:53 +0000
ROA not before: Wed 08 Jul 2026 19:29:53 +0000
ROA not after: Tue 06 Oct 2026 18:01:53 +0000
asID: 402718
IP address blocks: 169.128.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:0d:3a:43:bf:67:b6:a4:19:74:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
Validity
Not Before: Jul 8 19:29:53 2026 GMT
Not After : Oct 6 18:01:53 2026 GMT
Subject: CN=089eeb82-ed93-4dd8-a740-d779cea6d124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:79:9d:c7:b6:4c:2d:c0:d3:b2:09:d7:8c:
78:87:7e:cf:ad:4b:51:0f:f2:2c:1d:b4:c7:fa:18:
e9:db:af:19:70:c5:94:3d:ed:cb:2b:7c:9b:30:bd:
7e:12:c7:fe:41:ba:81:de:b0:a7:21:55:40:6c:8c:
b1:03:52:ef:d9:73:b0:4d:30:67:7a:23:b4:30:97:
66:88:d3:9c:d3:16:08:5d:96:9f:16:69:b6:6d:06:
bc:ef:67:df:62:87:08:d7:f8:18:b4:51:50:a0:1c:
cf:7b:fe:79:fb:38:bd:60:1a:2a:92:a6:05:0d:cf:
bc:be:0c:af:8e:9c:47:cd:d7:1d:f6:3a:7d:43:79:
e6:0c:9c:cb:07:d6:75:8e:53:94:97:58:1b:9e:3d:
89:b2:3d:f1:ed:bd:36:08:8d:b1:c8:fa:da:dc:9c:
f8:fe:21:be:b4:86:4d:74:97:dc:06:d4:29:49:23:
78:13:68:e0:68:c9:28:f1:b9:ef:11:34:32:03:ba:
80:ed:31:46:4c:78:27:ca:ab:b6:32:f4:07:75:e9:
e6:ba:8a:8c:06:eb:7d:41:b0:31:7b:ac:4b:d4:23:
bf:6f:28:bd:3d:1d:86:20:3e:4b:cf:e7:83:39:28:
46:89:a3:3a:66:ed:08:fe:08:65:24:16:d4:91:2c:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:96:2F:3D:DB:99:77:4A:DF:8B:8C:71:19:C1:0E:C1:AF:92:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2d0ca016-1614-37fc-aada-e73a723128de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl
X509v3 Authority Key Identifier:
keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
sbgp-ipAddrBlock: critical
IPv4:
169.128.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f3:9f:53:02:65:c2:b6:b1:3b:8d:0b:42:02:21:a9:f2:94:
49:8e:71:54:7d:66:61:53:e2:a0:78:52:74:6d:b2:87:61:90:
72:20:8c:72:70:65:87:51:1f:ef:3d:19:74:fc:d6:87:a2:a1:
b6:41:e6:80:fd:23:5a:84:5b:8d:d1:ce:d2:63:12:c3:bc:b0:
77:23:dc:4a:42:d3:d6:00:33:3d:70:e7:b7:44:ce:52:6f:dc:
64:66:1e:9e:a3:1f:69:b8:66:d7:ae:f3:fe:0a:8c:03:5b:32:
a2:71:c3:fd:e8:f2:7f:f1:8e:70:7c:dc:58:d9:46:be:8b:7e:
98:d0:b3:d8:8a:b6:01:e5:9e:31:0e:dc:43:ad:90:e7:b0:0f:
e3:43:26:1f:80:81:2e:4f:ee:ed:55:cc:c9:c7:b8:f7:b9:92:
39:3f:90:d0:58:a7:c0:9b:8a:ed:17:bc:bc:02:89:84:00:55:
ba:84:9c:3b:bb:26:0c:c4:71:58:ae:e4:74:fe:2f:9d:ea:f0:
cf:9c:0b:06:90:4f:2d:c2:d3:42:42:06:7b:ea:8d:57:ef:76:
d5:ba:33:78:ba:5d:d7:85:e8:7b:52:7f:fd:d2:25:97:5b:f7:
30:cb:ff:04:dc:4b:69:14:0e:1a:bf:8f:aa:00:d4:65:e0:6a:
54:cf:df:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vDTpDv2e2pBl06IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q5ZDM1OWMtZWM0OS00NjYwLWFiMDQtODI0Nzk4N2I4
ZGM3MB4XDTI2MDcwODE5Mjk1M1oXDTI2MTAwNjE4MDE1M1owLzEtMCsGA1UEAxMk
MDg5ZWViODItZWQ5My00ZGQ4LWE3NDAtZDc3OWNlYTZkMTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tt5nce2TC3A07IJ14x4h37PrUtRD/IsHbTH
+hjp268ZcMWUPe3LK3ybML1+Esf+QbqB3rCnIVVAbIyxA1Lv2XOwTTBneiO0MJdm
iNOc0xYIXZafFmm2bQa872ffYocI1/gYtFFQoBzPe/55+zi9YBoqkqYFDc+8vgyv
jpxHzdcd9jp9Q3nmDJzLB9Z1jlOUl1gbnj2Jsj3x7b02CI2xyPra3Jz4/iG+tIZN
dJfcBtQpSSN4E2jgaMko8bnvETQyA7qA7TFGTHgnyqu2MvQHdenmuoqMBut9QbAx
e6xL1CO/byi9PR2GID5Lz+eDOShGiaM6Zu0I/ghlJBbUkSzLVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/Cli8925l3St+LjHEZwQ7Br5LMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDlk
MzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3OTg3YjhkYzcvMmQwY2EwMTYtMTYxNC0z
N2ZjLWFhZGEtZTczYTcyMzEyOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q5ZDM1OWMtZWM0OS00NjYwLWFi
MDQtODI0Nzk4N2I4ZGM3LzNkOWQzNTljLWVjNDktNDY2MC1hYjA0LTgyNDc5ODdi
OGRjNy5jcmwwHwYDVR0jBBgwFoAULVmb101fYPgo+odvXqmIjWDDTkAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8zZDlkMzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3
OTg3YjhkYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYCoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3zn1MCZcK2sTuNC0ICIanylEmOcVR9ZmFT4qB4UnRtsodhkHIgjHJw
ZYdRH+89GXT81oeiobZB5oD9I1qEW43RztJjEsO8sHcj3EpC09YAMz1w57dEzlJv
3GRmHp6jH2m4Zteu8/4KjANbMqJxw/3o8n/xjnB83FjZRr6LfpjQs9iKtgHlnjEO
3EOtkOewD+NDJh+AgS5P7u1VzMnHuPe5kjk/kNBYp8Cbiu0XvLwCiYQAVbqEnDu7
JgzEcViu5HT+L53q8M+cCwaQTy3C00JCBnvqjVfvdtW6M3i6XdeF6HtSf/3SJZdb
9zDL/wTcS2kUDhq/j6oA1GXgalTP30E=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:53 2026 by rpki-client