
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa
File: 44213fe5-ccf1-31e5-af09-d84820c70b85.roa (raw, json)
Hash identifier: s4ndX0W+qstVBUfdyorvvciQOnv1jVTblqTdA2SULn4=
Subject key identifier: 2B:29:AD:14:15:DE:33:D0:08:1E:4B:7E:A8:3F:07:BE:B6:FF:C9:6C
Certificate issuer: /CN=64e40858-5cbf-4756-8298-1db55fc66d82
Certificate serial: 010D0C9F4328584EA79169A91E4DB2E5F43F3180
Authority key identifier: 7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 21859
IP address blocks: 23.154.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:69:a9:1e:4d:b2:e5:f4:3f:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e40858-5cbf-4756-8298-1db55fc66d82
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=53c352f3-fca1-427d-b185-e954aefd5f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:46:69:37:a6:65:a0:f5:3c:44:f4:e6:29:
9a:36:5a:ef:46:da:0a:39:aa:5f:2c:8a:fa:b9:7d:
e7:64:7b:a7:bd:d9:e8:c6:34:d7:fb:77:b1:c6:39:
92:97:36:17:04:62:da:b0:3b:cd:ba:bd:6e:75:ad:
20:58:ba:b8:d1:86:86:89:45:98:4f:c0:37:90:21:
b3:09:79:a9:50:f6:6b:f3:75:2e:4b:ff:dd:76:66:
cf:91:f7:ca:a5:42:84:43:16:d1:3e:6f:36:a3:ad:
da:8b:cf:bd:51:54:e5:12:2b:0e:0d:41:92:2b:06:
0b:fa:40:b4:be:2d:be:95:f3:63:e5:f7:01:a6:5f:
cd:af:78:65:03:60:f6:de:90:13:c6:49:fb:f5:5a:
95:a5:04:7f:17:b4:d4:09:af:c3:0b:71:89:58:92:
fe:aa:e0:d0:16:97:d0:af:78:29:15:45:78:7d:96:
ab:d1:42:0e:2b:f6:16:67:fa:fb:58:55:48:69:6c:
1b:fd:12:bc:92:98:b1:4a:2d:45:fa:b9:51:c5:46:
97:9e:98:1d:aa:b8:37:7e:d6:e2:7b:29:0f:a0:88:
6f:f8:ab:08:b5:08:3b:3b:5c:04:79:93:51:a7:75:
15:cb:eb:52:51:7b:c1:c1:df:a0:c3:d8:e5:7e:01:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:AD:14:15:DE:33:D0:08:1E:4B:7E:A8:3F:07:BE:B6:FF:C9:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.crl
X509v3 Authority Key Identifier:
keyid:7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:95:ea:e1:23:35:dd:94:e1:f1:ef:6f:98:4f:3d:9b:dd:7b:
03:65:91:d0:d2:e3:fe:5e:88:bc:fb:15:d8:c4:85:58:80:2e:
a4:42:9c:2e:95:54:2c:99:c7:7b:d9:0a:59:0b:3f:62:a4:3b:
fb:e4:2b:ce:8c:24:73:db:89:a9:3b:d4:13:06:98:24:5a:ff:
3e:d4:60:99:66:28:91:54:f2:4d:fe:02:50:10:e2:3f:c4:45:
37:bb:70:8c:a5:c7:2f:43:58:19:be:9b:76:ac:b2:7e:f0:16:
96:57:08:70:91:92:54:03:f9:8d:da:4c:6a:74:d6:02:03:fa:
74:82:e4:46:91:38:83:ec:4a:4b:45:4d:c0:d7:9c:6e:9c:00:
30:75:9b:0c:dd:9b:61:86:b0:2a:ef:ec:df:17:f6:cd:e1:98:
ef:fa:11:87:83:c4:24:ed:df:a8:13:5c:ae:8b:ea:ed:72:4f:
fb:ab:9d:64:29:74:00:1c:24:cf:d6:85:b0:45:79:b3:19:51:
2c:66:13:2b:12:ca:0a:a6:f6:4e:52:08:25:58:51:c9:df:74:
96:07:bf:9b:fa:21:84:00:2b:49:b8:87:9c:e2:90:70:36:48:
e5:d0:7c:89:3e:f9:a4:5f:97:7a:96:cd:81:c9:56:63:07:a7:
d8:e7:9b:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkWmpHk2y5fQ/MYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRlNDA4NTgtNWNiZi00NzU2LTgyOTgtMWRiNTVmYzY2
ZDgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTNjMzUyZjMtZmNhMS00MjdkLWIxODUtZTk1NGFlZmQ1ZjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTdGaTemZaD1PET05imaNlrvRtoKOapfLIr6
uX3nZHunvdnoxjTX+3exxjmSlzYXBGLasDvNur1uda0gWLq40YaGiUWYT8A3kCGz
CXmpUPZr83UuS//ddmbPkffKpUKEQxbRPm82o63ai8+9UVTlEisODUGSKwYL+kC0
vi2+lfNj5fcBpl/Nr3hlA2D23pATxkn79VqVpQR/F7TUCa/DC3GJWJL+quDQFpfQ
r3gpFUV4fZar0UIOK/YWZ/r7WFVIaWwb/RK8kpixSi1F+rlRxUaXnpgdqrg3ftbi
eykPoIhv+KsItQg7O1wEeZNRp3UVy+tSUXvBwd+gw9jlfgGoMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsprRQV3jPQCB5Lfqg/B762/8lsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NGU0
MDg1OC01Y2JmLTQ3NTYtODI5OC0xZGI1NWZjNjZkODIvNDQyMTNmZTUtY2NmMS0z
MWU1LWFmMDktZDg0ODIwYzcwYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjRlNDA4NTgtNWNiZi00NzU2LTgy
OTgtMWRiNTVmYzY2ZDgyLzY0ZTQwODU4LTVjYmYtNDc1Ni04Mjk4LTFkYjU1ZmM2
NmQ4Mi5jcmwwHwYDVR0jBBgwFoAUfaRQJ99E08tsnGubzEuZcrOTpzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82NGU0MDg1OC01Y2JmLTQ3NTYtODI5OC0xZGI1
NWZjNjZkODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKV6uEjNd2U4fHvb5hPPZvdewNlkdDS4/5eiLz7FdjEhViALqRCnC6V
VCyZx3vZClkLP2KkO/vkK86MJHPbiak71BMGmCRa/z7UYJlmKJFU8k3+AlAQ4j/E
RTe7cIylxy9DWBm+m3assn7wFpZXCHCRklQD+Y3aTGp01gID+nSC5EaROIPsSktF
TcDXnG6cADB1mwzdm2GGsCrv7N8X9s3hmO/6EYeDxCTt36gTXK6L6u1yT/urnWQp
dAAcJM/WhbBFebMZUSxmEysSygqm9k5SCCVYUcnfdJYHv5v6IYQAK0m4h5zikHA2
SOXQfIk++aRfl3qWzYHJVmMHp9jnm2U=
-----END CERTIFICATE-----
Generated at Sat Aug 22 22:36:12 2026 by rpki-client