
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bab57c6-a68d-33ac-807a-96f55dd3496e.roa
File: 5bab57c6-a68d-33ac-807a-96f55dd3496e.roa (raw, json)
Hash identifier: yv/Zod7iUiT+ORryWUVLXG7dwSXK8xxSiKMai90aaT4=
Subject key identifier: 3D:34:B7:74:26:5A:43:CC:87:15:71:C7:75:BD:AB:00:E6:16:51:A8
Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial: 010D0C9F4328584FA308D40C647DAA1A642EEDE2
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bab57c6-a68d-33ac-807a-96f55dd3496e.roa
Signing time: Tue 27 Oct 2026 03:10:00 +0000
ROA not before: Tue 27 Oct 2026 03:10:00 +0000
ROA not after: Mon 25 Jan 2027 04:10:00 +0000
asID: 11696
IP address blocks: 64.190.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a3:08:d4:0c:64:7d:aa:1a:64:2e:ed:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
Validity
Not Before: Oct 27 03:10:00 2026 GMT
Not After : Jan 25 04:10:00 2027 GMT
Subject: CN=5d382e26-e096-41b9-8f49-957d04145339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:9a:68:84:2d:fd:aa:ce:f1:a2:8a:07:e3:
c0:30:3b:e0:2a:05:18:37:04:c6:05:c6:c4:3f:3c:
47:9d:c9:f6:37:ae:53:e8:49:27:48:5d:bd:80:ff:
9b:52:24:90:80:32:93:e0:6d:74:8d:9e:96:0e:ae:
ed:f5:f4:3c:32:61:ad:23:7a:68:c2:16:42:0b:bf:
89:d0:d9:7c:d7:1c:be:9a:45:8a:ca:a4:1e:bc:c0:
ec:0e:a5:1a:16:26:b9:8e:1c:35:ab:a8:56:73:29:
11:43:2c:78:e6:23:e8:68:f7:87:65:ca:8b:34:a3:
98:be:e2:b7:80:48:f0:ab:96:65:5e:e0:08:a8:3a:
93:4b:7d:c3:a3:8a:3f:51:7b:31:48:ac:b8:cd:e6:
ee:f5:7f:4d:80:61:81:31:7c:3c:91:31:94:11:07:
f7:c5:9f:93:1d:ef:3f:de:6a:d5:7d:e8:86:c7:68:
7e:9e:0d:c4:a3:cc:a2:6a:66:58:32:39:c8:8e:77:
78:f4:5a:78:22:99:49:89:46:9e:72:e5:be:39:34:
54:79:61:aa:52:ee:fd:43:ed:9c:11:e4:e3:ff:67:
9a:f9:db:34:79:07:41:6a:a3:2b:0f:81:8d:8d:4b:
0d:70:86:37:16:94:69:f5:1e:cb:16:7c:71:89:45:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:B7:74:26:5A:43:CC:87:15:71:C7:75:BD:AB:00:E6:16:51:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bab57c6-a68d-33ac-807a-96f55dd3496e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
X509v3 Authority Key Identifier:
keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
sbgp-ipAddrBlock: critical
IPv4:
64.190.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:98:5c:6b:18:55:36:cd:db:04:74:e7:e6:1e:00:bf:3d:f2:
ad:6c:77:b7:cf:dc:b2:c6:85:72:0c:2b:1d:77:55:74:65:50:
ab:ee:ba:79:3f:f5:12:2c:10:28:bd:96:c0:f2:33:bc:be:7d:
19:39:c1:20:ca:ed:6f:61:ac:37:4c:64:f1:8e:f2:ff:ea:75:
52:98:44:08:a0:b3:21:cf:d5:77:b7:dc:46:dc:0a:36:46:b3:
57:d8:64:71:1e:d2:30:f0:47:56:7f:e3:c9:81:fd:e1:f1:2b:
72:3a:90:b6:0a:c6:27:3c:8e:0d:a0:1c:4b:64:c6:45:68:e5:
9b:7a:76:17:98:dd:e0:be:0d:c6:ec:cd:3e:90:bd:90:e8:cf:
2c:85:fa:27:be:86:19:65:55:07:95:2b:1e:4f:7b:7c:04:47:
49:66:43:e7:b1:7c:fb:6f:76:88:e7:5b:a2:66:7b:38:d4:df:
0e:80:2d:5d:da:bd:11:0b:f2:8d:75:5f:d3:27:92:eb:cf:0e:
3b:0c:aa:8b:fb:85:f5:37:00:e8:25:2b:ea:bd:52:d9:39:ce:
9e:dc:cb:cc:5d:31:f5:9f:7d:88:9f:20:e4:ca:9e:06:ab:43:
43:00:92:7a:6a:61:e7:41:89:9e:18:54:b7:a2:b8:a1:20:ba:
a9:17:ee:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNQMZH2qGmQu7eIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0
MTU2MB4XDTI2MTAyNzAzMTAwMFoXDTI3MDEyNTA0MTAwMFowLzEtMCsGA1UEAxMk
NWQzODJlMjYtZTA5Ni00MWI5LThmNDktOTU3ZDA0MTQ1MzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOCaaIQt/arO8aKKB+PAMDvgKgUYNwTGBcbE
PzxHncn2N65T6EknSF29gP+bUiSQgDKT4G10jZ6WDq7t9fQ8MmGtI3powhZCC7+J
0Nl81xy+mkWKyqQevMDsDqUaFia5jhw1q6hWcykRQyx45iPoaPeHZcqLNKOYvuK3
gEjwq5ZlXuAIqDqTS33Do4o/UXsxSKy4zebu9X9NgGGBMXw8kTGUEQf3xZ+THe8/
3mrVfeiGx2h+ng3Eo8yiamZYMjnIjnd49Fp4IplJiUaecuW+OTRUeWGqUu79Q+2c
EeTj/2ea+ds0eQdBaqMrD4GNjUsNcIY3FpRp9R7LFnxxiUWpVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD00t3QmWkPMhxVxx3W9qwDmFlGoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh
ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvNWJhYjU3YzYtYTY4ZC0z
M2FjLTgwN2EtOTZmNTVkZDM0OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0
MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0
NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3
MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuYXGsYVTbN2wR05+YeAL898q1sd7fP3LLGhXIMKx13VXRlUKvuunk/
9RIsECi9lsDyM7y+fRk5wSDK7W9hrDdMZPGO8v/qdVKYRAigsyHP1Xe33EbcCjZG
s1fYZHEe0jDwR1Z/48mB/eHxK3I6kLYKxic8jg2gHEtkxkVo5Zt6dheY3eC+Dcbs
zT6QvZDozyyF+ie+hhllVQeVKx5Pe3wER0lmQ+exfPtvdojnW6JmezjU3w6ALV3a
vREL8o11X9MnkuvPDjsMqov7hfU3AOglK+q9Utk5zp7cy8xdMfWffYifIOTKngar
Q0MAknpqYedBiZ4YVLeiuKEguqkX7rU=
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:52:22 2026 by rpki-client