
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa
File: d8715c0f-d4b7-387d-9b13-8b219b245618.roa (raw, json)
Hash identifier: 0wDHKgZfpjqX+1X6RsJbgSG1lNnoT7iEpUGg6nobbRM=
Subject key identifier: 97:98:90:0B:2F:E3:F2:69:D3:B9:A1:15:E3:DA:0C:63:C3:FA:4F:DD
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F4328584EA788291CEAFEDEF68FC4BCB0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 35908
IP address blocks: 72.172.85.0/24 maxlen: 24
72.172.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:29:1c:ea:fe:de:f6:8f:c4:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=393e0144-e241-4222-947d-a24e476a365f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b9:24:92:f1:19:f0:bb:7d:fc:b6:00:56:b5:
09:44:e8:62:50:6b:2d:eb:09:7b:5b:e2:35:78:89:
75:90:c3:8d:c5:4c:8f:ff:65:af:36:33:b4:a6:62:
7a:40:a9:84:65:b2:9a:6f:56:8b:b9:dc:44:de:01:
63:f4:92:a1:b6:83:7a:3d:48:3d:79:b3:36:f4:80:
88:73:f7:e6:74:1b:a1:8a:b8:26:c8:95:e7:d2:b6:
c6:a8:cb:43:22:83:71:a6:30:fe:3b:c8:6b:37:f8:
b6:07:8e:47:47:2f:40:b1:17:b9:49:23:df:de:a5:
fb:e8:e5:5d:3c:c5:bc:e1:33:b9:2e:2a:ad:5e:1e:
26:0e:f3:74:7b:38:e4:0c:87:3f:e6:ef:81:53:99:
0a:b3:ec:aa:bb:a6:90:0f:1e:a9:18:17:e8:89:bc:
1d:b2:ac:16:80:18:3e:df:e7:d8:5d:c3:c9:cf:7c:
b2:12:f2:ef:50:86:67:74:49:16:fe:8c:a8:73:63:
a5:c3:8d:bc:44:bc:99:4b:42:f2:5c:0e:7e:c3:cf:
46:4e:89:20:62:e7:6a:9f:29:df:48:8c:53:2c:78:
b8:12:b7:93:a7:84:42:8b:5c:c6:36:01:0e:f7:a0:
7b:d0:a3:cb:11:e9:c8:23:71:9d:1b:4e:12:bc:2e:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:90:0B:2F:E3:F2:69:D3:B9:A1:15:E3:DA:0C:63:C3:FA:4F:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.85.0/24
72.172.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:41:f3:14:b4:19:17:69:7d:2f:d4:1e:29:b4:54:4b:f3:8a:
fd:4a:c1:5d:ae:ce:82:80:39:fb:51:f2:47:45:45:5d:86:b6:
87:db:fd:18:b1:4d:b4:16:ad:f6:f8:de:b8:af:52:49:47:a4:
ec:bf:0b:8d:87:fd:5a:78:33:a9:00:91:b2:0f:e1:bb:39:c3:
f7:10:27:b2:0c:cd:6f:6c:9b:51:b5:d3:70:09:79:55:b1:88:
cd:b5:b8:da:ba:3f:c2:0b:c9:aa:62:a3:92:ec:03:2a:7e:1b:
3e:4b:53:29:59:27:5e:3a:70:25:19:6b:bd:b3:df:fe:7d:57:
3f:40:b7:6c:53:57:35:e2:ee:8b:17:f5:b6:81:55:30:b7:bd:
71:bd:54:90:f6:4c:b3:34:de:3e:1b:d6:09:ad:96:33:ba:98:
a1:b6:57:52:73:9d:48:d6:86:2a:27:90:35:81:44:9e:e4:99:
3b:e8:96:21:4f:8a:27:4c:7b:73:33:f8:ce:83:94:6b:eb:8f:
4c:5c:d8:f5:37:e5:7b:03:e9:5f:7b:47:2f:d7:cf:8f:0f:07:
05:4a:b4:30:ff:54:86:a6:eb:3a:67:fe:4f:45:de:dc:43:01:
16:d3:0b:bc:4d:ef:8f:b0:63:34:58:a5:1c:0c:28:9f:ec:04:
2b:c1:d6:38
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6niCkc6v7e9o/EvLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzkzZTAxNDQtZTI0MS00MjIyLTk0N2QtYTI0ZTQ3NmEzNjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7kkkvEZ8Lt9/LYAVrUJROhiUGst6wl7W+I1
eIl1kMONxUyP/2WvNjO0pmJ6QKmEZbKab1aLudxE3gFj9JKhtoN6PUg9ebM29ICI
c/fmdBuhirgmyJXn0rbGqMtDIoNxpjD+O8hrN/i2B45HRy9AsRe5SSPf3qX76OVd
PMW84TO5LiqtXh4mDvN0ezjkDIc/5u+BU5kKs+yqu6aQDx6pGBfoibwdsqwWgBg+
3+fYXcPJz3yyEvLvUIZndEkW/oyoc2Olw428RLyZS0LyXA5+w89GTokgYudqnynf
SIxTLHi4EreTp4RCi1zGNgEO96B70KPLEenII3GdG04SvC6jBQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJeYkAsv4/Jp07mhFePaDGPD+k/dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZDg3MTVjMGYtZDRiNy0z
ODdkLTliMTMtOGIyMTliMjQ1NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASKxVAwQA
SKxYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACNB8xS0GRdpfS/UHim0VEvziv1KwV2uzoKAOftR8kdFRV2G
tofb/RixTbQWrfb43rivUklHpOy/C42H/Vp4M6kAkbIP4bs5w/cQJ7IMzW9sm1G1
03AJeVWxiM21uNq6P8ILyapio5LsAyp+Gz5LUylZJ146cCUZa72z3/59Vz9At2xT
VzXi7osX9baBVTC3vXG9VJD2TLM03j4b1gmtljO6mKG2V1JznUjWhionkDWBRJ7k
mTvoliFPiidMe3Mz+M6DlGvrj0xc2PU35XsD6V97Ry/Xz48PBwVKtDD/VIam6zpn
/k9F3txDARbTC7xN74+wYzRYpRwMKJ/sBCvB1jg=
-----END CERTIFICATE-----
Generated at Sat Aug 15 11:01:29 2026 by rpki-client