
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa
File: 898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa (raw, json)
Hash identifier: Dok+lntZmDyOQjVyIA4abcQn+FPBf/04YkAuybKg2bk=
Subject key identifier: 98:1B:0D:A9:49:C3:96:08:82:B7:C5:DF:42:23:57:AE:05:54:7A:33
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584DE2B5E7C7501C5FCDE3721440
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 13768
IP address blocks: 65.39.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:e7:c7:50:1c:5f:cd:e3:72:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=fb8da48c-f085-49a2-aaf1-ed422b167d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:95:e6:fa:60:85:00:00:c6:0b:c2:2a:d2:
5f:aa:6a:6b:13:84:b1:d6:2a:fb:e2:b5:fa:5f:cb:
ef:85:02:2f:c9:44:97:4b:14:9e:0e:83:c4:f4:c3:
e5:04:a6:9c:07:31:ea:37:b7:c4:26:8c:c0:66:51:
22:ea:21:d5:81:b8:55:fe:04:8a:4e:47:fe:50:90:
0e:0d:aa:75:f6:3f:42:79:95:1b:a5:f0:60:75:b8:
a1:e2:c3:12:8c:02:9e:27:69:08:43:e5:59:4e:6c:
ca:c1:67:77:42:00:db:a3:42:63:7e:ff:4f:56:0b:
7b:e0:9b:07:7b:5a:d3:1d:4f:ab:a4:b2:2d:53:3b:
c9:63:56:ef:26:27:54:54:af:23:75:aa:d6:fe:37:
cb:2c:08:00:da:de:61:83:77:72:01:83:f5:1b:3e:
77:f6:53:8b:6e:12:82:3c:34:ab:fb:25:bb:8a:d5:
bb:f7:f5:7f:6c:e5:c4:e0:da:f5:95:d7:8a:97:14:
d3:56:84:27:a8:83:87:aa:00:13:d5:b7:84:76:47:
7b:62:ee:4c:cc:0d:88:33:c0:fd:82:b0:9f:9d:25:
d0:f0:95:e6:bd:dd:cc:61:c9:39:53:69:5d:0a:b9:
21:66:f2:d0:d8:f0:d8:41:2e:4e:95:a9:12:26:47:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1B:0D:A9:49:C3:96:08:82:B7:C5:DF:42:23:57:AE:05:54:7A:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/898ae3b5-63e0-396a-a14f-85a374cc7cf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:69:4a:70:6e:6a:49:4b:38:69:1f:0d:7a:46:8a:16:c5:33:
39:20:c3:19:9e:7c:d0:64:f8:f0:1c:af:ad:9b:ff:45:40:5f:
f6:b7:4f:36:42:5f:44:7d:be:99:45:ed:ef:6f:e4:9e:96:b5:
50:5e:04:a2:7d:c6:d7:1f:b2:48:24:d8:0f:24:8d:9a:07:9d:
45:f5:17:76:8a:d5:09:bc:d7:8d:aa:ca:6a:12:64:a9:73:9a:
19:e8:81:94:5d:7f:95:f1:f6:91:51:55:5d:89:9d:e4:ce:f4:
bc:b6:d4:4c:3a:02:13:de:b4:f6:a8:e0:4c:c0:2d:70:c2:56:
20:a0:2c:40:54:1a:23:76:e0:7d:af:f6:f0:5f:df:aa:d7:f1:
a1:d1:bc:26:45:99:78:25:02:60:39:bf:0f:16:ac:ec:b4:74:
91:50:cc:6a:42:aa:90:02:e2:31:29:90:92:7b:3b:eb:28:f9:
0d:2b:af:81:b9:d0:82:6c:2f:a3:0e:47:7e:bb:74:67:7e:0d:
f2:a0:6e:c5:98:f2:56:c0:b2:6b:e0:74:09:32:65:53:ea:88:
cd:5d:54:f9:31:63:ce:79:10:e0:22:a4:13:23:d5:5e:40:a8:
90:04:fd:46:e2:6d:a6:0a:fd:a8:32:03:90:ff:01:97:67:ce:
3f:42:3b:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itefHUBxfzeNyFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
ZmI4ZGE0OGMtZjA4NS00OWEyLWFhZjEtZWQ0MjJiMTY3ZDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk++V5vpghQAAxgvCKtJfqmprE4Sx1ir74rX6
X8vvhQIvyUSXSxSeDoPE9MPlBKacBzHqN7fEJozAZlEi6iHVgbhV/gSKTkf+UJAO
Dap19j9CeZUbpfBgdbih4sMSjAKeJ2kIQ+VZTmzKwWd3QgDbo0Jjfv9PVgt74JsH
e1rTHU+rpLItUzvJY1bvJidUVK8jdarW/jfLLAgA2t5hg3dyAYP1Gz539lOLbhKC
PDSr+yW7itW79/V/bOXE4Nr1ldeKlxTTVoQnqIOHqgAT1beEdkd7Yu5MzA2IM8D9
grCfnSXQ8JXmvd3MYck5U2ldCrkhZvLQ2PDYQS5OlakSJkc2iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgbDalJw5YIgrfF30IjV64FVHozMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvODk4YWUzYjUtNjNlMC0z
OTZhLWExNGYtODVhMzc0Y2M3Y2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZpSnBuaklLOGkfDXpGihbFMzkgwxmefNBk+PAcr62b/0VAX/a3TzZC
X0R9vplF7e9v5J6WtVBeBKJ9xtcfskgk2A8kjZoHnUX1F3aK1Qm8142qymoSZKlz
mhnogZRdf5Xx9pFRVV2JneTO9Ly21Ew6AhPetPao4EzALXDCViCgLEBUGiN24H2v
9vBf36rX8aHRvCZFmXglAmA5vw8WrOy0dJFQzGpCqpAC4jEpkJJ7O+so+Q0rr4G5
0IJsL6MOR367dGd+DfKgbsWY8lbAsmvgdAkyZVPqiM1dVPkxY855EOAipBMj1V5A
qJAE/UbibaYK/agyA5D/AZdnzj9COxA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 17:00:26 2026 by rpki-client