
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa
File: 9a6c4241-4967-3a10-984a-6f62096d0f3c.roa (raw, json)
Hash identifier: T72t0hk182vVpZmSnBfBTjp6vAWKTrx7rZy2cCrK7OU=
Subject key identifier: 38:DD:18:06:EE:8B:6D:75:FD:7E:48:BB:ED:52:E2:E1:8D:15:F0:34
Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial: 010D0C9F4328584F81483CD7C9FA9FE5743B1680
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa
Signing time: Thu 15 Oct 2026 01:00:12 +0000
ROA not before: Thu 15 Oct 2026 01:00:12 +0000
ROA not after: Wed 13 Jan 2027 02:00:12 +0000
asID: 22616
IP address blocks: 149.117.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:81:48:3c:d7:c9:fa:9f:e5:74:3b:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
Validity
Not Before: Oct 15 01:00:12 2026 GMT
Not After : Jan 13 02:00:12 2027 GMT
Subject: CN=697893bb-396a-4d57-976e-3833040edfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:1d:25:bd:18:f2:22:6f:2f:07:73:b0:b3:
20:d9:24:e8:b4:0e:cc:b2:a9:28:ed:f5:53:7c:88:
32:ea:aa:56:15:c7:db:7e:6b:0c:08:37:12:b1:f0:
84:7e:0f:f3:1c:ef:2b:e3:53:17:db:1d:6a:f4:76:
9b:25:e9:d1:d0:73:1f:ce:93:bf:2f:18:68:29:2b:
01:35:3e:a1:2c:c0:98:e5:54:b2:56:d5:f8:97:a6:
ac:3d:34:b3:96:34:58:1c:c8:39:70:f9:a5:87:62:
8c:22:89:30:2d:38:dd:ed:83:52:ae:98:0a:7f:29:
97:9d:6e:2e:71:36:3e:7e:48:82:fb:3d:26:e0:66:
c0:cc:23:b7:90:87:4e:c2:f1:a1:8e:9b:6d:69:69:
f5:ab:14:f1:7b:93:36:21:71:29:61:9e:c4:d7:43:
aa:81:5c:6d:b8:fc:fd:26:f1:6a:1d:53:e3:8a:54:
02:be:27:a4:6f:a5:4c:42:e4:3c:60:a2:45:2e:bf:
bb:8a:7b:03:3e:33:99:70:fe:0f:3d:1d:94:35:69:
12:b5:7c:4c:91:9f:26:fb:4a:24:c5:3d:96:bd:2e:
70:7c:38:42:69:82:35:ba:e7:32:e4:9f:71:f5:ac:
c8:f0:d1:00:2a:3a:fe:94:59:64:c3:95:b3:cd:c8:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:18:06:EE:8B:6D:75:FD:7E:48:BB:ED:52:E2:E1:8D:15:F0:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
X509v3 Authority Key Identifier:
keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
sbgp-ipAddrBlock: critical
IPv4:
149.117.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:4a:4a:7d:f9:90:38:ea:29:5c:6f:db:00:5d:93:57:bc:63:
8f:51:7a:43:03:bb:6b:75:f7:5f:95:93:da:e2:b8:b7:c0:62:
d8:45:50:22:34:41:cc:95:43:f3:f3:be:cb:68:86:b6:8b:0e:
96:39:0e:11:45:6c:31:de:ea:80:7b:13:5e:a1:a7:3f:8b:ae:
db:1c:20:ee:53:95:44:d7:bc:4e:41:c0:61:3c:54:c7:0f:87:
8a:68:e1:cb:af:9e:1d:3f:8f:c0:c5:26:e6:75:0f:b5:92:66:
53:dc:df:e0:e2:c8:a4:21:c8:5c:bc:8a:13:2b:dd:5f:41:15:
af:d6:e6:5e:1d:03:c8:93:de:1f:6b:59:fe:72:fe:73:39:91:
50:6f:bc:29:4c:21:b5:41:1c:17:c3:99:b1:22:8b:49:df:98:
49:f3:c6:5f:93:e6:1b:9f:9c:85:f9:d2:09:6b:2c:57:b5:db:
7b:26:09:1d:5c:2a:f6:c8:09:01:fe:e7:59:72:21:99:1f:6e:
55:c1:9a:96:83:8a:60:86:88:e3:eb:b0:b8:6a:22:3e:bc:25:
8a:fe:df:ad:58:28:a2:ef:08:d4:4e:91:85:d7:f8:78:c0:29:
5b:50:f4:78:da:20:d5:af:9c:e1:1b:59:d0:b1:1c:75:bc:df:
2b:85:33:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+BSDzXyfqf5XQ7FoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3
NTgzMB4XDTI2MTAxNTAxMDAxMloXDTI3MDExMzAyMDAxMlowLzEtMCsGA1UEAxMk
Njk3ODkzYmItMzk2YS00ZDU3LTk3NmUtMzgzMzA0MGVkZmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJYdJb0Y8iJvLwdzsLMg2STotA7Msqko7fVT
fIgy6qpWFcfbfmsMCDcSsfCEfg/zHO8r41MX2x1q9HabJenR0HMfzpO/LxhoKSsB
NT6hLMCY5VSyVtX4l6asPTSzljRYHMg5cPmlh2KMIokwLTjd7YNSrpgKfymXnW4u
cTY+fkiC+z0m4GbAzCO3kIdOwvGhjpttaWn1qxTxe5M2IXEpYZ7E10OqgVxtuPz9
JvFqHVPjilQCviekb6VMQuQ8YKJFLr+7insDPjOZcP4PPR2UNWkStXxMkZ8m+0ok
xT2WvS5wfDhCaYI1uucy5J9x9azI8NEAKjr+lFlkw5Wzzcj1VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjdGAbui211/X5Iu+1S4uGNFfA0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk
NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOWE2YzQyNDEtNDk2Ny0z
YTEwLTk4NGEtNmY2MjA5NmQwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx
ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0
NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2
MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhKSn35kDjqKVxv2wBdk1e8Y49RekMDu2t191+Vk9riuLfAYthFUCI0
QcyVQ/PzvstohraLDpY5DhFFbDHe6oB7E16hpz+LrtscIO5TlUTXvE5BwGE8VMcP
h4po4cuvnh0/j8DFJuZ1D7WSZlPc3+DiyKQhyFy8ihMr3V9BFa/W5l4dA8iT3h9r
Wf5y/nM5kVBvvClMIbVBHBfDmbEii0nfmEnzxl+T5hufnIX50glrLFe123smCR1c
KvbICQH+51lyIZkfblXBmpaDimCGiOPrsLhqIj68JYr+361YKKLvCNROkYXX+HjA
KVtQ9HjaINWvnOEbWdCxHHW83yuFMyk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:26:34 2026 by rpki-client