
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/8d6e5be4-c2ca-3cb5-997a-3ff550cb657b.roa
File: 8d6e5be4-c2ca-3cb5-997a-3ff550cb657b.roa (raw, json)
Hash identifier: 8wOmmUOLqkIKoWUpbLcQ+QgcOpwI0ieWjkFoFmLA/8g=
Subject key identifier: 8E:50:DE:07:98:2D:02:7A:C1:99:23:A0:1C:AE:3C:38:5F:5E:5B:7E
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584F85B25EAC0DCCE24BC98E1380
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/8d6e5be4-c2ca-3cb5-997a-3ff550cb657b.roa
Signing time: Fri 16 Oct 2026 14:57:21 +0000
ROA not before: Fri 16 Oct 2026 14:57:21 +0000
ROA not after: Thu 14 Jan 2027 15:57:21 +0000
asID: 402215
IP address blocks: 192.82.174.0/24 maxlen: 24
192.132.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:85:b2:5e:ac:0d:cc:e2:4b:c9:8e:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Oct 16 14:57:21 2026 GMT
Not After : Jan 14 15:57:21 2027 GMT
Subject: CN=ce2b9418-d78e-49ca-b404-539c76fb6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:4b:21:d9:3c:67:93:29:55:7f:b1:df:12:
d3:f5:a6:01:68:35:ed:3a:97:a7:3e:c4:aa:75:21:
e0:3d:14:02:2d:0a:56:b5:de:af:09:36:73:61:1d:
15:90:d0:16:4b:ab:61:09:27:f4:04:70:97:cb:48:
6c:e9:61:0f:1b:a9:46:79:41:36:74:e4:e7:91:f0:
17:9f:0e:c0:36:03:fd:6d:5a:db:03:71:d5:27:f5:
cf:00:9b:bf:66:f1:ad:29:b7:4d:7d:c5:3a:05:e4:
b9:02:83:55:5d:58:43:5c:9e:36:02:c0:e5:b2:c3:
6e:c5:a0:94:5b:87:72:14:2d:95:8a:f3:d1:7c:34:
bc:42:64:82:cc:a4:5f:3a:42:b7:7f:6c:60:97:46:
c7:bf:e3:98:9a:a3:37:95:62:1e:e2:fc:2f:dd:46:
9a:d7:a6:41:92:9b:2d:29:01:c7:f0:fe:ec:52:1f:
7b:12:bc:e9:99:4b:04:b7:3c:c3:25:f5:20:32:f1:
d0:4a:1c:36:6a:12:df:67:13:3a:f4:e8:02:bd:ae:
cc:1d:45:a0:87:bc:63:4e:94:9c:78:b2:c4:1f:9d:
a9:26:84:bc:8f:70:4b:31:a2:9b:10:57:b1:1f:30:
33:a3:b4:fb:0b:7e:ba:6a:c4:21:97:9e:5d:3b:eb:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:DE:07:98:2D:02:7A:C1:99:23:A0:1C:AE:3C:38:5F:5E:5B:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/8d6e5be4-c2ca-3cb5-997a-3ff550cb657b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.174.0/24
192.132.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3b:ac:70:56:38:24:57:a2:f8:ef:e3:a8:be:92:45:fc:e5:
f1:5a:35:56:92:88:57:ab:1b:f8:41:a6:f2:52:48:9c:29:69:
fc:f2:8a:b6:fe:07:ed:3f:14:75:c6:3b:57:8e:0c:5f:5f:1f:
bb:55:2b:e0:f3:97:37:d8:a6:f5:4a:de:23:cd:e9:6c:c6:4d:
f7:49:88:77:62:c8:46:79:bd:84:ca:0f:c3:bf:81:6c:db:73:
83:64:ba:7d:f4:4f:50:58:fa:65:9d:81:ca:e4:d6:87:88:39:
ec:a1:bb:31:26:7b:6c:a1:e6:46:67:8d:00:13:ea:66:be:e4:
6c:fe:95:df:1c:79:ca:35:25:09:dc:1f:dc:1a:10:1e:e9:08:
63:8b:ea:46:d0:2a:05:3d:03:73:36:10:76:99:38:91:1c:bc:
a8:bb:14:13:45:bf:1d:78:c4:b7:26:e8:f3:cb:f2:25:31:99:
bf:7b:d1:29:be:51:06:f2:df:2b:47:b3:20:71:87:73:2e:17:
bb:a6:63:5e:bf:92:6b:f9:1c:82:49:d0:58:0c:1d:3d:8e:5a:
2b:2b:ed:3d:7f:93:62:86:27:a0:59:33:f4:3a:93:af:67:34:
74:1e:d3:dd:03:47:8a:88:6c:d7:48:6d:6f:0d:72:62:10:b3:
5c:29:57:30
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+Fsl6sDcziS8mOE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MTAxNjE0NTcyMVoXDTI3MDExNDE1NTcyMVowLzEtMCsGA1UEAxMk
Y2UyYjk0MTgtZDc4ZS00OWNhLWI0MDQtNTM5Yzc2ZmI2ZjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2VLIdk8Z5MpVX+x3xLT9aYBaDXtOpenPsSq
dSHgPRQCLQpWtd6vCTZzYR0VkNAWS6thCSf0BHCXy0hs6WEPG6lGeUE2dOTnkfAX
nw7ANgP9bVrbA3HVJ/XPAJu/ZvGtKbdNfcU6BeS5AoNVXVhDXJ42AsDlssNuxaCU
W4dyFC2VivPRfDS8QmSCzKRfOkK3f2xgl0bHv+OYmqM3lWIe4vwv3Uaa16ZBkpst
KQHH8P7sUh97ErzpmUsEtzzDJfUgMvHQShw2ahLfZxM69OgCva7MHUWgh7xjTpSc
eLLEH52pJoS8j3BLMaKbEFexHzAzo7T7C366asQhl55dO+uKVwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFI5Q3geYLQJ6wZkjoByuPDhfXlt+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvOGQ2ZTViZTQtYzJjYS0z
Y2I1LTk5N2EtM2ZmNTUwY2I2NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFKuAwQA
wITJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEQ7rHBWOCRXovjv46i+kkX85fFaNVaSiFerG/hBpvJSSJwp
afzyirb+B+0/FHXGO1eODF9fH7tVK+DzlzfYpvVK3iPN6WzGTfdJiHdiyEZ5vYTK
D8O/gWzbc4Nkun30T1BY+mWdgcrk1oeIOeyhuzEme2yh5kZnjQAT6ma+5Gz+ld8c
eco1JQncH9waEB7pCGOL6kbQKgU9A3M2EHaZOJEcvKi7FBNFvx14xLcm6PPL8iUx
mb970Sm+UQby3ytHsyBxh3MuF7umY16/kmv5HIJJ0FgMHT2OWisr7T1/k2KGJ6BZ
M/Q6k69nNHQe090DR4qIbNdIbW8NcmIQs1wpVzA=
-----END CERTIFICATE-----
Generated at Thu Oct 22 07:50:19 2026 by rpki-client