
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa
File: 1043ec17-c314-38f1-a981-75d7cdb43eba.roa (raw, json)
Hash identifier: kyC47EFY99oM4SMWuzCiSioZjku/0Z9Lm+ekHSnqnD4=
Subject key identifier: 66:6C:F5:E4:8A:6C:74:A5:3B:DE:31:53:DA:7E:EA:9B:F3:23:BE:5F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584ED16723628199E2671517D8B8
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa
Signing time: Thu 13 Aug 2026 01:00:11 +0000
ROA not before: Thu 13 Aug 2026 01:00:11 +0000
ROA not after: Wed 11 Nov 2026 02:00:11 +0000
asID: 132372
IP address blocks: 172.94.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d1:67:23:62:81:99:e2:67:15:17:d8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 13 01:00:11 2026 GMT
Not After : Nov 11 02:00:11 2026 GMT
Subject: CN=6d617b93-3882-41e2-8e3d-f195a054a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:85:ed:ec:cb:6c:dc:b6:83:d5:e3:cc:3e:
cb:8a:98:c6:a1:fc:96:23:bb:53:8e:8a:61:a7:d8:
10:a9:2e:8b:62:41:57:5d:d8:24:60:e1:a9:e5:3d:
09:16:6f:28:e7:13:e1:12:7f:b5:9c:f6:57:4d:09:
0d:31:1c:dd:0a:80:2d:a8:17:95:98:e2:69:db:d9:
59:53:12:e5:51:56:ba:4e:43:02:d9:ee:ce:c0:33:
4c:84:c0:59:8e:84:30:76:a2:4c:ab:4f:13:d6:f4:
03:e3:80:ef:7b:dc:37:f0:98:01:92:f8:bf:c0:6a:
ac:60:ad:5d:c6:b7:1f:d4:de:6a:a6:59:fb:ac:23:
05:3f:e5:0c:29:8b:95:85:d2:63:c2:29:59:cd:0d:
e9:fd:fe:2a:ab:03:f5:27:8b:08:f4:22:c8:4d:e7:
f7:9f:7b:fb:45:e9:44:76:d9:48:2d:b0:dc:2a:52:
60:49:a0:0e:ee:36:dd:0f:9a:8b:ee:44:3a:e5:60:
04:2b:09:96:ec:d7:94:fc:f4:e3:9b:c7:db:50:b4:
34:32:17:a7:1c:9f:e4:44:f0:09:db:e1:4d:58:46:
a4:19:17:d9:9f:46:1b:b4:5a:4d:01:01:ac:6f:5e:
97:70:1b:cf:2e:2d:7e:3b:ab:65:66:3c:93:c2:c2:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:F5:E4:8A:6C:74:A5:3B:DE:31:53:DA:7E:EA:9B:F3:23:BE:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:cd:93:d6:16:9b:22:81:bb:08:5e:88:7e:96:fd:f7:66:1e:
f8:c5:98:16:2d:7d:f5:f2:70:4d:bc:cf:19:40:79:fc:67:19:
39:d1:91:af:56:74:51:76:73:ec:63:f8:ff:4d:fe:a0:78:44:
b5:b1:b6:7a:ea:c4:a1:0d:1b:d3:b7:34:18:b3:31:b1:c6:ec:
91:aa:48:53:b0:a6:fd:23:be:91:64:01:d5:f4:85:b7:f5:4e:
c1:7e:22:2b:34:07:a7:80:34:cf:d3:ff:1c:24:72:2f:e9:91:
7e:f9:0c:b2:70:38:c1:c0:f5:83:51:a1:55:f7:ed:95:c9:ee:
92:d8:a8:32:37:c0:5a:55:f7:26:cf:e7:f1:a1:fc:46:80:1c:
2b:83:5e:41:19:9c:20:9d:73:c4:73:75:c8:1e:92:7c:79:8a:
5f:8d:f7:1f:fe:c5:3d:ca:22:42:32:4b:30:d1:75:3b:1c:cb:
90:5d:0e:fa:db:ed:6f:ba:43:ac:e4:e1:74:18:22:c6:b9:4a:
ed:ec:c8:85:07:70:ef:4e:c9:e7:3c:3d:3f:bf:26:25:12:54:
17:3f:e7:67:ae:a0:0f:5f:25:f9:88:15:74:aa:b1:ef:fb:3d:
72:2b:68:77:eb:01:f4:4a:3c:ae:82:c0:4c:32:24:91:c5:34:
4c:30:2d:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZyNigZniZxUX2LgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk
NmQ2MTdiOTMtMzg4Mi00MWUyLThlM2QtZjE5NWEwNTRhMTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum6F7ezLbNy2g9XjzD7LipjGofyWI7tTjoph
p9gQqS6LYkFXXdgkYOGp5T0JFm8o5xPhEn+1nPZXTQkNMRzdCoAtqBeVmOJp29lZ
UxLlUVa6TkMC2e7OwDNMhMBZjoQwdqJMq08T1vQD44Dve9w38JgBkvi/wGqsYK1d
xrcf1N5qpln7rCMFP+UMKYuVhdJjwilZzQ3p/f4qqwP1J4sI9CLITef3n3v7RelE
dtlILbDcKlJgSaAO7jbdD5qL7kQ65WAEKwmW7NeU/PTjm8fbULQ0MhenHJ/kRPAJ
2+FNWEakGRfZn0YbtFpNAQGsb16XcBvPLi1+O6tlZjyTwsIp1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZs9eSKbHSlO94xU9p+6pvzI75fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTA0M2VjMTctYzMxNC0z
OGYxLWE5ODEtNzVkN2NkYjQzZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLNk9YWmyKBuwheiH6W/fdmHvjFmBYtffXycE28zxlAefxnGTnRka9W
dFF2c+xj+P9N/qB4RLWxtnrqxKENG9O3NBizMbHG7JGqSFOwpv0jvpFkAdX0hbf1
TsF+Iis0B6eANM/T/xwkci/pkX75DLJwOMHA9YNRoVX37ZXJ7pLYqDI3wFpV9ybP
5/Gh/EaAHCuDXkEZnCCdc8Rzdcgeknx5il+N9x/+xT3KIkIySzDRdTscy5BdDvrb
7W+6Q6zk4XQYIsa5Su3syIUHcO9Oyec8PT+/JiUSVBc/52euoA9fJfmIFXSqse/7
PXIraHfrAfRKPK6CwEwyJJHFNEwwLZI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:50:37 2026 by rpki-client