
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
File: eae85ad0-1277-36ff-9059-3ed1f569e35e.roa (raw, json)
Hash identifier: B0k9BmRjZdkfMJnmRlYpAx5AV/ut2azKPXkZqR8Pid0=
Subject key identifier: FA:8E:D4:A6:2B:01:98:DF:48:8F:4E:72:35:2D:9C:16:C0:94:EE:F9
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584EFE1224E7625A9B1851ECE500
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 22765
IP address blocks: 72.20.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:24:e7:62:5a:9b:18:51:ec:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=02fe6467-2d4b-4f2c-b68d-27c60b920928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:f6:30:65:53:ba:2a:de:fa:25:a9:62:39:
6a:11:30:f1:6c:25:c8:15:7d:26:37:e2:93:51:e0:
a8:2c:a4:03:07:81:57:2b:85:8c:ee:72:63:20:e7:
ba:70:8e:af:c4:bf:37:db:a5:ed:af:80:b6:3a:ca:
99:33:cd:70:2a:ab:78:c0:8f:c8:05:73:cf:38:0f:
44:90:08:2c:51:00:9d:a3:c3:22:1e:b5:77:4a:2d:
e7:ad:94:f2:c9:a1:0d:ed:80:37:61:2b:a8:f3:62:
ff:50:f7:0b:ef:f6:48:54:00:3c:3b:5a:07:2a:cb:
99:4e:37:92:9b:0f:8c:b1:eb:29:22:96:c6:12:fb:
61:bc:bd:89:0f:cb:bd:7f:c7:88:42:0c:86:10:0c:
f2:26:5a:42:01:c9:03:6e:0b:5e:13:f8:e8:da:d7:
50:a6:11:cc:6f:ab:80:7d:92:3b:8f:0c:f3:93:a8:
8d:52:32:a2:1a:12:35:6a:9f:ce:e0:8c:05:9b:c8:
37:46:e0:66:38:94:77:d7:95:e2:19:43:4c:e4:92:
cc:80:72:76:43:03:6e:4c:ed:86:be:bc:79:f4:2b:
d1:f9:a5:ea:04:4b:82:4f:5a:7c:ba:b6:fc:c6:30:
77:7d:04:43:df:07:ea:98:6b:f5:86:e6:74:b4:c5:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:D4:A6:2B:01:98:DF:48:8F:4E:72:35:2D:9C:16:C0:94:EE:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:3e:23:01:f8:df:dd:5f:42:64:48:3b:10:51:ff:6e:1e:5c:
36:84:5c:05:bc:67:4a:71:cf:ba:4d:b3:98:4b:f4:bd:0d:00:
c4:f1:16:26:3e:06:7a:52:fa:4b:e1:19:31:ae:0c:56:ac:ed:
16:a4:45:e2:a1:d9:13:0d:ef:96:a2:31:f9:07:1d:8e:22:23:
9a:85:fc:82:8f:f0:9e:b1:75:29:08:1e:1c:c3:08:ae:79:a5:
33:d8:1f:2d:29:a4:b3:05:44:8b:e5:af:8d:9d:ff:79:09:3d:
06:4e:6d:58:03:d5:b0:f1:b6:82:12:47:0e:89:4a:f0:7d:a0:
47:97:5a:5b:5a:62:86:ae:c8:95:66:4e:70:32:c6:a2:1e:47:
ef:bc:d9:14:58:9c:a3:c8:92:df:17:26:2d:a0:db:36:d0:7b:
74:67:75:2e:99:34:c9:ea:52:9c:48:c7:33:09:65:5c:be:53:
30:8b:54:19:77:1b:5f:b7:dc:c1:3d:fe:c7:51:e4:7a:ab:17:
e5:29:fd:5f:1c:75:db:3c:78:99:bf:41:6d:ae:8d:4f:51:84:
75:de:e3:45:6f:44:cc:53:89:08:8b:c2:d9:f1:e6:18:2a:01:
ab:3f:dd:8f:29:3d:60:fa:96:dd:d9:51:6f:f6:00:f6:d0:7a:
ce:04:fe:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EiTnYlqbGFHs5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj
ZmEzMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MDJmZTY0NjctMmQ0Yi00ZjJjLWI2OGQtMjdjNjBiOTIwOTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq72MGVTuire+iWpYjlqETDxbCXIFX0mN+KT
UeCoLKQDB4FXK4WM7nJjIOe6cI6vxL8326Xtr4C2OsqZM81wKqt4wI/IBXPPOA9E
kAgsUQCdo8MiHrV3Si3nrZTyyaEN7YA3YSuo82L/UPcL7/ZIVAA8O1oHKsuZTjeS
mw+MsespIpbGEvthvL2JD8u9f8eIQgyGEAzyJlpCAckDbgteE/jo2tdQphHMb6uA
fZI7jwzzk6iNUjKiGhI1ap/O4IwFm8g3RuBmOJR315XiGUNM5JLMgHJ2QwNuTO2G
vrx59CvR+aXqBEuCT1p8urb8xjB3fQRD3wfqmGv1huZ0tMUBZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqO1KYrAZjfSI9OcjUtnBbAlO75MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy
MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvZWFlODVhZDAtMTI3Ny0z
NmZmLTkwNTktM2VkMWY1NjllMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli
MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw
Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk
MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBTIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEc+IwH4391fQmRIOxBR/24eXDaEXAW8Z0pxz7pNs5hL9L0NAMTxFiY+
BnpS+kvhGTGuDFas7RakReKh2RMN75aiMfkHHY4iI5qF/IKP8J6xdSkIHhzDCK55
pTPYHy0ppLMFRIvlr42d/3kJPQZObVgD1bDxtoISRw6JSvB9oEeXWltaYoauyJVm
TnAyxqIeR++82RRYnKPIkt8XJi2g2zbQe3RndS6ZNMnqUpxIxzMJZVy+UzCLVBl3
G1+33ME9/sdR5HqrF+Up/V8cdds8eJm/QW2ujU9RhHXe40VvRMxTiQiLwtnx5hgq
Aas/3Y8pPWD6lt3ZUW/2APbQes4E/g8=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:31 2026 by rpki-client