
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa
File: ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa (raw, json)
Hash identifier: 81h7O76ywthoXcva2Kga9umoLVI0ayoPXNKvylhTgxo=
Subject key identifier: 4C:60:44:DA:9C:0C:98:7F:36:22:23:41:F3:B4:8E:78:97:6E:F0:77
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584EC4D716917EA56D867C432400
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa
Signing time: Sat 08 Aug 2026 13:00:11 +0000
ROA not before: Sat 08 Aug 2026 13:00:11 +0000
ROA not after: Fri 06 Nov 2026 14:00:11 +0000
asID: 21433
IP address blocks: 170.248.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c4:d7:16:91:7e:a5:6d:86:7c:43:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Aug 8 13:00:11 2026 GMT
Not After : Nov 6 14:00:11 2026 GMT
Subject: CN=da60862f-5123-4fd2-ae5b-7e73cd1ed38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:c1:fc:57:64:89:3c:d7:59:16:ad:fd:77:
f9:18:f7:93:44:e3:7a:2e:b9:a8:1d:3c:9e:3d:bc:
d8:ee:8a:6e:e6:b0:d0:5e:6c:34:c4:8f:da:5c:e0:
5d:96:b3:e8:fd:b7:7e:d1:e8:8a:71:99:48:95:39:
33:60:0c:76:4c:50:b6:58:1e:dd:cf:dd:b5:a6:86:
c8:0d:e4:9e:10:06:ce:b7:41:1b:9f:94:81:66:1e:
a5:44:19:34:72:85:38:c0:11:49:21:bb:25:0b:dd:
24:10:a9:7c:fe:c7:66:86:0c:99:95:7c:bd:53:03:
fd:cc:ee:3e:95:56:8f:0e:b2:4b:71:bf:30:e2:6d:
3c:79:ed:d6:50:e3:c9:da:d2:cd:e0:23:c1:4d:5f:
0e:62:3a:9b:66:21:e5:5a:29:e3:b5:0f:c3:1d:3f:
04:e9:48:82:9a:bf:3b:5d:37:04:05:84:22:8e:1e:
07:56:87:37:0d:84:49:e1:64:4d:24:f9:9a:46:8a:
a7:3f:40:34:fb:cd:54:0c:a9:3d:95:3c:19:22:31:
07:f8:31:8f:21:6f:2e:44:64:17:12:9d:35:95:05:
16:ec:40:9c:56:cf:a7:76:f0:94:0e:41:a3:22:91:
66:73:6b:c5:99:e3:f3:ad:02:12:81:6a:8c:07:d4:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:60:44:DA:9C:0C:98:7F:36:22:23:41:F3:B4:8E:78:97:6E:F0:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.248.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:c1:02:51:bc:b6:d0:24:ea:9b:fb:2c:6e:c3:e4:f9:c6:22:
a5:86:15:f8:dc:7d:c5:66:fd:04:bb:27:72:27:ee:7c:03:ed:
9e:75:cc:30:35:c6:41:ae:d9:a5:77:6c:eb:53:7d:5e:f7:e9:
a0:4d:21:d6:91:d2:00:5b:80:ee:a2:62:55:a8:74:b1:8d:ff:
d8:55:b7:63:3f:9b:d1:e3:8a:01:f0:fe:00:1c:7e:32:10:10:
f7:8c:84:69:ed:7c:57:d2:16:a8:46:36:91:6b:24:0a:ad:cc:
57:df:85:83:9c:9a:5e:38:86:c0:08:03:82:48:95:f1:93:24:
8a:a6:38:f8:44:f9:e8:b8:5a:24:18:66:05:7d:08:90:e6:04:
08:62:09:23:3b:02:16:5b:7e:14:08:61:02:7a:b9:4d:01:2d:
6a:48:81:09:31:f9:07:68:7e:20:c6:5d:f9:88:7a:0b:79:0c:
2f:e2:db:ec:8b:e4:5b:84:8c:e6:8f:84:66:33:a4:61:b5:e9:
90:0e:6f:06:77:a1:aa:c6:9e:8c:3f:9c:d0:1a:b0:2b:85:45:
34:05:4f:6b:06:40:86:26:ed:de:88:d5:de:aa:fc:de:dc:e9:
ef:a4:a1:1a:30:95:d6:8d:7f:63:45:df:34:08:91:0a:12:07:
e2:52:8f:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1xaRfqVthnxDJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk
ZGE2MDg2MmYtNTEyMy00ZmQyLWFlNWItN2U3M2NkMWVkMzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZbB/FdkiTzXWRat/Xf5GPeTRON6LrmoHTye
PbzY7opu5rDQXmw0xI/aXOBdlrPo/bd+0eiKcZlIlTkzYAx2TFC2WB7dz921pobI
DeSeEAbOt0Ebn5SBZh6lRBk0coU4wBFJIbslC90kEKl8/sdmhgyZlXy9UwP9zO4+
lVaPDrJLcb8w4m08ee3WUOPJ2tLN4CPBTV8OYjqbZiHlWinjtQ/DHT8E6UiCmr87
XTcEBYQijh4HVoc3DYRJ4WRNJPmaRoqnP0A0+81UDKk9lTwZIjEH+DGPIW8uRGQX
Ep01lQUW7ECcVs+ndvCUDkGjIpFmc2vFmePzrQISgWqMB9TTwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExgRNqcDJh/NiIjQfO0jniXbvB3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvY2NjOWNjMDAtNjZjNC0z
MDIwLTk0YjItZDhmZjRkNTYxYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvjZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3BAlG8ttAk6pv7LG7D5PnGIqWGFfjcfcVm/QS7J3In7nwD7Z51zDA1
xkGu2aV3bOtTfV736aBNIdaR0gBbgO6iYlWodLGN/9hVt2M/m9HjigHw/gAcfjIQ
EPeMhGntfFfSFqhGNpFrJAqtzFffhYOcml44hsAIA4JIlfGTJIqmOPhE+ei4WiQY
ZgV9CJDmBAhiCSM7AhZbfhQIYQJ6uU0BLWpIgQkx+QdofiDGXfmIegt5DC/i2+yL
5FuEjOaPhGYzpGG16ZAObwZ3oarGnow/nNAasCuFRTQFT2sGQIYm7d6I1d6q/N7c
6e+koRowldaNf2NF3zQIkQoSB+JSj6g=
-----END CERTIFICATE-----
Generated at Tue Aug 11 17:15:48 2026 by rpki-client