
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/f5ad60b0-db3a-3c81-bd19-6d4b0555bdce.roa
File: f5ad60b0-db3a-3c81-bd19-6d4b0555bdce.roa (raw, json)
Hash identifier: qXs/d53bJnDGDNxYoZNBLddA5WIt9K8sbrErrkFJr5s=
Subject key identifier: 03:AF:5A:AA:1B:11:70:69:DE:AA:40:D6:CA:66:74:02:7D:AE:C0:7F
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584F66C2C7686906BE1DA3C9D306
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/f5ad60b0-db3a-3c81-bd19-6d4b0555bdce.roa
Signing time: Mon 05 Oct 2026 13:00:13 +0000
ROA not before: Mon 05 Oct 2026 13:00:13 +0000
ROA not after: Sun 03 Jan 2027 14:00:13 +0000
asID: 21433
IP address blocks: 144.36.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:c2:c7:68:69:06:be:1d:a3:c9:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Oct 5 13:00:13 2026 GMT
Not After : Jan 3 14:00:13 2027 GMT
Subject: CN=d2cd0863-648f-4958-9522-4ce838fad47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:e7:fe:ee:1f:f0:88:29:d2:b0:d5:4b:a3:
f6:cc:40:fe:98:07:77:f0:a0:bf:35:73:25:c1:e2:
53:ec:f1:a7:b6:e3:d1:99:1f:42:50:1c:b8:a1:f1:
63:c1:c2:7c:e9:d9:35:b5:5d:05:24:74:4d:20:5e:
33:a2:6e:2d:9e:27:0d:d3:a6:65:b8:16:21:06:ba:
ab:2d:8e:67:99:c1:44:1c:ca:db:c9:e3:d9:86:62:
d6:a8:97:a6:ad:27:8b:a2:92:31:c2:0d:c6:8c:cf:
28:cb:9a:b7:26:ff:2c:75:f8:ad:14:9d:2d:2f:7b:
36:30:8a:9b:e9:36:0c:b7:8b:77:ae:d7:18:84:31:
8b:82:f0:06:ca:c8:d3:5b:12:04:4d:80:62:07:2a:
b7:df:e4:5c:28:34:39:28:93:da:6b:93:6d:d5:fc:
38:c4:b0:67:6e:c3:d6:61:97:d8:0f:21:f2:01:d2:
c0:f6:b2:2d:4c:b4:9b:87:82:25:23:cd:9f:2c:bd:
a0:d6:0d:86:04:7a:c7:3b:42:b4:08:3e:22:b7:c3:
c6:cd:c1:6d:24:d2:29:ea:8c:f5:99:25:5b:65:f0:
68:42:e5:fe:f5:f7:43:0f:5c:97:59:58:26:9c:dc:
3a:1e:df:f0:8c:8a:0a:3b:7e:a2:bf:73:4e:5f:d4:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:5A:AA:1B:11:70:69:DE:AA:40:D6:CA:66:74:02:7D:AE:C0:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/f5ad60b0-db3a-3c81-bd19-6d4b0555bdce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:3d:b4:4d:18:71:be:56:c4:14:50:b8:1b:1a:7b:11:0a:b3:
4c:b7:9f:be:76:b7:ff:16:01:2b:b8:ea:4f:c3:b2:a3:ad:10:
67:d2:84:75:3b:5f:0c:aa:e9:d5:e1:4e:db:a4:88:77:01:b5:
c3:07:f9:81:f4:67:e8:8a:93:05:2d:c8:c0:e6:be:32:b0:ab:
08:bb:14:8a:f1:b0:87:a2:ab:bc:5f:5a:13:c4:24:4b:a4:b7:
65:bb:c0:6b:38:2e:c1:c1:b9:0e:22:cf:bf:3f:7f:c6:4e:66:
9e:33:3a:5b:c4:7c:f1:18:68:6f:90:4c:16:ab:61:82:46:26:
98:01:50:da:24:bd:d7:bd:49:bb:5e:1e:81:04:89:fc:08:80:
73:39:99:f2:b7:6f:bd:0d:ff:ad:75:38:65:b7:87:1d:7c:08:
98:33:13:9c:b4:4e:99:88:a6:e0:c1:8e:8e:7a:41:83:cc:7d:
c4:e2:c8:94:fa:4b:8a:00:77:5e:42:04:25:5f:08:fa:08:5b:
37:74:24:07:bc:ce:6c:76:02:a5:f8:46:b7:c8:8e:5e:1a:38:
bf:39:70:d9:43:14:f8:70:67:ef:2f:a4:79:41:19:e5:f9:dd:
db:da:74:b5:5b:7c:38:e3:69:b4:e1:6a:f3:89:66:2e:ce:26:
1a:f0:68:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsdoaQa+HaPJ0wYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk
ZDJjZDA4NjMtNjQ4Zi00OTU4LTk1MjItNGNlODM4ZmFkNDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYPn/u4f8Igp0rDVS6P2zED+mAd38KC/NXMl
weJT7PGntuPRmR9CUBy4ofFjwcJ86dk1tV0FJHRNIF4zom4tnicN06ZluBYhBrqr
LY5nmcFEHMrbyePZhmLWqJemrSeLopIxwg3GjM8oy5q3Jv8sdfitFJ0tL3s2MIqb
6TYMt4t3rtcYhDGLgvAGysjTWxIETYBiByq33+RcKDQ5KJPaa5Nt1fw4xLBnbsPW
YZfYDyHyAdLA9rItTLSbh4IlI82fLL2g1g2GBHrHO0K0CD4it8PGzcFtJNIp6oz1
mSVbZfBoQuX+9fdDD1yXWVgmnNw6Ht/wjIoKO36iv3NOX9RreQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOvWqobEXBp3qpA1spmdAJ9rsB/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvZjVhZDYwYjAtZGIzYS0z
YzgxLWJkMTktNmQ0YjA1NTViZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI49tE0Ycb5WxBRQuBsaexEKs0y3n752t/8WASu46k/DsqOtEGfShHU7
Xwyq6dXhTtukiHcBtcMH+YH0Z+iKkwUtyMDmvjKwqwi7FIrxsIeiq7xfWhPEJEuk
t2W7wGs4LsHBuQ4iz78/f8ZOZp4zOlvEfPEYaG+QTBarYYJGJpgBUNokvde9Sbte
HoEEifwIgHM5mfK3b70N/611OGW3hx18CJgzE5y0TpmIpuDBjo56QYPMfcTiyJT6
S4oAd15CBCVfCPoIWzd0JAe8zmx2AqX4RrfIjl4aOL85cNlDFPhwZ+8vpHlBGeX5
3dvadLVbfDjjabThavOJZi7OJhrwaME=
-----END CERTIFICATE-----
Generated at Wed Oct 7 22:54:43 2026 by rpki-client