
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/c38c4533-efc5-3cd4-98ff-9e5a19a4a8d9.roa
File: c38c4533-efc5-3cd4-98ff-9e5a19a4a8d9.roa (raw, json)
Hash identifier: LxYObRQrZB61AzxLwIi3v6Hk4cgErf1ZwEZ5lL69fS4=
Subject key identifier: F0:0B:90:C0:0E:89:B9:62:7A:22:F5:40:1B:14:53:15:2F:D3:57:94
Certificate issuer: /CN=ddb1cbfc-9205-4ac6-b895-207a65f4fa8f
Certificate serial: 010D0C9F4328584F7352D011552E103177A47F80
Authority key identifier: 36:FA:E2:11:D5:67:27:60:09:BB:D8:E3:CB:6C:0E:AB:EC:D8:EA:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/c38c4533-efc5-3cd4-98ff-9e5a19a4a8d9.roa
Signing time: Sat 10 Oct 2026 01:00:13 +0000
ROA not before: Sat 10 Oct 2026 01:00:13 +0000
ROA not after: Fri 08 Jan 2027 02:00:13 +0000
asID: 396840
IP address blocks: 167.94.54.0/24 maxlen: 24
167.94.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:73:52:d0:11:55:2e:10:31:77:a4:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb1cbfc-9205-4ac6-b895-207a65f4fa8f
Validity
Not Before: Oct 10 01:00:13 2026 GMT
Not After : Jan 8 02:00:13 2027 GMT
Subject: CN=812ee09c-c0ff-4053-83fc-416f40778524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:71:91:ce:57:bd:f0:86:ee:ac:5a:2e:f6:
69:7c:66:5e:72:d0:bf:da:c9:5f:6d:bd:9a:78:9f:
6c:e2:e7:09:38:aa:36:9d:3a:82:36:ea:90:69:73:
c4:55:f5:db:85:94:10:6b:94:32:6e:a8:5d:f4:7b:
b9:4e:e1:28:55:7a:d7:61:89:8e:ed:ff:3c:a1:0d:
d9:85:69:59:cb:46:e2:ae:cd:b6:be:ad:aa:b8:b8:
e8:5f:cd:a6:c1:5d:84:fb:ca:73:00:73:91:84:5f:
22:41:fd:80:20:7e:e5:d3:eb:65:17:8e:7d:b9:ef:
96:94:3c:34:ad:e6:9e:7e:04:d9:5a:52:30:f7:1f:
92:34:c7:36:67:29:1f:b1:c5:f9:52:45:08:51:35:
ff:16:0c:e0:59:45:69:eb:bb:4b:64:ef:8f:42:76:
26:65:5f:26:e0:f1:4f:22:36:a8:2a:e1:86:76:48:
73:fd:08:76:82:8f:0e:ae:0b:38:c3:0c:30:50:8c:
16:be:70:a6:0e:aa:1c:66:af:2e:3b:4f:f4:0f:1e:
02:28:5d:78:b3:db:ff:00:72:e4:bd:9f:c6:13:59:
f1:13:a6:8a:49:aa:a8:b3:23:20:9b:8b:39:24:ce:
16:8c:3c:e0:48:7c:17:ca:43:cf:ee:d4:e6:90:cd:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0B:90:C0:0E:89:B9:62:7A:22:F5:40:1B:14:53:15:2F:D3:57:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/c38c4533-efc5-3cd4-98ff-9e5a19a4a8d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.crl
X509v3 Authority Key Identifier:
keyid:36:FA:E2:11:D5:67:27:60:09:BB:D8:E3:CB:6C:0E:AB:EC:D8:EA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.cer
sbgp-ipAddrBlock: critical
IPv4:
167.94.54.0/24
167.94.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:83:40:e8:52:ee:ad:5e:37:e7:b4:c8:f3:ec:03:12:5f:24:
39:fb:d3:b5:b1:94:5c:f4:67:cc:d9:1a:2c:1d:03:14:34:1b:
73:00:bc:57:50:d5:d6:45:52:5a:3f:87:64:6f:b5:88:82:72:
a1:31:83:df:f0:82:90:90:7e:4d:8c:78:50:5f:9b:04:da:26:
79:5a:ba:05:4b:0e:68:08:a3:0c:ba:c3:87:97:f2:83:44:91:
5d:b5:5a:37:70:4c:9f:01:77:50:16:b0:b5:1a:08:7e:0e:58:
87:e8:d9:31:7f:40:d6:a6:ee:94:57:9f:5b:16:9d:8f:ee:8e:
9d:20:e5:fc:99:52:78:db:81:4f:af:68:7c:dc:4e:19:09:da:
ef:eb:10:0c:fc:8c:c7:41:79:ec:5b:3b:99:86:e7:7a:81:c8:
e1:43:49:70:41:76:4b:c8:cc:86:5a:37:1f:06:4f:16:65:81:
6d:82:9a:12:2c:90:b4:23:6d:9a:09:b8:04:ec:45:c9:e5:e7:
05:21:36:2d:11:0f:c2:58:2e:ef:38:0b:ce:15:3a:29:4c:7f:
60:b0:1e:34:f7:57:de:04:b3:4e:5a:ab:41:b4:b3:9c:18:7f:
7a:bb:ac:31:55:1b:d4:c8:f1:a1:28:5c:d8:d4:3d:85:46:69:
e8:8a:33:ac
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9zUtARVS4QMXekf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRiMWNiZmMtOTIwNS00YWM2LWI4OTUtMjA3YTY1ZjRm
YThmMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk
ODEyZWUwOWMtYzBmZi00MDUzLTgzZmMtNDE2ZjQwNzc4NTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpBxkc5XvfCG7qxaLvZpfGZectC/2slfbb2a
eJ9s4ucJOKo2nTqCNuqQaXPEVfXbhZQQa5Qybqhd9Hu5TuEoVXrXYYmO7f88oQ3Z
hWlZy0birs22vq2quLjoX82mwV2E+8pzAHORhF8iQf2AIH7l0+tlF459ue+WlDw0
reaefgTZWlIw9x+SNMc2ZykfscX5UkUIUTX/FgzgWUVp67tLZO+PQnYmZV8m4PFP
IjaoKuGGdkhz/Qh2go8Orgs4wwwwUIwWvnCmDqocZq8uO0/0Dx4CKF14s9v/AHLk
vZ/GE1nxE6aKSaqosyMgm4s5JM4WjDzgSHwXykPP7tTmkM192QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPALkMAOiblieiL1QBsUUxUv01eUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kZGIx
Y2JmYy05MjA1LTRhYzYtYjg5NS0yMDdhNjVmNGZhOGYvYzM4YzQ1MzMtZWZjNS0z
Y2Q0LTk4ZmYtOWU1YTE5YTRhOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGRiMWNiZmMtOTIwNS00YWM2LWI4
OTUtMjA3YTY1ZjRmYThmL2RkYjFjYmZjLTkyMDUtNGFjNi1iODk1LTIwN2E2NWY0
ZmE4Zi5jcmwwHwYDVR0jBBgwFoAUNvriEdVnJ2AJu9jjy2wOq+zY6kowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9kZGIxY2JmYy05MjA1LTRhYzYtYjg5NS0yMDdh
NjVmNGZhOGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp142AwQA
p15AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAISDQOhS7q1eN+e0yPPsAxJfJDn707WxlFz0Z8zZGiwdAxQ0
G3MAvFdQ1dZFUlo/h2RvtYiCcqExg9/wgpCQfk2MeFBfmwTaJnlaugVLDmgIowy6
w4eX8oNEkV21WjdwTJ8Bd1AWsLUaCH4OWIfo2TF/QNam7pRXn1sWnY/ujp0g5fyZ
UnjbgU+vaHzcThkJ2u/rEAz8jMdBeexbO5mG53qByOFDSXBBdkvIzIZaNx8GTxZl
gW2CmhIskLQjbZoJuATsRcnl5wUhNi0RD8JYLu84C84VOilMf2CwHjT3V94Es05a
q0G0s5wYf3q7rDFVG9TI8aEoXNjUPYVGaeiKM6w=
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:06:44 2026 by rpki-client