
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
File: 196c177a-e3f1-3adb-b77a-c204c94c485f.roa (raw, json)
Hash identifier: NHrIJk2SLw4j043uhyna2G/6j/fkSCLZW7N+axMEpls=
Subject key identifier: 77:96:F3:DE:96:EF:5A:C5:D3:35:74:4E:06:90:EA:F1:AD:B8:29:DD
Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial: 010D0C9F4328584F8F3DC499AD36ACF6E6BEAC00
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
Signing time: Tue 20 Oct 2026 01:00:12 +0000
ROA not before: Tue 20 Oct 2026 01:00:12 +0000
ROA not after: Mon 18 Jan 2027 02:00:12 +0000
asID: 6461
IP address blocks: 129.35.160.0/20 maxlen: 24
170.225.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8f:3d:c4:99:ad:36:ac:f6:e6:be:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
Validity
Not Before: Oct 20 01:00:12 2026 GMT
Not After : Jan 18 02:00:12 2027 GMT
Subject: CN=83c98a4e-bd8c-4229-8e84-2a0eb8351987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:47:8f:92:51:37:ba:d5:9b:b9:b8:67:28:
bb:ba:30:77:ad:38:b5:9c:ec:95:fc:29:1e:25:03:
3e:dc:a4:24:76:fc:c7:86:d3:5b:f0:3c:dc:61:f6:
08:d1:ab:5b:8b:c0:81:2d:4c:d7:c8:79:e2:f4:bd:
8f:2d:b2:43:72:a9:41:f4:66:46:dd:b7:fb:13:1f:
cf:5d:6a:48:5c:47:de:ad:af:c9:38:33:b6:65:71:
ef:a8:d8:c3:db:56:22:46:95:60:75:50:4c:ea:f7:
38:1e:bd:d2:85:df:54:54:33:16:e5:00:e3:43:f5:
cf:05:b6:b9:54:d6:02:7d:75:fd:6b:65:8f:b5:0e:
bd:da:40:60:1c:f0:62:2b:8f:24:62:df:80:2b:30:
ae:f8:2f:1d:e5:2b:5d:50:0d:75:ae:00:33:e1:b4:
74:a2:98:f8:a5:3c:63:a9:d8:e0:68:10:13:91:e6:
ce:fe:6f:b3:e7:4f:aa:ef:38:61:78:fc:09:95:73:
d3:50:e9:17:48:dd:9f:3a:21:df:8d:c8:7f:65:2c:
7d:72:01:26:04:5e:27:96:e4:38:42:7b:98:8d:6f:
39:77:ab:a9:e9:2e:a1:e8:63:3e:9c:9f:0b:ae:21:
1e:77:d1:d3:be:52:26:29:49:1d:7a:3f:fa:c1:c3:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:F3:DE:96:EF:5A:C5:D3:35:74:4E:06:90:EA:F1:AD:B8:29:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
X509v3 Authority Key Identifier:
keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
sbgp-ipAddrBlock: critical
IPv4:
129.35.160.0/20
170.225.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:43:3d:6e:d9:1c:92:7b:42:7c:8c:bb:f8:9b:dd:dc:c7:a6:
c4:9d:fe:c6:69:5a:10:82:4a:a8:ac:3f:bd:13:2a:0b:2f:7c:
ea:72:60:ea:31:f6:d5:86:3a:e0:54:c1:17:0f:69:4a:21:ab:
18:f6:54:2e:75:3d:9a:91:55:0e:65:85:cd:5b:e8:d5:4d:08:
e9:99:37:4a:67:6a:24:71:02:04:da:60:74:fc:3a:68:22:eb:
34:58:b7:7a:e3:ac:7a:2a:4a:93:e6:cd:44:3e:86:e2:fc:d2:
13:ed:77:64:2b:29:23:c2:91:89:0c:49:86:3a:73:bb:5f:a4:
55:3f:0c:bb:55:57:77:93:d8:9e:45:17:84:de:f1:17:96:a8:
d6:fd:66:50:ac:ba:a0:e2:3b:19:9a:38:c9:38:63:58:04:de:
07:d6:04:21:03:a6:f3:9e:94:2d:44:56:1c:9c:67:2b:b7:82:
cc:54:61:aa:ee:86:77:2f:23:64:31:c7:a7:b8:d8:11:da:7e:
ef:4d:ad:19:05:68:04:a0:f5:ff:35:70:89:60:e4:3a:d9:8d:
13:93:fc:d0:28:73:ec:83:d0:6d:1f:93:a5:cb:98:fd:51:6e:
2c:7c:13:e5:62:2c:fc:c2:a6:4f:da:91:0c:17:06:c8:21:85:
4e:fd:1a:35
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+PPcSZrTas9ua+rAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy
NjExMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk
ODNjOThhNGUtYmQ4Yy00MjI5LThlODQtMmEwZWI4MzUxOTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTNHj5JRN7rVm7m4Zyi7ujB3rTi1nOyV/Cke
JQM+3KQkdvzHhtNb8DzcYfYI0atbi8CBLUzXyHni9L2PLbJDcqlB9GZG3bf7Ex/P
XWpIXEfera/JODO2ZXHvqNjD21YiRpVgdVBM6vc4Hr3Shd9UVDMW5QDjQ/XPBba5
VNYCfXX9a2WPtQ692kBgHPBiK48kYt+AKzCu+C8d5StdUA11rgAz4bR0opj4pTxj
qdjgaBATkebO/m+z50+q7zhhePwJlXPTUOkXSN2fOiHfjch/ZSx9cgEmBF4nluQ4
QnuYjW85d6up6S6h6GM+nJ8LriEed9HTvlImKUkdej/6wcOj4wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHeW896W71rF0zV0TgaQ6vGtuCndMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0
YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvMTk2YzE3N2EtZTNmMS0z
YWRiLWI3N2EtYzIwNGM5NGM0ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3
NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4
MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4
MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEgSOgAwQE
quGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADBDPW7ZHJJ7QnyMu/ib3dzHpsSd/sZpWhCCSqisP70TKgsv
fOpyYOox9tWGOuBUwRcPaUohqxj2VC51PZqRVQ5lhc1b6NVNCOmZN0pnaiRxAgTa
YHT8Omgi6zRYt3rjrHoqSpPmzUQ+huL80hPtd2QrKSPCkYkMSYY6c7tfpFU/DLtV
V3eT2J5FF4Te8ReWqNb9ZlCsuqDiOxmaOMk4Y1gE3gfWBCEDpvOelC1EVhycZyu3
gsxUYaruhncvI2Qxx6e42BHafu9NrRkFaASg9f81cIlg5DrZjROT/NAoc+yD0G0f
k6XLmP1Rbix8E+ViLPzCpk/akQwXBsghhU79GjU=
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:26:38 2026 by rpki-client