
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa
File: d4884f4e-c468-36d8-aa72-3b277a102e42.roa (raw, json)
Hash identifier: khAW60swJ+jN7+sbldYELey2NTYeD8Aji6riPFkclWk=
Subject key identifier: 5A:77:62:1B:35:0B:C6:39:06:B4:DD:6F:7C:0A:9A:AB:CB:39:97:F2
Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial: 010D0C9F4328584F093CDA873EC16AF53C0F0AC0
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 16509
IP address blocks: 192.101.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:da:87:3e:c1:6a:f5:3c:0f:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=6a067684-94c2-4a9a-9f30-4ec0b7b73e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:f4:c2:bf:db:46:56:77:20:1b:56:81:32:
2a:b7:18:1f:19:59:a3:87:9e:67:a1:25:b8:ce:85:
a2:30:16:49:fd:d5:fa:36:00:e6:59:af:a5:1f:0a:
30:ec:4a:81:db:b2:62:25:d3:a1:d3:ab:ba:24:e4:
93:a3:fe:73:22:7a:63:a9:97:f4:b5:97:3e:1f:96:
b0:a0:bb:28:f8:da:b1:95:bf:8d:23:17:b3:81:da:
d8:87:2c:9f:30:8d:75:81:25:9d:09:4c:f2:6c:66:
18:49:46:d6:82:59:0e:ec:ce:5b:c1:26:c3:79:61:
c8:70:9f:ae:e9:12:22:05:27:d6:23:b9:36:ed:ac:
f1:62:64:59:b0:24:f9:3d:bd:bc:e9:b0:65:8c:17:
f8:c7:2b:b0:fa:cb:04:67:78:b0:fe:b0:91:df:f7:
33:9b:5a:14:7c:1f:b0:da:31:bb:44:b1:1e:92:8f:
20:15:a7:c0:ae:da:84:47:a3:a5:ad:21:42:e2:b8:
8a:f7:f6:61:fc:1f:73:c9:dd:b6:f1:5f:04:b1:c6:
96:32:bf:6e:fa:c2:81:b7:7c:f3:c1:0b:70:3b:d5:
24:fa:5d:0c:e8:8d:11:f7:8c:97:db:0f:c5:c7:37:
2e:4b:0d:17:b2:09:13:17:99:73:f9:80:97:30:21:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:62:1B:35:0B:C6:39:06:B4:DD:6F:7C:0A:9A:AB:CB:39:97:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
X509v3 Authority Key Identifier:
keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:aa:7b:ca:99:87:1f:ed:aa:19:37:5a:91:2d:7f:e4:13:b3:
26:d1:4f:01:b0:74:22:2d:79:cf:d0:7f:ea:76:06:26:f3:1a:
31:97:59:d0:d8:e7:e5:a7:c6:12:ec:30:23:f7:fd:e5:e7:1c:
3f:e2:2b:3f:24:46:3a:cb:7b:75:dd:27:8b:95:84:47:ec:c1:
e3:8c:1e:1a:d2:af:36:3d:a4:51:14:7a:28:fb:7f:1e:f1:55:
b5:02:8a:2b:7a:6b:66:6b:27:b2:64:63:18:1d:2d:bd:c2:05:
c4:d7:40:35:ed:47:f7:7f:ec:a8:0a:aa:db:d4:21:97:05:d3:
d4:c7:e6:a7:d9:e2:0c:d8:47:ac:66:e8:7f:2e:74:1d:d3:33:
66:08:93:92:59:67:8d:11:7f:d7:31:5a:6a:a9:ef:4a:15:c0:
eb:83:11:32:5b:86:20:ed:1b:7f:4c:a9:7d:7c:3f:f9:b3:d2:
24:66:76:5c:33:78:fe:3b:45:31:f9:54:b4:40:ba:62:f0:31:
57:e4:17:43:7e:ea:da:e5:6d:f6:8f:9b:a7:9b:80:45:b8:02:
82:3e:92:bb:bf:6f:d7:ee:c8:9c:cf:d6:00:34:ad:ed:cf:b2:
f7:b3:b6:92:01:58:bd:0b:dc:8c:24:14:f1:4c:d4:7c:3e:d2:
c8:1c:fe:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNqHPsFq9TwPCsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk
OTQ1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
NmEwNjc2ODQtOTRjMi00YTlhLTlmMzAtNGVjMGI3YjczZTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGn0wr/bRlZ3IBtWgTIqtxgfGVmjh55noSW4
zoWiMBZJ/dX6NgDmWa+lHwow7EqB27JiJdOh06u6JOSTo/5zInpjqZf0tZc+H5aw
oLso+Nqxlb+NIxezgdrYhyyfMI11gSWdCUzybGYYSUbWglkO7M5bwSbDeWHIcJ+u
6RIiBSfWI7k27azxYmRZsCT5Pb286bBljBf4xyuw+ssEZ3iw/rCR3/czm1oUfB+w
2jG7RLEeko8gFafArtqER6OlrSFC4riK9/Zh/B9zyd228V8EscaWMr9u+sKBt3zz
wQtwO9Uk+l0M6I0R94yX2w/FxzcuSw0XsgkTF5lz+YCXMCFfkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFp3Yhs1C8Y5BrTdb3wKmqvLOZfyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4
NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvZDQ4ODRmNGUtYzQ2OC0z
NmQ4LWFhNzItM2IyNzdhMTAyZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh
NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4
ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw
NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOqe8qZhx/tqhk3WpEtf+QTsybRTwGwdCItec/Qf+p2BibzGjGXWdDY
5+WnxhLsMCP3/eXnHD/iKz8kRjrLe3XdJ4uVhEfsweOMHhrSrzY9pFEUeij7fx7x
VbUCiit6a2ZrJ7JkYxgdLb3CBcTXQDXtR/d/7KgKqtvUIZcF09TH5qfZ4gzYR6xm
6H8udB3TM2YIk5JZZ40Rf9cxWmqp70oVwOuDETJbhiDtG39MqX18P/mz0iRmdlwz
eP47RTH5VLRAumLwMVfkF0N+6trlbfaPm6ebgEW4AoI+kru/b9fuyJzP1gA0re3P
sveztpIBWL0L3IwkFPFM1Hw+0sgc/k0=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:04:41 2026 by rpki-client