
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/120a0553-11b7-3628-859b-c4708b5e1664.roa
File: 120a0553-11b7-3628-859b-c4708b5e1664.roa (raw, json)
Hash identifier: T8wq1avQxD1m30Zj0rl3hM3BI+hHW8ll3fHQwuiLqhg=
Subject key identifier: E8:CE:53:10:88:4F:05:77:32:5F:2D:2D:66:EE:13:D7:E1:D3:64:FB
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584E61456204AD603B1560C11B40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/120a0553-11b7-3628-859b-c4708b5e1664.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 19157
IP address blocks: 23.85.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:45:62:04:ad:60:3b:15:60:c1:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=fc9fd487-705b-4bb2-9337-46c03e0b0aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:b7:0a:41:82:46:1b:3b:e2:d3:b1:f4:02:
91:7c:54:74:df:93:e0:b2:ea:11:6b:3e:a9:3a:a2:
21:52:d6:f3:92:d2:a8:e0:58:a6:eb:17:bb:c4:08:
05:8e:06:93:16:fd:cb:11:1f:4c:7d:1f:42:20:09:
eb:6f:03:16:37:41:88:9e:bd:70:2a:c7:fc:bb:35:
42:b8:31:0d:20:54:48:38:7b:67:21:c1:af:3b:ab:
94:3e:b4:8e:d5:7d:68:17:a0:94:f5:b8:21:7a:e6:
77:3f:45:75:b6:4f:73:5a:39:4f:53:9d:30:84:a0:
e0:be:18:f9:b2:3b:ee:0c:ca:a1:8b:85:2b:f7:ff:
ab:4d:1f:e5:f4:dd:01:e8:47:cc:5d:01:8e:da:e5:
cf:3b:51:f9:6d:95:b3:e7:e4:1a:e4:7d:43:f0:4f:
96:77:70:26:7d:2a:fa:05:96:a1:e0:5d:94:fd:89:
da:2a:07:a1:ad:e5:78:65:65:9c:ec:6a:3f:a2:a2:
4f:91:db:af:0f:9d:e9:ef:e2:c3:cc:0a:78:f2:10:
c1:30:94:5a:ab:ac:d4:14:b3:14:51:82:64:92:c9:
1c:55:f7:b7:5d:42:90:ad:b2:99:82:95:86:f8:f2:
33:49:26:1d:01:72:2a:7e:33:7e:42:63:3f:8b:f1:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:53:10:88:4F:05:77:32:5F:2D:2D:66:EE:13:D7:E1:D3:64:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/120a0553-11b7-3628-859b-c4708b5e1664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
23.85.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:01:a2:bd:58:2e:e2:e9:60:29:ce:a3:cb:b5:53:b2:cc:f9:
a6:10:a1:3e:65:4b:e9:f8:a6:b3:05:84:40:2a:b3:7d:80:c6:
ff:3c:cf:f3:92:de:fe:bf:0d:9b:44:ba:a9:06:04:82:65:d9:
33:0d:13:ae:7f:a1:36:74:65:1c:f5:03:80:e7:34:1f:fd:5c:
21:b7:1d:18:31:3b:64:17:bc:bf:bb:80:88:0f:8b:fe:c9:3c:
1f:e0:ab:98:43:b7:cd:92:5c:f6:87:bf:f3:eb:59:87:bc:c7:
93:c6:7d:d5:c5:bf:35:63:78:bd:bd:f9:0c:05:ab:27:e4:76:
4a:f3:c7:cc:99:51:13:fc:c0:5c:79:2c:b7:9b:8d:50:b8:87:
37:f2:67:3c:79:b7:19:7c:a6:03:95:cd:43:d0:a4:d8:a6:a1:
ca:54:f5:45:0d:67:27:e4:6e:f3:34:f9:c2:bf:17:30:8e:f0:
de:81:93:76:5d:a5:f7:ac:bc:81:ff:29:89:b3:2a:ac:f3:35:
e1:49:07:f4:74:04:49:21:f5:9e:47:25:c9:36:b1:e5:37:85:
e8:0b:57:69:fe:51:93:bb:31:31:c4:d4:b9:62:d9:54:3b:57:
53:72:0f:af:45:d9:29:29:cd:9c:a7:95:f0:9b:09:32:d0:9d:
a4:5f:d1:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRWIErWA7FWDBG0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ZmM5ZmQ0ODctNzA1Yi00YmIyLTkzMzctNDZjMDNlMGIwYWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7q3CkGCRhs74tOx9AKRfFR035PgsuoRaz6p
OqIhUtbzktKo4Fim6xe7xAgFjgaTFv3LER9MfR9CIAnrbwMWN0GInr1wKsf8uzVC
uDENIFRIOHtnIcGvO6uUPrSO1X1oF6CU9bgheuZ3P0V1tk9zWjlPU50whKDgvhj5
sjvuDMqhi4Ur9/+rTR/l9N0B6EfMXQGO2uXPO1H5bZWz5+Qa5H1D8E+Wd3AmfSr6
BZah4F2U/YnaKgehreV4ZWWc7Go/oqJPkduvD53p7+LDzAp48hDBMJRaq6zUFLMU
UYJkkskcVfe3XUKQrbKZgpWG+PIzSSYdAXIqfjN+QmM/i/HtjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjOUxCITwV3Ml8tLWbuE9fh02T7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTIwYTA1NTMtMTFiNy0z
NjI4LTg1OWItYzQ3MDhiNWUxNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1WgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgBor1YLuLpYCnOo8u1U7LM+aYQoT5lS+n4prMFhEAqs32Axv88z/OS
3v6/DZtEuqkGBIJl2TMNE65/oTZ0ZRz1A4DnNB/9XCG3HRgxO2QXvL+7gIgPi/7J
PB/gq5hDt82SXPaHv/PrWYe8x5PGfdXFvzVjeL29+QwFqyfkdkrzx8yZURP8wFx5
LLebjVC4hzfyZzx5txl8pgOVzUPQpNimocpU9UUNZyfkbvM0+cK/FzCO8N6Bk3Zd
pfesvIH/KYmzKqzzNeFJB/R0BEkh9Z5HJck2seU3hegLV2n+UZO7MTHE1Lli2VQ7
V1NyD69F2SkpzZynlfCbCTLQnaRf0dM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:22:03 2026 by rpki-client