
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa
File: f285d95a-b783-3400-8db8-8b30c968f7c0.roa (raw, json)
Hash identifier: taDFamg4VDQ/Ik8IfvyvH5csYZHWG3gnAUan0Z+zhow=
Subject key identifier: A8:C8:7B:4A:9D:0E:FF:E8:3A:B0:F1:BC:67:FB:D9:C1:5D:10:A4:53
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584E31CF07DCA162D8C10A3E5480
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa
Signing time: Tue 16 Jun 2026 21:00:12 +0000
ROA not before: Tue 16 Jun 2026 21:00:12 +0000
ROA not after: Mon 14 Sep 2026 21:00:12 +0000
asID: 174
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:31:cf:07:dc:a1:62:d8:c1:0a:3e:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Jun 16 21:00:12 2026 GMT
Not After : Sep 14 21:00:12 2026 GMT
Subject: CN=12db4014-3f50-478f-abc4-120f9120b149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:37:c3:10:c4:18:cb:8b:07:32:01:69:f4:
c5:4a:1a:d7:b2:56:c2:5a:3c:67:b7:bb:6d:58:47:
23:e7:55:e6:22:3a:f6:6c:a9:4f:1b:42:5f:f4:ba:
f4:61:f5:4e:1e:06:59:f5:93:46:ad:77:e5:fe:f7:
29:f2:e4:e1:02:a0:b1:fa:f1:01:59:c7:46:24:51:
a8:b8:14:da:e3:bb:ef:99:d1:34:4f:f5:a8:60:49:
00:2e:51:fd:64:86:52:98:a3:ae:4d:ba:72:c7:da:
48:2c:1b:10:d8:ea:db:91:7f:82:74:42:76:ca:6f:
04:1a:94:a1:74:6b:dc:33:69:b6:ae:f5:f4:b8:d7:
99:2c:1e:fa:22:77:aa:b1:20:8b:90:9d:99:b0:39:
37:be:fb:fb:57:ab:cc:bf:a4:59:42:3b:bf:c7:34:
f2:3d:01:f2:83:a3:ae:53:3c:26:d8:a6:06:cd:8d:
1d:6b:6f:96:41:73:61:76:f0:a5:32:0a:a7:d2:b6:
f4:b5:7e:cb:cd:1e:b0:04:22:b6:d1:9b:cb:b4:97:
e5:b3:39:5b:b5:ad:45:80:d3:dd:3c:38:4d:a6:3c:
71:c0:64:8e:c5:08:88:08:35:b3:ed:2b:86:00:ea:
34:17:ae:99:54:e5:4c:bb:25:c0:ec:c5:f6:f5:b5:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:7B:4A:9D:0E:FF:E8:3A:B0:F1:BC:67:FB:D9:C1:5D:10:A4:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ba:71:10:56:37:5a:71:2c:47:0a:57:ca:ee:d4:20:0f:23:
80:f6:76:2e:e1:3b:44:b5:0d:d3:83:17:35:d6:10:4c:6c:e4:
69:cf:07:7d:1e:14:13:c9:cf:a0:f2:b3:74:df:9b:66:2e:a6:
28:82:ba:72:34:d6:eb:f9:bc:d3:d3:e0:75:40:8f:61:0a:05:
48:85:b1:28:42:ee:3a:c0:cc:ab:0a:b6:5e:ec:60:d8:6e:bb:
36:0e:b7:93:cb:f5:19:54:a4:e7:57:a7:d8:a7:8d:96:2b:0a:
16:53:a1:64:a3:31:2f:31:1e:65:d8:4b:85:e0:c0:ec:13:c4:
3f:42:76:05:4a:5a:e7:36:00:6c:b2:39:5e:6c:32:88:a4:a8:
00:a1:31:de:7c:3f:b8:b7:21:4e:fe:82:36:fd:6e:3a:51:ec:
f3:4a:2b:e5:81:cd:2d:16:e7:16:9a:96:57:f4:b2:57:fd:dc:
a7:bf:a9:c7:8e:96:4e:b2:44:27:9b:9f:c3:69:c8:a7:77:c6:
af:6d:c9:c5:90:90:d5:f5:e9:a7:15:21:a7:31:95:98:2f:1d:
ba:ed:40:63:1e:5f:ed:da:a8:48:57:29:82:3f:fd:7f:c4:9e:
74:33:ee:43:83:8e:d4:3e:22:5e:71:d4:31:4b:eb:01:66:95:
b1:08:1b:ea
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE4xzwfcoWLYwQo+VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz
ZjcxMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
MTJkYjQwMTQtM2Y1MC00NzhmLWFiYzQtMTIwZjkxMjBiMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo43wxDEGMuLBzIBafTFShrXslbCWjxnt7tt
WEcj51XmIjr2bKlPG0Jf9Lr0YfVOHgZZ9ZNGrXfl/vcp8uThAqCx+vEBWcdGJFGo
uBTa47vvmdE0T/WoYEkALlH9ZIZSmKOuTbpyx9pILBsQ2OrbkX+CdEJ2ym8EGpSh
dGvcM2m2rvX0uNeZLB76IneqsSCLkJ2ZsDk3vvv7V6vMv6RZQju/xzTyPQHyg6Ou
Uzwm2KYGzY0da2+WQXNhdvClMgqn0rb0tX7LzR6wBCK20ZvLtJflszlbta1FgNPd
PDhNpjxxwGSOxQiICDWz7SuGAOo0F66ZVOVMuyXA7MX29bV8oQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFKjIe0qdDv/oOrDxvGf72cFdEKRTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5
NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvZjI4NWQ5NWEtYjc4My0z
NDAwLThkYjgtOGIzMGM5NjhmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh
ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw
M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi
NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD
0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGW6cRBWN1pxLEcKV8ru1CAPI4D2
di7hO0S1DdODFzXWEExs5GnPB30eFBPJz6Dys3Tfm2YupiiCunI01uv5vNPT4HVA
j2EKBUiFsShC7jrAzKsKtl7sYNhuuzYOt5PL9RlUpOdXp9injZYrChZToWSjMS8x
HmXYS4XgwOwTxD9CdgVKWuc2AGyyOV5sMoikqAChMd58P7i3IU7+gjb9bjpR7PNK
K+WBzS0W5xaallf0slf93Ke/qceOlk6yRCebn8NpyKd3xq9tycWQkNX16acVIacx
lZgvHbrtQGMeX+3aqEhXKYI//X/EnnQz7kODjtQ+Il5x1DFL6wFmlbEIG+o=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:15:00 2026 by rpki-client