
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa
File: bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa (raw, json)
Hash identifier: 6HeSs5rz2WivKIFEvJCtImckVypsQaoU2XcwzZ7vXa8=
Subject key identifier: 08:F2:6F:FE:98:3B:A8:03:CD:8B:06:71:AD:F7:8E:64:4B:FE:AC:95
Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial: 010D0C9F4328584EA7973DCC51ECFD14AC2F4A40
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397325
IP address blocks: 23.29.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:3d:cc:51:ec:fd:14:ac:2f:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e0fb3053-59f0-4b4a-bc4c-9bde6848f73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:df:bd:f4:52:1d:ea:7d:7d:f6:14:70:f7:
2a:13:4e:f9:ca:fc:1e:00:93:62:c3:bc:d9:3d:bc:
24:26:69:91:91:b9:3f:14:f5:b2:cc:bf:2c:21:b1:
9c:ff:7c:6d:5f:4c:a4:14:8c:4d:e9:e0:6a:5e:ad:
27:d7:77:ba:be:0d:ff:08:1d:75:e8:79:b3:73:53:
8b:86:37:4a:d6:7c:a7:49:2f:4a:06:c8:ee:6d:f1:
fc:00:e8:81:05:39:ba:29:d4:a6:41:77:65:6f:52:
af:94:d5:1b:c1:0b:a9:1d:15:9c:39:f3:15:0d:4c:
17:c3:08:da:39:17:64:a0:4f:05:42:81:03:94:e2:
67:f3:1f:1f:ed:df:40:be:90:7d:33:04:68:c0:c4:
af:1f:1f:1c:27:b3:6e:a3:d9:53:28:c2:b6:1b:02:
b3:c6:b3:30:2f:ba:5c:09:2d:92:ad:d9:ea:09:3e:
c3:f8:ba:5b:04:59:a7:9c:10:f5:c9:11:14:52:b2:
bb:f6:e7:e2:3a:24:84:73:94:9a:32:eb:ae:17:c5:
11:42:c4:af:8a:ac:72:bc:5a:ae:6c:2e:2c:94:d8:
dd:35:a6:48:0f:fd:2e:8b:44:38:81:5c:af:e6:a0:
c5:e9:13:8a:e3:b1:f7:5a:4a:72:77:10:a5:3a:0f:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:6F:FE:98:3B:A8:03:CD:8B:06:71:AD:F7:8E:64:4B:FE:AC:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
X509v3 Authority Key Identifier:
keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.29.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:66:12:8c:a6:0f:2b:2b:ca:77:d7:1d:72:99:bd:01:8d:2b:
b4:dc:ee:20:a7:da:b8:70:54:5c:98:6b:13:1e:0e:e9:de:2f:
af:5e:77:8d:2e:83:9f:c2:b3:9e:79:9c:98:f8:c4:bd:60:49:
b6:4d:fd:64:e8:f7:cc:8b:c8:79:c4:fe:04:6e:53:ad:0b:a8:
f4:fa:ec:e7:e4:65:2a:7f:e2:49:13:13:7d:8e:ab:cc:9b:e6:
12:7b:dc:02:b0:fa:cc:cb:d9:05:82:d1:c2:07:51:9b:20:aa:
6c:26:2b:33:15:e4:f9:58:8c:4f:a3:91:27:df:f9:14:71:7e:
d9:fc:2c:21:85:e3:d6:b7:66:3a:96:2f:0f:1e:48:59:5b:a5:
e8:99:60:17:a4:cf:37:e6:b9:76:d4:d4:5a:57:88:8a:b0:9a:
fe:b3:11:bd:4e:99:9b:e5:f4:a8:f2:d5:33:d4:a2:d9:51:3d:
5a:3f:22:58:c5:a7:f2:3e:5f:17:61:91:d9:77:49:44:b8:c9:
da:d9:8e:42:5a:af:43:e6:80:40:c5:93:ed:39:05:b5:7a:ea:
85:ac:0d:e6:ee:27:47:5e:88:8c:2a:9a:33:75:b5:be:75:a4:
79:ef:a8:cd:dd:eb:fd:cd:a1:b6:6f:13:b1:34:9d:3a:8c:bf:
2c:15:49:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlz3MUez9FKwvSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl
NDBkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTBmYjMwNTMtNTlmMC00YjRhLWJjNGMtOWJkZTY4NDhmNzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkojfvfRSHep9ffYUcPcqE075yvweAJNiw7zZ
PbwkJmmRkbk/FPWyzL8sIbGc/3xtX0ykFIxN6eBqXq0n13e6vg3/CB116Hmzc1OL
hjdK1nynSS9KBsjubfH8AOiBBTm6KdSmQXdlb1KvlNUbwQupHRWcOfMVDUwXwwja
ORdkoE8FQoEDlOJn8x8f7d9AvpB9MwRowMSvHx8cJ7Nuo9lTKMK2GwKzxrMwL7pc
CS2SrdnqCT7D+LpbBFmnnBD1yREUUrK79ufiOiSEc5SaMuuuF8URQsSviqxyvFqu
bC4slNjdNaZID/0ui0Q4gVyv5qDF6ROK47H3WkpydxClOg/uDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAjyb/6YO6gDzYsGca33jmRL/qyVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm
MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYmIzNTcxMjQtM2E4My0z
ZmRmLTg0MzQtMTE5Y2ExZWIxYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi
ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk
ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5
NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx02MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJmEoymDysrynfXHXKZvQGNK7Tc7iCn2rhwVFyYaxMeDuneL69ed40u
g5/Cs555nJj4xL1gSbZN/WTo98yLyHnE/gRuU60LqPT67OfkZSp/4kkTE32Oq8yb
5hJ73AKw+szL2QWC0cIHUZsgqmwmKzMV5PlYjE+jkSff+RRxftn8LCGF49a3ZjqW
Lw8eSFlbpeiZYBekzzfmuXbU1FpXiIqwmv6zEb1OmZvl9Kjy1TPUotlRPVo/IljF
p/I+Xxdhkdl3SUS4ydrZjkJar0PmgEDFk+05BbV66oWsDebuJ0deiIwqmjN1tb51
pHnvqM3d6/3NobZvE7E0nTqMvywVSSM=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:27 2026 by rpki-client