
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/af6dbd6a-8ead-37ca-97dc-034257a38308.roa
File: af6dbd6a-8ead-37ca-97dc-034257a38308.roa (raw, json)
Hash identifier: zO5Xzyk9kjBATqxvGCyhOdVSbNGIu8rOAYXt8xowr7U=
Subject key identifier: F2:5A:23:F2:30:51:35:50:C9:21:C0:61:7B:A5:8C:A6:B9:4D:E6:CF
Certificate issuer: /CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2
Certificate serial: 010D0C9F4328584EC63C6D903AE78FCA83728C80
Authority key identifier: EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/af6dbd6a-8ead-37ca-97dc-034257a38308.roa
Signing time: Sun 09 Aug 2026 01:00:12 +0000
ROA not before: Sun 09 Aug 2026 01:00:12 +0000
ROA not after: Sat 07 Nov 2026 02:00:12 +0000
asID: 26288
IP address blocks: 64.184.192.0/19 maxlen: 24
66.165.192.0/19 maxlen: 24
69.71.64.0/19 maxlen: 24
206.188.96.0/19 maxlen: 24
2607:d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c6:3c:6d:90:3a:e7:8f:ca:83:72:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2
Validity
Not Before: Aug 9 01:00:12 2026 GMT
Not After : Nov 7 02:00:12 2026 GMT
Subject: CN=aa48459b-1ced-4dfb-8109-9f2e8e0f2fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:41:b4:9c:2a:5c:47:33:6d:8c:b4:e6:ec:
57:7c:e4:9f:83:5e:f2:31:ab:af:fa:78:8c:a8:03:
64:b0:80:82:6c:e3:aa:ed:e4:e5:82:8a:4c:bc:f5:
48:ea:e6:93:92:74:a4:f7:76:bd:c9:f1:94:e5:1c:
6c:28:3f:f9:38:ac:0a:cf:ef:33:b6:f2:c4:ce:f1:
b9:d9:ef:71:ea:66:09:22:70:17:1a:d9:c6:ee:03:
fd:10:67:bf:11:da:82:f1:65:57:9c:80:d9:3a:68:
4e:42:f5:24:58:f7:2e:14:93:7f:ec:98:d5:92:77:
99:8d:31:3a:51:d8:0c:c3:64:57:22:ac:03:dd:24:
c8:a8:ce:e2:2d:65:b3:e7:8f:26:f8:62:eb:58:3c:
c7:63:b2:3e:f6:74:7e:d7:d7:27:2a:bf:69:1d:ba:
b2:36:21:e0:f7:a6:f8:c2:47:40:15:12:08:9d:2e:
fb:51:71:90:24:0e:a5:92:bf:df:20:9e:ed:6d:b6:
f3:20:87:53:4e:b8:6d:7f:1d:30:77:b1:df:2e:44:
35:be:68:5c:a0:55:62:4e:8e:b5:e0:ac:2b:8f:d3:
b1:79:e5:9a:f1:0d:34:9d:51:57:c6:a6:18:25:c2:
cb:cd:0c:16:87:5e:62:15:6b:c7:4a:a0:a9:74:9c:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:23:F2:30:51:35:50:C9:21:C0:61:7B:A5:8C:A6:B9:4D:E6:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/af6dbd6a-8ead-37ca-97dc-034257a38308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl
X509v3 Authority Key Identifier:
keyid:EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.184.192.0/19
66.165.192.0/19
69.71.64.0/19
206.188.96.0/19
IPv6:
2607:d80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:f0:d0:01:88:37:b5:73:9f:a1:99:d5:bb:04:ed:23:e4:c1:
17:e3:59:7d:e0:9a:b1:de:d9:fe:f2:48:32:4b:29:7d:fd:ec:
9f:f7:26:01:52:e8:e7:b5:ee:cf:e8:08:30:71:e5:22:ca:dd:
71:8c:99:89:39:20:ce:37:ba:e3:40:c8:39:87:5f:e9:1b:a6:
86:3b:96:90:31:0a:33:05:be:eb:17:16:d4:7c:74:c7:8d:1a:
83:c9:3e:f2:f6:6d:98:b1:a3:34:c0:60:af:f9:cd:a3:2f:51:
2e:83:cc:8f:5d:87:76:5c:0e:63:74:89:e0:89:31:32:3c:6e:
77:99:53:a4:65:94:da:19:87:c8:24:28:c7:b5:2e:d5:32:9c:
eb:86:f1:e4:24:97:d3:4a:e4:59:fd:00:93:38:76:34:ae:ed:
a1:fb:f2:c9:81:c7:05:8c:b6:42:51:7e:fc:08:cb:99:5f:13:
e7:0a:f1:cb:01:21:41:0c:ac:8b:7a:74:d5:4e:ce:1d:01:f3:
61:b7:55:5f:92:93:ff:33:e1:07:95:aa:c1:e4:63:b6:a6:50:
73:c5:b2:79:74:ff:ed:e8:14:27:e1:40:6e:3e:95:1d:30:c8:
a1:8f:60:9a:4f:df:56:9d:24:d9:6e:3c:71:0b:e9:57:38:46:
bb:ed:34:17
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE7GPG2QOuePyoNyjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWEwNjFjNDEtNWM5OC00YzcxLWExNTAtN2E3ZDdhMjU1
MGUyMB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk
YWE0ODQ1OWItMWNlZC00ZGZiLTgxMDktOWYyZThlMGYyZmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoURBtJwqXEczbYy05uxXfOSfg17yMauv+niM
qANksICCbOOq7eTlgopMvPVI6uaTknSk93a9yfGU5RxsKD/5OKwKz+8ztvLEzvG5
2e9x6mYJInAXGtnG7gP9EGe/EdqC8WVXnIDZOmhOQvUkWPcuFJN/7JjVkneZjTE6
UdgMw2RXIqwD3STIqM7iLWWz548m+GLrWDzHY7I+9nR+19cnKr9pHbqyNiHg96b4
wkdAFRIInS77UXGQJA6lkr/fIJ7tbbbzIIdTTrhtfx0wd7HfLkQ1vmhcoFViTo61
4Kwrj9OxeeWa8Q00nVFXxqYYJcLLzQwWh15iFWvHSqCpdJzNCwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFPJaI/IwUTVQySHAYXuljKa5TebPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYTA2
MWM0MS01Yzk4LTRjNzEtYTE1MC03YTdkN2EyNTUwZTIvYWY2ZGJkNmEtOGVhZC0z
N2NhLTk3ZGMtMDM0MjU3YTM4MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWEwNjFjNDEtNWM5OC00YzcxLWEx
NTAtN2E3ZDdhMjU1MGUyLzFhMDYxYzQxLTVjOTgtNGM3MS1hMTUwLTdhN2Q3YTI1
NTBlMi5jcmwwHwYDVR0jBBgwFoAU7pkmZBtRKH1Ep7BlfZtEjgV8y/IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYTA2MWM0MS01Yzk4LTRjNzEtYTE1MC03YTdk
N2EyNTUwZTIuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFQLjAAwQF
QqXAAwQFRUdAAwQFzrxgMA0EAgACMAcDBQAmBw2AMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACvw0AGIN7Vz
n6GZ1bsE7SPkwRfjWX3gmrHe2f7ySDJLKX397J/3JgFS6Oe17s/oCDBx5SLK3XGM
mYk5IM43uuNAyDmHX+kbpoY7lpAxCjMFvusXFtR8dMeNGoPJPvL2bZixozTAYK/5
zaMvUS6DzI9dh3ZcDmN0ieCJMTI8bneZU6RllNoZh8gkKMe1LtUynOuG8eQkl9NK
5Fn9AJM4djSu7aH78smBxwWMtkJRfvwIy5lfE+cK8csBIUEMrIt6dNVOzh0B82G3
VV+Sk/8z4QeVqsHkY7amUHPFsnl0/+3oFCfhQG4+lR0wyKGPYJpP31adJNluPHEL
6Vc4RrvtNBc=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:26:55 2026 by rpki-client