
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/420ab927-57aa-3401-a084-f89e0b030e92.roa
File: 420ab927-57aa-3401-a084-f89e0b030e92.roa (raw, json)
Hash identifier: l72gvEh48HFRG1qIui8NMqiojZ4ZMyLFRGuP4OeoxDE=
Subject key identifier: EE:29:BA:DB:83:74:C4:F7:E4:78:F7:A8:7E:9B:7E:38:D7:06:28:7D
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584E7BCA394D36E082A548684C00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/420ab927-57aa-3401-a084-f89e0b030e92.roa
Signing time: Mon 13 Jul 2026 09:00:12 +0000
ROA not before: Mon 13 Jul 2026 09:00:12 +0000
ROA not after: Sun 11 Oct 2026 09:00:12 +0000
asID: 2914
IP address blocks: 173.213.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7b:ca:39:4d:36:e0:82:a5:48:68:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Jul 13 09:00:12 2026 GMT
Not After : Oct 11 09:00:12 2026 GMT
Subject: CN=8cf6f00b-f474-4ae2-8af2-1047e740e411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:87:8a:6b:e1:24:9f:66:bb:61:25:97:5f:
69:76:de:27:23:98:67:d3:ba:57:d1:e1:da:fc:fa:
d0:c9:7d:d6:18:5d:e2:10:68:af:eb:0c:c3:53:9c:
8c:17:46:ed:8c:39:d4:21:5b:7d:56:75:ad:b8:0b:
f3:5f:eb:66:31:e1:47:ce:fd:70:5b:f6:09:9f:89:
99:9a:fd:56:6e:3e:aa:d4:12:c7:b0:21:cd:76:d1:
94:37:28:cc:fc:a7:ab:9b:ef:a3:44:a6:4e:ea:74:
47:dc:5c:cd:d3:09:82:7a:30:29:86:ef:a1:e5:76:
f5:27:62:91:b4:ec:26:cd:f4:05:49:b6:cd:f0:76:
fd:92:19:73:26:96:f6:07:bd:ca:72:f3:d8:24:10:
02:d4:1a:d1:e6:21:97:78:f6:fa:19:16:3f:f4:bf:
2e:ba:d2:11:ec:23:55:d0:7e:8f:ad:10:14:f2:6b:
9d:8c:59:fa:31:f9:4a:9f:cb:20:4a:26:98:66:24:
0c:ce:94:fd:93:4d:b9:5f:44:7e:62:27:b2:7d:25:
af:20:44:e7:34:fa:8b:93:d0:5e:7b:24:a7:bf:42:
4d:97:cf:b7:b6:d8:bd:81:e0:0d:d8:4c:7b:8d:11:
7d:31:8e:c3:01:53:1d:01:15:9a:3c:e8:f6:f8:46:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:29:BA:DB:83:74:C4:F7:E4:78:F7:A8:7E:9B:7E:38:D7:06:28:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/420ab927-57aa-3401-a084-f89e0b030e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.213.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:11:f4:bb:5b:44:c2:da:8c:c9:b8:8b:ed:41:54:1d:86:64:
63:54:0d:03:1e:52:59:1f:2e:9f:3b:4c:e1:3b:1e:b3:1a:fa:
9f:6e:bc:a5:8b:08:25:b6:a5:48:f8:e2:58:0b:fa:8f:4a:49:
0b:a4:23:f9:2d:25:d5:dc:d4:da:14:9f:dc:af:24:74:95:24:
56:55:7e:6e:75:8e:45:75:cd:75:e7:70:9a:87:25:69:fb:61:
d9:af:10:26:a1:e5:f9:17:37:db:90:ce:13:e0:49:1f:5c:3b:
69:a9:fd:df:c0:a2:ee:1a:be:a5:41:a6:d1:d7:fb:8b:b3:1f:
bd:d3:af:6f:64:a1:2f:9b:de:bb:56:a8:91:80:b0:d2:78:52:
b0:a9:68:c9:11:a2:43:72:ce:b5:0c:a5:14:32:aa:6c:4d:0a:
72:dc:11:31:c6:64:f0:70:4a:c4:c7:c2:7e:ae:9b:af:50:98:
be:aa:ff:7d:bf:b7:70:2a:0d:d3:50:1a:06:a3:e9:bc:18:cc:
98:d0:94:9b:c3:56:4c:a6:1f:c4:97:db:0f:e3:2f:e6:7c:f5:
47:94:29:ad:04:68:84:4e:96:34:f4:cb:2a:0e:2f:a0:d7:25:
9b:c4:4e:df:d0:b6:a8:a4:32:fd:0f:e0:35:46:6f:73:e8:bc:
ed:1b:ab:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjlNNuCCpUhoTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
OGNmNmYwMGItZjQ3NC00YWUyLThhZjItMTA0N2U3NDBlNDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8eHimvhJJ9mu2Ell19pdt4nI5hn07pX0eHa
/PrQyX3WGF3iEGiv6wzDU5yMF0btjDnUIVt9VnWtuAvzX+tmMeFHzv1wW/YJn4mZ
mv1Wbj6q1BLHsCHNdtGUNyjM/Kerm++jRKZO6nRH3FzN0wmCejAphu+h5Xb1J2KR
tOwmzfQFSbbN8Hb9khlzJpb2B73KcvPYJBAC1BrR5iGXePb6GRY/9L8uutIR7CNV
0H6PrRAU8mudjFn6MflKn8sgSiaYZiQMzpT9k025X0R+YieyfSWvIETnNPqLk9Be
eySnv0JNl8+3tti9geAN2Ex7jRF9MY7DAVMdARWaPOj2+EYjmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4putuDdMT35Hj3qH6bfjjXBih9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDIwYWI5MjctNTdhYS0z
NDAxLWEwODQtZjg5ZTBiMDMwZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIR9LtbRMLajMm4i+1BVB2GZGNUDQMeUlkfLp87TOE7HrMa+p9uvKWL
CCW2pUj44lgL+o9KSQukI/ktJdXc1NoUn9yvJHSVJFZVfm51jkV1zXXncJqHJWn7
YdmvECah5fkXN9uQzhPgSR9cO2mp/d/Aou4avqVBptHX+4uzH73Tr29koS+b3rtW
qJGAsNJ4UrCpaMkRokNyzrUMpRQyqmxNCnLcETHGZPBwSsTHwn6um69QmL6q/32/
t3AqDdNQGgaj6bwYzJjQlJvDVkymH8SX2w/jL+Z89UeUKa0EaIROljT0yyoOL6DX
JZvETt/QtqikMv0P4DVGb3PovO0bq7I=
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:30:09 2026 by rpki-client