
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9038ba46-0193-3027-9873-dc15e410708a.roa
File: 9038ba46-0193-3027-9873-dc15e410708a.roa (raw, json)
Hash identifier: ISID796El9iBfIFHuWrmI6QPukdZPf94lb14S0A6ASQ=
Subject key identifier: BA:EB:78:21:B5:87:81:76:49:CD:30:7C:9F:32:17:9F:21:E8:E4:8D
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E74BDA6B9F30DDE41CF154D80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9038ba46-0193-3027-9873-dc15e410708a.roa
Signing time: Fri 10 Jul 2026 20:24:24 +0000
ROA not before: Fri 10 Jul 2026 20:24:24 +0000
ROA not after: Thu 08 Oct 2026 20:24:24 +0000
asID: 13347
IP address blocks: 209.101.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:74:bd:a6:b9:f3:0d:de:41:cf:15:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 10 20:24:24 2026 GMT
Not After : Oct 8 20:24:24 2026 GMT
Subject: CN=141a339b-debf-451d-8a64-cb030d3d5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:ea:5d:e3:0e:45:11:0d:94:cd:3d:85:95:
fa:c4:74:53:2d:1b:29:91:32:71:02:45:73:f3:a1:
94:3b:2e:2a:66:72:eb:b8:e7:d1:ea:94:8b:bd:47:
1b:6b:3b:7b:74:da:90:be:76:6b:00:c9:bd:11:d8:
35:a3:f1:a3:26:8f:33:29:a8:3a:7d:3f:d6:8b:95:
6d:ec:12:8f:90:ec:66:f5:6f:2f:5a:20:c0:31:a3:
02:f6:c6:57:56:7a:56:6a:e0:d5:3d:63:e1:0b:f4:
f2:45:d0:19:e2:68:c4:18:32:ca:45:89:11:35:42:
85:6d:0b:6d:56:df:69:49:95:42:91:2b:1c:ea:dc:
3c:81:83:c5:3d:a7:22:fa:90:ea:d5:2d:c3:52:17:
db:22:e7:ac:6d:4f:0c:00:2f:82:ab:a7:99:08:f0:
f9:22:af:b1:e2:78:fd:12:91:95:3e:04:a0:53:de:
04:ac:ba:c5:52:74:d7:a5:65:1b:87:62:2a:d5:54:
36:34:ca:f4:8e:41:0d:02:b1:a0:27:b3:77:4a:27:
59:d6:2a:b6:6c:f1:f7:4e:50:dd:80:ab:c4:fa:3f:
0e:c1:a3:5a:ea:4e:98:5b:a1:bd:75:0a:3d:ae:78:
f0:31:fc:20:9e:8b:65:d8:df:19:58:97:54:74:32:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EB:78:21:B5:87:81:76:49:CD:30:7C:9F:32:17:9F:21:E8:E4:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9038ba46-0193-3027-9873-dc15e410708a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:1b:09:16:48:e9:69:d0:b6:59:07:24:03:7f:4e:23:27:1f:
0f:5e:d4:7e:d6:b6:4c:f6:a4:c0:fc:7d:22:79:b8:8f:c7:53:
43:11:bb:35:a4:9e:f9:c3:54:ab:f9:53:7e:1a:53:f1:22:44:
fd:7b:92:f6:35:ac:e9:0f:d8:cd:a8:d6:d3:90:09:01:1c:6e:
82:4c:7f:50:ca:ac:50:9e:06:59:62:66:bd:8b:f9:18:8d:11:
55:52:1f:58:91:39:ba:e4:41:3f:77:95:4e:77:52:69:46:2e:
96:27:40:0e:ba:c4:f6:79:61:d6:b8:38:ae:29:23:5e:0f:c9:
0f:0e:2e:d3:54:a7:34:6e:be:b4:99:78:3d:b1:97:24:a0:6e:
ab:3e:31:34:58:b1:7d:98:2b:26:a7:4d:f0:a9:dc:06:f3:84:
92:eb:42:7f:d5:87:ad:b0:6a:7d:60:43:9a:ab:bc:6a:59:ff:
d7:14:94:de:4e:be:fb:db:8c:14:e2:9e:44:18:b2:b9:6c:cf:
d0:eb:0f:65:5d:c5:79:43:5b:0a:b0:b9:5d:b8:48:26:9f:63:
51:9f:8a:fd:93:d9:20:a7:26:64:7e:0e:8c:07:d0:99:14:1f:
d5:1b:8b:b0:43:0e:7b:7f:aa:3f:c1:36:26:59:17:f5:86:fa:
3a:c7:44:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50vaa58w3eQc8VTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcxMDIwMjQyNFoXDTI2MTAwODIwMjQyNFowLzEtMCsGA1UEAxMk
MTQxYTMzOWItZGViZi00NTFkLThhNjQtY2IwMzBkM2Q1YmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtXqXeMORRENlM09hZX6xHRTLRspkTJxAkVz
86GUOy4qZnLruOfR6pSLvUcbazt7dNqQvnZrAMm9Edg1o/GjJo8zKag6fT/Wi5Vt
7BKPkOxm9W8vWiDAMaMC9sZXVnpWauDVPWPhC/TyRdAZ4mjEGDLKRYkRNUKFbQtt
Vt9pSZVCkSsc6tw8gYPFPaci+pDq1S3DUhfbIuesbU8MAC+Cq6eZCPD5Iq+x4nj9
EpGVPgSgU94ErLrFUnTXpWUbh2Iq1VQ2NMr0jkENArGgJ7N3SidZ1iq2bPH3TlDd
gKvE+j8OwaNa6k6YW6G9dQo9rnjwMfwgnotl2N8ZWJdUdDJdowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrreCG1h4F2Sc0wfJ8yF58h6OSNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTAzOGJhNDYtMDE5My0z
MDI3LTk4NzMtZGMxNWU0MTA3MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgbCRZI6WnQtlkHJAN/TiMnHw9e1H7Wtkz2pMD8fSJ5uI/HU0MRuzWk
nvnDVKv5U34aU/EiRP17kvY1rOkP2M2o1tOQCQEcboJMf1DKrFCeBlliZr2L+RiN
EVVSH1iRObrkQT93lU53UmlGLpYnQA66xPZ5Yda4OK4pI14PyQ8OLtNUpzRuvrSZ
eD2xlySgbqs+MTRYsX2YKyanTfCp3AbzhJLrQn/Vh62wan1gQ5qrvGpZ/9cUlN5O
vvvbjBTinkQYsrlsz9DrD2VdxXlDWwqwuV24SCafY1Gfiv2T2SCnJmR+DowH0JkU
H9Ubi7BDDnt/qj/BNiZZF/WG+jrHRCU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:34:59 2026 by rpki-client