
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa
File: 4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa (raw, json)
Hash identifier: Mgfntc03o+HirdCPE2qsLfopFssAim8ng/2dIIOnt4c=
Subject key identifier: 6C:0C:02:72:B1:01:32:8D:C7:F7:3A:C2:07:F7:A6:0A:67:7B:36:F3
Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f
Certificate serial: 010D0C9F4328584ED861E0FBDC0528E1013D8021
Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 40232
IP address blocks: 69.72.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:e0:fb:dc:05:28:e1:01:3d:80:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=b5e49072-74c8-4a4e-b141-9ab6ab8bcc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:68:f2:28:52:98:b4:30:11:73:34:e9:9c:
a1:b9:ae:86:08:6a:0c:ed:7f:71:7c:d1:a3:dd:ed:
3d:e5:b2:52:f7:5d:ea:b2:da:07:11:30:2a:f4:c8:
b0:98:65:ab:18:28:30:fe:91:63:73:1d:7f:e5:7f:
31:71:e7:59:5c:06:a7:56:cd:12:14:83:8b:32:d0:
c9:dd:36:15:f5:e7:30:84:cb:f5:7c:25:3e:8a:5f:
1e:c8:fb:0d:e7:13:c5:c5:64:d0:00:16:04:56:bd:
65:73:1c:83:db:43:38:bd:f2:60:a2:f2:a2:ba:3c:
3a:35:eb:ec:33:66:8a:97:85:ab:66:3d:4e:df:4b:
ca:f9:22:4c:03:4e:1c:4e:76:05:56:84:0c:bd:04:
6c:36:ac:ac:c3:3c:0a:63:17:1b:da:e5:60:61:29:
d9:04:1b:6f:13:ad:15:d0:1f:f3:6d:c7:90:4d:81:
af:aa:32:52:64:85:6a:9b:18:20:70:84:f3:a0:06:
2c:9e:7d:5b:ec:1c:cb:0c:8f:ad:3d:44:8c:10:c2:
dc:18:f7:f1:00:15:b3:b4:c4:47:cf:24:ac:1a:49:
f1:07:66:42:96:e9:41:c3:7e:60:63:a9:1f:ce:67:
eb:ef:8f:3f:15:e6:f8:e6:94:30:a2:64:3a:66:99:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0C:02:72:B1:01:32:8D:C7:F7:3A:C2:07:F7:A6:0A:67:7B:36:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl
X509v3 Authority Key Identifier:
keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer
sbgp-ipAddrBlock: critical
IPv4:
69.72.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:da:2d:19:b3:fb:9f:93:73:90:5f:fe:41:3b:7d:12:b2:bc:
8f:ae:36:7f:bb:de:aa:39:54:e9:2b:93:07:1d:af:79:9c:6a:
3a:12:c5:51:90:ad:5e:32:88:79:bc:48:2d:54:c3:e1:f9:ff:
3f:47:0c:1a:8f:84:6a:7f:42:2f:c9:21:a1:09:48:8b:92:ff:
03:1f:01:a6:3d:cd:36:4d:52:6b:64:35:f4:c7:6b:00:de:bd:
d5:48:c8:75:fc:64:5f:22:f7:0f:f9:f4:dc:a4:e5:34:15:df:
89:40:29:5f:9d:00:58:0a:94:b6:85:26:da:49:37:4e:be:89:
57:9c:89:23:0f:a6:eb:47:fb:e2:10:39:3a:b5:cc:37:d2:93:
75:04:78:27:49:0e:51:b6:1f:15:94:0e:2b:a4:5a:55:45:c3:
4d:87:7b:ea:ad:19:b2:fa:75:39:0a:f4:34:d4:4e:36:12:fe:
59:d6:11:d3:35:09:85:35:1e:2a:2e:75:d1:04:3c:1f:72:66:
74:0a:13:4e:65:f2:41:09:01:e0:95:9e:6e:3c:38:ed:2e:bb:
b6:6e:e7:24:37:98:41:64:cb:a6:48:60:52:0c:17:cd:2a:21:
05:75:cd:a6:b3:07:23:7b:fd:6b:27:cc:b6:0e:29:a3:03:0c:
95:b8:0f:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeD73AUo4QE9gCEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3
NjhmMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
YjVlNDkwNzItNzRjOC00YTRlLWIxNDEtOWFiNmFiOGJjYzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Ro8ihSmLQwEXM06Zyhua6GCGoM7X9xfNGj
3e095bJS913qstoHETAq9MiwmGWrGCgw/pFjcx1/5X8xcedZXAanVs0SFIOLMtDJ
3TYV9ecwhMv1fCU+il8eyPsN5xPFxWTQABYEVr1lcxyD20M4vfJgovKiujw6Nevs
M2aKl4WrZj1O30vK+SJMA04cTnYFVoQMvQRsNqyswzwKYxcb2uVgYSnZBBtvE60V
0B/zbceQTYGvqjJSZIVqmxggcITzoAYsnn1b7BzLDI+tPUSMEMLcGPfxABWztMRH
zySsGknxB2ZClulBw35gY6kfzmfr748/Feb45pQwomQ6Zpm9nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwMAnKxATKNx/c6wgf3pgpnezbzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5
NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvNGRjNDE4MjYtYzJmNS0z
NjczLWI5NDctZjk3ZmQzYmUzZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl
MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx
NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3
M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUgIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHaLRmz+5+Tc5Bf/kE7fRKyvI+uNn+73qo5VOkrkwcdr3mcajoSxVGQ
rV4yiHm8SC1Uw+H5/z9HDBqPhGp/Qi/JIaEJSIuS/wMfAaY9zTZNUmtkNfTHawDe
vdVIyHX8ZF8i9w/59Nyk5TQV34lAKV+dAFgKlLaFJtpJN06+iVeciSMPputH++IQ
OTq1zDfSk3UEeCdJDlG2HxWUDiukWlVFw02He+qtGbL6dTkK9DTUTjYS/lnWEdM1
CYU1HiouddEEPB9yZnQKE05l8kEJAeCVnm48OO0uu7Zu5yQ3mEFky6ZIYFIMF80q
IQV1zaazByN7/WsnzLYOKaMDDJW4Dx0=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:26 2026 by rpki-client