
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa
File: b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa (raw, json)
Hash identifier: WTR9rtX5pEqTkjKrKsQVHjGdDZGqvghAy/jE/ZtoPFg=
Subject key identifier: E9:BB:66:44:DA:6E:34:EE:DC:80:41:61:D4:DF:5D:D5:63:8C:41:C6
Certificate issuer: /CN=88ab4e91-e06e-4a0d-9b7e-99559f17fa2b
Certificate serial: 010D0C9F4328584CC0E41A4A1ADE6C249B581E80
Authority key identifier: 30:F3:7D:73:28:DE:5B:F8:A8:C9:89:6B:F2:3E:C1:42:A0:E9:EC:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa
Signing time: Wed 04 Feb 2026 17:29:26 +0000
ROA not before: Wed 04 Feb 2026 17:29:26 +0000
ROA not after: Tue 05 May 2026 16:29:26 +0000
asID: 393278
IP address blocks: 64.45.168.0/23 maxlen: 24
72.46.92.0/22 maxlen: 24
141.193.192.0/23 maxlen: 24
152.117.48.0/20 maxlen: 24
208.79.112.0/22 maxlen: 24
2605:33c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c0:e4:1a:4a:1a:de:6c:24:9b:58:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab4e91-e06e-4a0d-9b7e-99559f17fa2b
Validity
Not Before: Feb 4 17:29:26 2026 GMT
Not After : May 5 16:29:26 2026 GMT
Subject: CN=987ec940-420c-40df-b378-8b043db33318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:c8:d6:e3:db:07:da:74:90:ed:66:e4:82:
32:ab:f1:db:4e:f6:a7:14:49:f8:da:b5:2c:ce:66:
63:40:c7:c6:65:c1:16:5e:93:fc:a3:67:f0:f6:95:
0f:8c:b3:4a:ab:3e:bf:e3:c5:ec:95:3b:68:6e:aa:
14:3a:13:89:84:d9:a3:3f:28:fa:03:83:a1:55:be:
6d:35:f1:40:ca:7e:81:b5:65:10:a6:d0:5a:9f:2e:
c4:5d:3a:e2:ef:3d:92:bb:19:65:82:fb:f5:49:d4:
0a:7f:d9:74:4b:fa:10:81:93:39:b9:21:da:b4:37:
f4:c8:3c:63:1c:e5:44:c0:18:8e:00:f8:41:79:fe:
97:ee:6b:4e:40:65:f3:fd:e4:8f:e1:0c:10:86:f2:
0a:61:3b:26:a3:a7:65:b6:1d:3b:35:1a:c3:92:56:
87:b7:8b:8e:c1:30:32:fa:d4:6b:e7:9b:55:3b:34:
15:8f:20:98:76:4f:81:de:1c:eb:fe:ec:85:cb:71:
c1:9d:91:e1:78:8e:08:1f:b3:31:4e:af:e8:46:f3:
8e:b3:8d:5d:af:f4:c6:e2:96:0b:12:7c:8a:c9:1f:
36:93:39:ae:15:1e:cb:70:f9:b5:89:fa:e3:b5:3d:
fc:92:62:18:21:65:a6:2d:88:40:dd:17:ce:24:84:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:66:44:DA:6E:34:EE:DC:80:41:61:D4:DF:5D:D5:63:8C:41:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/b97f6a94-daae-3a7c-bc8c-ba9525de39cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.crl
X509v3 Authority Key Identifier:
keyid:30:F3:7D:73:28:DE:5B:F8:A8:C9:89:6B:F2:3E:C1:42:A0:E9:EC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.45.168.0/23
72.46.92.0/22
141.193.192.0/23
152.117.48.0/20
208.79.112.0/22
IPv6:
2605:33c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:8a:87:38:54:aa:46:76:76:23:51:a2:9c:a6:81:39:23:7a:
f7:c5:10:18:ae:6a:54:90:37:fb:1b:76:41:c7:0a:c4:a6:9b:
55:cc:aa:56:cc:0e:8c:a7:78:87:44:48:e9:35:ae:4c:66:ff:
ac:36:cd:9d:ec:11:17:d2:50:9a:37:00:8c:d4:80:90:07:4f:
42:ed:89:c1:f4:ae:8d:fa:6a:b9:e8:e7:34:e4:3f:36:a0:ba:
14:1b:62:bc:1a:11:c3:57:cc:5a:00:7a:9a:d1:43:36:b9:fa:
7b:d7:1a:ca:86:16:7e:a6:5e:74:8c:a9:a2:0a:bb:2b:a6:75:
42:85:0d:4a:23:a9:78:75:3a:de:24:b3:98:9e:d0:b1:d9:52:
06:f0:85:85:98:58:13:ea:6f:2a:5f:42:5c:3a:36:ac:e3:db:
98:61:d1:d5:b9:62:15:e9:c8:6c:e3:eb:cb:8b:76:04:3a:51:
08:46:0e:95:80:e5:80:26:70:d0:7e:34:86:05:b9:f8:c6:cc:
42:2a:03:37:3d:e8:02:09:88:95:be:bb:b6:f3:b0:49:f5:63:
ec:61:3d:88:85:dc:37:8e:a9:1b:75:8e:6f:68:d4:f5:46:0b:
3a:e0:09:ff:79:31:ee:10:be:e5:1e:60:f0:02:f6:bc:7c:e5:
94:b5:85:43
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEzA5BpKGt5sJJtYHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhhYjRlOTEtZTA2ZS00YTBkLTliN2UtOTk1NTlmMTdm
YTJiMB4XDTI2MDIwNDE3MjkyNloXDTI2MDUwNTE2MjkyNlowLzEtMCsGA1UEAxMk
OTg3ZWM5NDAtNDIwYy00MGRmLWIzNzgtOGIwNDNkYjMzMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVXI1uPbB9p0kO1m5IIyq/HbTvanFEn42rUs
zmZjQMfGZcEWXpP8o2fw9pUPjLNKqz6/48XslTtobqoUOhOJhNmjPyj6A4OhVb5t
NfFAyn6BtWUQptBany7EXTri7z2Suxllgvv1SdQKf9l0S/oQgZM5uSHatDf0yDxj
HOVEwBiOAPhBef6X7mtOQGXz/eSP4QwQhvIKYTsmo6dlth07NRrDklaHt4uOwTAy
+tRr55tVOzQVjyCYdk+B3hzr/uyFy3HBnZHheI4IH7MxTq/oRvOOs41dr/TG4pYL
EnyKyR82kzmuFR7LcPm1ifrjtT38kmIYIWWmLYhA3RfOJIRMzQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFOm7ZkTabjTu3IBBYdTfXdVjjEHGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84OGFi
NGU5MS1lMDZlLTRhMGQtOWI3ZS05OTU1OWYxN2ZhMmIvYjk3ZjZhOTQtZGFhZS0z
YTdjLWJjOGMtYmE5NTI1ZGUzOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODhhYjRlOTEtZTA2ZS00YTBkLTli
N2UtOTk1NTlmMTdmYTJiLzg4YWI0ZTkxLWUwNmUtNGEwZC05YjdlLTk5NTU5ZjE3
ZmEyYi5jcmwwHwYDVR0jBBgwFoAUMPN9cyjeW/ioyYlr8j7BQqDp7O0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS84OGFiNGU5MS1lMDZlLTRhMGQtOWI3ZS05OTU1
OWYxN2ZhMmIuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBQC2oAwQC
SC5cAwQBjcHAAwQEmHUwAwQC0E9wMA0EAgACMAcDBQAmBTPAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHiK
hzhUqkZ2diNRopymgTkjevfFEBiualSQN/sbdkHHCsSmm1XMqlbMDoyneIdESOk1
rkxm/6w2zZ3sERfSUJo3AIzUgJAHT0LticH0ro36arno5zTkPzaguhQbYrwaEcNX
zFoAeprRQza5+nvXGsqGFn6mXnSMqaIKuyumdUKFDUojqXh1Ot4ks5ie0LHZUgbw
hYWYWBPqbypfQlw6Nqzj25hh0dW5YhXpyGzj68uLdgQ6UQhGDpWA5YAmcNB+NIYF
ufjGzEIqAzc96AIJiJW+u7bzsEn1Y+xhPYiF3DeOqRt1jm9o1PVGCzrgCf95Me4Q
vuUeYPAC9rx85ZS1hUM=
-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:39 2026 by rpki-client