
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa
File: 7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa (raw, json)
Hash identifier: cVoIvtYkp3UiXMhJ9alo5VNZNxTEG10kUIRVPQSZTmg=
Subject key identifier: B1:57:A0:00:16:B8:7E:4C:7E:AA:7A:CD:43:A2:66:79:B9:12:8D:A2
Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial: 010D0C9F4328584F119CF51896BA4A7AAC6B23C0
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 397423
IP address blocks: 170.39.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:f5:18:96:ba:4a:7a:ac:6b:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=9a8a198c-58a5-453e-a26f-3fd6597b2e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:93:cf:73:af:b7:76:f9:7a:11:33:01:9f:
68:c3:5d:27:a1:61:aa:f0:63:10:57:c1:bc:c0:b1:
70:cc:74:80:3e:6f:f8:56:8c:a5:95:a1:ea:ba:3d:
4e:2a:b4:05:e9:7f:73:60:e5:8a:6c:eb:7f:49:ab:
5a:8c:36:0d:e3:55:3b:2e:3a:a4:e7:9d:f2:d8:6a:
1c:e2:8f:dd:ca:46:51:fd:7c:ac:9d:c3:f5:54:ee:
67:04:2f:c3:ef:31:b9:84:7c:eb:22:c9:7f:46:c4:
c9:e6:97:67:a3:52:6e:c8:80:14:4b:62:98:ae:52:
94:65:93:5b:d6:bd:61:78:9a:9d:66:ee:a2:cc:29:
6e:38:ec:e5:09:2c:2b:9f:d8:9d:03:cb:7d:6b:07:
45:89:6e:64:29:3d:09:5e:4f:b2:c1:5f:a5:b5:8c:
2b:24:9d:a3:32:8d:0b:23:85:91:18:e1:aa:e3:c0:
0c:d2:6b:83:3a:cf:85:b1:40:f1:66:2b:78:1c:25:
6a:1c:5f:19:23:45:21:af:06:78:81:9e:76:52:c5:
c7:b3:32:4e:aa:06:67:89:98:e4:00:35:4b:07:a9:
57:18:b9:ab:6a:0a:c9:c6:16:3e:db:2c:cf:27:e8:
fc:f2:ee:66:36:b1:a8:41:d1:2f:0d:da:e9:c3:01:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:57:A0:00:16:B8:7E:4C:7E:AA:7A:CD:43:A2:66:79:B9:12:8D:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
X509v3 Authority Key Identifier:
keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:bd:c1:a3:64:ca:a6:c3:43:45:3e:1b:2e:ec:d1:70:aa:27:
d1:15:ef:b5:38:fa:c6:7a:67:b7:8a:b4:61:20:ec:cb:90:37:
9b:ff:5a:b1:c6:89:c3:57:a0:97:ac:4b:0e:c1:1e:04:6c:72:
35:f9:77:e0:32:1a:ae:06:d2:80:d1:61:84:f7:46:05:e3:19:
66:26:3a:18:fd:61:4b:f4:b3:12:00:ed:dc:15:ca:a1:a4:3e:
8f:79:89:a9:0a:45:d4:85:2c:d4:c3:c9:83:ce:ee:37:87:fe:
16:93:55:02:0c:71:6c:23:ef:fe:8b:24:fc:d3:ef:a1:78:d5:
26:d7:44:1a:e8:5a:77:18:03:cc:a5:93:5f:41:17:6c:a8:d9:
80:f2:a1:6e:50:f6:fb:80:14:0f:cf:d3:85:b5:91:65:63:f1:
1c:3d:63:f5:ae:2f:8b:82:28:8e:19:b1:ea:11:4b:10:83:8b:
cf:3e:7d:a8:53:f5:5a:5f:ed:af:6d:58:a3:8f:a5:6a:a9:22:
c2:be:ca:85:b8:e0:ac:f0:82:f5:f5:6f:84:fa:4a:4f:9d:41:
b8:b0:2f:d3:b5:7e:9f:f9:80:c8:fd:36:4e:0a:5a:52:69:cf:
29:6e:c1:bd:73:10:95:fd:c0:4a:ea:19:60:56:4b:3c:f5:3a:
f5:3c:8a:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPUYlrpKeqxrI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky
Yjg2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWE4YTE5OGMtNThhNS00NTNlLWEyNmYtM2ZkNjU5N2IyZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c6Tz3Ovt3b5ehEzAZ9ow10noWGq8GMQV8G8
wLFwzHSAPm/4VoyllaHquj1OKrQF6X9zYOWKbOt/SatajDYN41U7Ljqk553y2Goc
4o/dykZR/XysncP1VO5nBC/D7zG5hHzrIsl/RsTJ5pdno1JuyIAUS2KYrlKUZZNb
1r1heJqdZu6izCluOOzlCSwrn9idA8t9awdFiW5kKT0JXk+ywV+ltYwrJJ2jMo0L
I4WRGOGq48AM0muDOs+FsUDxZit4HCVqHF8ZI0UhrwZ4gZ52UsXHszJOqgZniZjk
ADVLB6lXGLmragrJxhY+2yzPJ+j88u5mNrGoQdEvDdrpwwEn+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFXoAAWuH5Mfqp6zUOiZnm5Eo2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh
YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNzMyNmY0NWYtNmY3Ny0z
OGM0LTkzNzItZTZmYmY0YTAyMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5
YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5
MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy
Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+9waNkyqbDQ0U+Gy7s0XCqJ9EV77U4+sZ6Z7eKtGEg7MuQN5v/WrHG
icNXoJesSw7BHgRscjX5d+AyGq4G0oDRYYT3RgXjGWYmOhj9YUv0sxIA7dwVyqGk
Po95iakKRdSFLNTDyYPO7jeH/haTVQIMcWwj7/6LJPzT76F41SbXRBroWncYA8yl
k19BF2yo2YDyoW5Q9vuAFA/P04W1kWVj8Rw9Y/WuL4uCKI4ZseoRSxCDi88+fahT
9Vpf7a9tWKOPpWqpIsK+yoW44KzwgvX1b4T6Sk+dQbiwL9O1fp/5gMj9Nk4KWlJp
zyluwb1zEJX9wErqGWBWSzz1OvU8ipQ=
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:56:06 2026 by rpki-client