
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa
File: 7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa (raw, json)
Hash identifier: L/6CxNyPDE8Df8N+GLIYhHn4xN1791xHOmyAKwni0dw=
Subject key identifier: 1B:73:96:9A:39:FC:B8:D9:A0:D5:9B:AC:71:11:D8:60:59:D2:2C:EA
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584F5B98020CBB11CC1C2E9B1500
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa
Signing time: Thu 01 Oct 2026 13:00:12 +0000
ROA not before: Thu 01 Oct 2026 13:00:12 +0000
ROA not after: Wed 30 Dec 2026 14:00:12 +0000
asID: 1421
IP address blocks: 66.39.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:98:02:0c:bb:11:cc:1c:2e:9b:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Oct 1 13:00:12 2026 GMT
Not After : Dec 30 14:00:12 2026 GMT
Subject: CN=421da6c0-4563-4371-bfe8-cd6cfb32ac13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:bb:bc:d0:8f:ba:d0:bc:61:b7:8d:2e:5f:
52:53:a1:14:0b:c7:b6:ee:af:b2:1d:5f:6b:0f:fd:
28:95:a6:ba:32:e9:40:ef:b4:f0:3c:8a:45:74:ce:
d2:0a:a2:22:8c:09:1a:6b:71:63:a8:d6:25:4c:71:
53:8a:0e:19:dc:ab:21:49:68:a4:ae:c6:8c:67:33:
e5:53:91:96:da:ba:ec:7c:f5:c4:5f:1c:cb:ee:b3:
16:20:8e:c5:f4:ac:ee:ba:77:f4:f3:fe:93:3e:af:
30:fb:8f:26:f0:20:ef:fc:4a:41:54:85:83:3e:cb:
23:df:13:05:58:7f:12:bf:6c:05:39:4a:b9:71:a1:
41:c1:39:d4:21:89:a0:0f:4d:9d:79:b7:0c:b1:f6:
74:59:34:9c:c9:d6:7a:ef:dd:b5:9a:e7:26:e7:52:
00:a4:6c:d3:96:c2:c4:97:4d:a4:07:7b:e1:55:ec:
88:33:33:ff:d5:ac:cb:05:75:37:cd:29:bc:29:55:
50:9a:84:bb:68:fb:ae:cb:90:b6:3b:db:76:10:39:
18:2f:63:1e:5a:13:3f:a7:64:73:7b:f5:b6:2e:6e:
89:ae:91:88:19:05:3a:53:4f:7e:91:71:05:08:29:
fa:33:9e:b6:2c:74:5b:92:f7:4a:11:8e:80:ff:e8:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:73:96:9A:39:FC:B8:D9:A0:D5:9B:AC:71:11:D8:60:59:D2:2C:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.39.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:0e:c4:42:05:65:7a:af:3f:d8:ae:f1:d9:10:fd:06:50:42:
2d:b2:e1:8e:ef:32:54:5c:c0:6b:5e:3b:79:ce:5c:32:80:bb:
83:ce:51:bb:17:96:ff:f8:7f:3d:71:8b:d1:38:d6:83:d1:ab:
ca:99:84:e7:e8:9e:90:76:1a:15:5f:50:7b:bb:37:90:82:e3:
28:f1:47:35:fa:ce:37:24:a6:09:83:99:f6:dd:bc:87:29:da:
6b:7e:34:9e:b8:6a:f8:2c:dd:12:a2:6d:b6:c8:d6:57:f2:e8:
8d:ec:f5:78:b5:6a:05:8f:07:fd:ae:78:8a:d4:f3:79:69:5f:
d0:0e:bf:bf:0c:8e:ca:71:ec:b2:94:f0:de:1e:74:bf:15:86:
7d:e3:94:29:86:92:08:2b:2b:86:98:e8:95:20:ce:d5:49:16:
b8:ae:a1:89:95:62:de:00:73:0c:b2:18:e3:64:ff:5e:b3:0f:
1b:a2:d0:0f:8f:75:60:ca:44:59:df:41:c3:9a:fd:cd:4b:87:
45:4d:f0:bf:74:ce:57:ff:c5:35:28:08:fc:3f:ce:5d:32:bd:
22:eb:a8:f8:75:03:10:96:41:23:d4:bd:77:ab:10:82:29:e0:
23:56:d2:32:58:50:4b:1e:df:03:72:24:39:6c:a5:a1:f8:9a:
14:00:6a:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmAIMuxHMHC6bFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk
NDIxZGE2YzAtNDU2My00MzcxLWJmZTgtY2Q2Y2ZiMzJhYzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo++7vNCPutC8YbeNLl9SU6EUC8e27q+yHV9r
D/0olaa6MulA77TwPIpFdM7SCqIijAkaa3FjqNYlTHFTig4Z3KshSWikrsaMZzPl
U5GW2rrsfPXEXxzL7rMWII7F9Kzuunf08/6TPq8w+48m8CDv/EpBVIWDPssj3xMF
WH8Sv2wFOUq5caFBwTnUIYmgD02debcMsfZ0WTScydZ67921mucm51IApGzTlsLE
l02kB3vhVeyIMzP/1azLBXU3zSm8KVVQmoS7aPuuy5C2O9t2EDkYL2MeWhM/p2Rz
e/W2Lm6JrpGIGQU6U09+kXEFCCn6M562LHRbkvdKEY6A/+iU3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtzlpo5/LjZoNWbrHER2GBZ0izqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvN2E5ZWYzNDctOGIwOS0z
YjY3LTg4ZjUtZWVkODZlYmQ3N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwOxEIFZXqvP9iu8dkQ/QZQQi2y4Y7vMlRcwGteO3nOXDKAu4POUbsX
lv/4fz1xi9E41oPRq8qZhOfonpB2GhVfUHu7N5CC4yjxRzX6zjckpgmDmfbdvIcp
2mt+NJ64avgs3RKibbbI1lfy6I3s9Xi1agWPB/2ueIrU83lpX9AOv78Mjspx7LKU
8N4edL8Vhn3jlCmGkggrK4aY6JUgztVJFriuoYmVYt4AcwyyGONk/16zDxui0A+P
dWDKRFnfQcOa/c1Lh0VN8L90zlf/xTUoCPw/zl0yvSLrqPh1AxCWQSPUvXerEIIp
4CNW0jJYUEse3wNyJDlspaH4mhQAaqs=
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:13 2026 by rpki-client