
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/6049393e-96ff-342e-9b7e-005e1de06ae3.roa
File: 6049393e-96ff-342e-9b7e-005e1de06ae3.roa (raw, json)
Hash identifier: I4GrhzB3r16Ayhcp97rVZ+O7mjJmjfJmrAkeh1zKe6A=
Subject key identifier: A4:60:D8:A2:42:7E:F0:9E:3F:B5:DF:26:4F:28:69:17:DA:69:3B:99
Certificate issuer: /CN=537b7005-fa22-4089-a512-a57cb14d03e0
Certificate serial: 010D0C9F4328584F4972C36E609EDBA345974B20
Authority key identifier: 47:BA:86:1C:A9:1C:3A:DA:42:72:F1:EA:7B:75:65:8B:60:18:AF:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/6049393e-96ff-342e-9b7e-005e1de06ae3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 23.146.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:c3:6e:60:9e:db:a3:45:97:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537b7005-fa22-4089-a512-a57cb14d03e0
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=489f8916-2127-4925-81d1-68913f5938ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c8:14:2e:7e:f7:64:97:24:ee:52:68:28:d4:
7e:93:78:88:6a:35:10:98:a0:d5:2f:35:3d:03:0f:
b1:91:b8:1e:9e:c1:05:a9:6f:1b:9f:e0:f7:aa:16:
71:e0:df:52:b3:b0:17:03:f2:10:99:7d:a5:82:f1:
a6:2a:05:55:cd:62:35:dc:b2:20:9d:af:d9:45:0d:
45:f2:40:a2:87:f7:fa:46:9b:28:cd:79:07:38:9b:
15:e4:3d:ea:71:08:db:3a:ec:70:f1:04:10:26:03:
1d:09:aa:9f:0d:a1:53:cb:c6:9e:24:de:9a:7e:06:
d7:29:8a:d4:ea:65:88:92:01:77:49:05:3c:97:72:
fe:6b:94:23:68:40:c4:7a:12:d0:4b:be:24:9f:28:
a8:83:6f:a8:15:dc:ab:f4:9e:cc:0f:4f:70:ad:c6:
c9:e6:98:3d:79:bd:fc:1c:a2:91:73:1c:4f:bb:a9:
c8:0d:c9:98:74:15:9e:9d:66:ae:5c:11:46:51:d5:
6a:69:c4:81:15:90:7c:5e:c9:53:46:01:ab:e0:43:
c7:dc:13:5d:56:e6:e6:59:64:12:ef:85:f8:d0:1d:
ac:cf:3e:f6:b1:89:a3:2b:67:78:4a:71:1a:94:73:
9f:bd:ee:6a:7f:a4:d8:bf:40:2a:1f:0d:90:3d:84:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:D8:A2:42:7E:F0:9E:3F:B5:DF:26:4F:28:69:17:DA:69:3B:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/6049393e-96ff-342e-9b7e-005e1de06ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.crl
X509v3 Authority Key Identifier:
keyid:47:BA:86:1C:A9:1C:3A:DA:42:72:F1:EA:7B:75:65:8B:60:18:AF:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:fa:14:79:ea:ad:c4:68:34:fd:69:17:18:89:a2:09:c8:34:
51:12:51:23:5d:fa:13:36:49:5f:e0:9a:75:d9:0b:24:e6:81:
09:ef:d2:54:63:de:37:65:73:bd:47:5f:4f:77:82:80:b9:95:
c0:81:7d:c7:bb:d0:7d:bd:d5:1f:e5:ec:9d:ac:0f:22:62:a6:
06:17:48:e6:50:33:45:ca:76:3e:30:77:da:a2:de:e1:98:81:
02:04:7a:6a:87:d7:4b:8c:3f:f2:cc:5c:87:87:e7:b9:03:12:
fa:13:da:51:f2:b2:fe:e4:1c:90:2d:c7:79:79:45:b2:9e:43:
52:dc:f0:93:73:6a:a6:b5:c1:6d:f9:6f:9c:13:fd:3d:6f:f9:
78:8b:fd:2c:e1:d9:42:c2:b8:49:41:c3:87:a0:7a:42:cc:fa:
b4:28:2d:e0:61:13:06:fb:e8:68:d3:a7:76:48:14:f8:9d:98:
c5:c5:9a:e9:81:80:b2:25:d7:b8:ed:6c:98:0f:9b:6c:52:3c:
91:04:3b:13:f4:2a:e7:b3:c8:92:c7:69:3a:c9:58:5b:99:94:
ad:49:19:db:df:e5:d8:4f:3a:e8:d4:a2:4d:a3:51:9a:39:78:
e3:90:f6:ee:65:01:4b:70:66:5a:45:b6:a7:6a:d0:38:e5:e6:
db:5e:30:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsNuYJ7bo0WXSyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTM3YjcwMDUtZmEyMi00MDg5LWE1MTItYTU3Y2IxNGQw
M2UwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDg5Zjg5MTYtMjEyNy00OTI1LTgxZDEtNjg5MTNmNTkzOGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sgULn73ZJck7lJoKNR+k3iIajUQmKDVLzU9
Aw+xkbgensEFqW8bn+D3qhZx4N9Ss7AXA/IQmX2lgvGmKgVVzWI13LIgna/ZRQ1F
8kCih/f6RpsozXkHOJsV5D3qcQjbOuxw8QQQJgMdCaqfDaFTy8aeJN6afgbXKYrU
6mWIkgF3SQU8l3L+a5QjaEDEehLQS74knyiog2+oFdyr9J7MD09wrcbJ5pg9eb38
HKKRcxxPu6nIDcmYdBWenWauXBFGUdVqacSBFZB8XslTRgGr4EPH3BNdVubmWWQS
74X40B2szz72sYmjK2d4SnEalHOfve5qf6TYv0AqHw2QPYR8FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRg2KJCfvCeP7XfJk8oaRfaaTuZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Mzdi
NzAwNS1mYTIyLTQwODktYTUxMi1hNTdjYjE0ZDAzZTAvNjA0OTM5M2UtOTZmZi0z
NDJlLTliN2UtMDA1ZTFkZTA2YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTM3YjcwMDUtZmEyMi00MDg5LWE1
MTItYTU3Y2IxNGQwM2UwLzUzN2I3MDA1LWZhMjItNDA4OS1hNTEyLWE1N2NiMTRk
MDNlMC5jcmwwHwYDVR0jBBgwFoAUR7qGHKkcOtpCcvHqe3Vli2AYrxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81MzdiNzAwNS1mYTIyLTQwODktYTUxMi1hNTdj
YjE0ZDAzZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5JEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIH6FHnqrcRoNP1pFxiJognINFESUSNd+hM2SV/gmnXZCyTmgQnv0lRj
3jdlc71HX093goC5lcCBfce70H291R/l7J2sDyJipgYXSOZQM0XKdj4wd9qi3uGY
gQIEemqH10uMP/LMXIeH57kDEvoT2lHysv7kHJAtx3l5RbKeQ1Lc8JNzaqa1wW35
b5wT/T1v+XiL/Szh2ULCuElBw4egekLM+rQoLeBhEwb76GjTp3ZIFPidmMXFmumB
gLIl17jtbJgPm2xSPJEEOxP0KuezyJLHaTrJWFuZlK1JGdvf5dhPOujUok2jUZo5
eOOQ9u5lAUtwZlpFtqdq0Djl5tteMJI=
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:08:53 2026 by rpki-client