
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0fd87a3-5de6-3cc4-8ca1-271331c01b1a.roa
File: d0fd87a3-5de6-3cc4-8ca1-271331c01b1a.roa (raw, json)
Hash identifier: 5ex3yQ4A30vKnh5W7o6cuEwErEEzwJitnB8KWwTejok=
Subject key identifier: 4C:94:36:29:B0:1F:54:01:86:0B:36:90:DD:45:19:21:76:C1:E8:C6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D492A4E9155E6297A6F248D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0fd87a3-5de6-3cc4-8ca1-271331c01b1a.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 396614
IP address blocks: 198.17.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:4e:91:55:e6:29:7a:6f:24:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=70e60521-ebf4-4bf9-977a-53a3d52fbbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:bd:15:d7:1e:06:9d:37:d4:92:36:2a:47:
4a:e6:75:6e:e5:28:3c:79:7f:69:cc:b5:24:43:f5:
11:a8:0e:49:40:68:1d:c8:06:5c:da:08:1d:aa:96:
51:ed:a6:23:75:9b:35:9f:43:87:cf:bd:4a:5d:ca:
e2:c4:ca:73:2f:98:b3:83:08:77:61:3e:16:cc:d4:
25:55:66:cc:75:d0:d5:d2:1e:eb:8c:eb:5a:9e:00:
fc:0a:33:86:04:a2:bb:0b:cd:e6:0e:57:d2:83:3d:
9d:96:7b:fa:69:21:3b:91:13:6b:2d:4c:5e:ad:89:
a6:cf:a6:dc:76:ed:99:d4:05:5f:04:77:2f:df:3e:
f2:00:e3:3b:6f:ba:64:38:21:2b:b4:da:25:9b:ee:
e5:a4:e1:ac:d2:f4:75:75:16:45:45:0c:9d:18:da:
dc:7b:f9:32:74:2d:e8:f3:4f:a0:8c:8f:06:38:22:
e8:bc:b2:39:f7:83:0b:bd:3b:5b:42:0d:9f:8c:ca:
55:2a:d8:c5:5c:9f:a0:b1:88:fe:eb:58:7f:f1:73:
32:d1:c4:42:41:1b:86:6f:ef:61:e5:8b:50:2d:05:
b5:04:24:52:fa:c6:0b:97:dc:3c:07:6c:17:e8:14:
90:97:8f:de:4f:ff:7e:cf:1a:7d:ee:05:93:ae:de:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:36:29:B0:1F:54:01:86:0B:36:90:DD:45:19:21:76:C1:E8:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0fd87a3-5de6-3cc4-8ca1-271331c01b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:f0:f5:a4:6b:3a:e8:da:ed:7b:2e:ce:33:1e:cd:27:e3:1a:
b3:36:79:13:87:73:90:34:34:a3:8c:b3:7d:9f:4b:d1:63:37:
eb:1f:67:9a:20:31:d6:ec:2d:a1:93:eb:d6:17:68:02:3f:29:
36:85:dc:7a:0c:51:55:6a:36:25:3a:c0:79:0d:6f:ed:7c:e5:
93:20:0d:a8:bc:a4:6d:53:1d:52:53:74:9d:81:ef:24:3b:ff:
1c:90:0d:10:c4:52:36:ac:b7:9f:c8:2e:e4:12:58:6a:22:5c:
e8:ca:f8:7b:62:88:65:10:6d:2e:c9:14:57:d5:32:80:29:1d:
7c:fc:af:33:95:d4:af:80:27:a4:0e:b1:6e:a5:81:b6:2e:29:
1f:0f:37:73:03:1c:60:44:38:cd:46:51:b5:ee:8c:6d:88:f0:
2e:5e:eb:b4:b3:e3:29:63:f9:3d:d0:b1:26:53:c2:57:85:ce:
6b:f6:7b:52:1d:d7:cb:35:a4:27:81:44:b8:c9:36:35:9f:68:
05:d2:b2:64:5f:ca:79:17:a3:49:a1:07:2e:e8:f5:99:d6:85:
a5:44:a9:ed:76:5b:e5:81:b6:1a:2b:26:c6:02:76:ec:54:56:
08:95:f6:9d:1a:aa:46:41:b4:3a:31:4b:82:20:bf:e8:02:71:
c9:5d:94:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKk6RVeYpem8kjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
NzBlNjA1MjEtZWJmNC00YmY5LTk3N2EtNTNhM2Q1MmZiYmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN69FdceBp031JI2KkdK5nVu5Sg8eX9pzLUk
Q/URqA5JQGgdyAZc2ggdqpZR7aYjdZs1n0OHz71KXcrixMpzL5izgwh3YT4WzNQl
VWbMddDV0h7rjOtangD8CjOGBKK7C83mDlfSgz2dlnv6aSE7kRNrLUxerYmmz6bc
du2Z1AVfBHcv3z7yAOM7b7pkOCErtNolm+7lpOGs0vR1dRZFRQydGNrce/kydC3o
80+gjI8GOCLovLI594MLvTtbQg2fjMpVKtjFXJ+gsYj+61h/8XMy0cRCQRuGb+9h
5YtQLQW1BCRS+sYLl9w8B2wX6BSQl4/eT/9+zxp97gWTrt5PywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyUNimwH1QBhgs2kN1FGSF2wejGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBmZDg3YTMtNWRlNi0z
Y2M0LThjYTEtMjcxMzMxYzAxYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKTw9aRrOuja7XsuzjMezSfjGrM2eROHc5A0NKOMs32fS9FjN+sfZ5og
MdbsLaGT69YXaAI/KTaF3HoMUVVqNiU6wHkNb+185ZMgDai8pG1THVJTdJ2B7yQ7
/xyQDRDEUjast5/ILuQSWGoiXOjK+HtiiGUQbS7JFFfVMoApHXz8rzOV1K+AJ6QO
sW6lgbYuKR8PN3MDHGBEOM1GUbXujG2I8C5e67Sz4ylj+T3QsSZTwleFzmv2e1Id
18s1pCeBRLjJNjWfaAXSsmRfynkXo0mhBy7o9ZnWhaVEqe12W+WBthorJsYCduxU
VgiV9p0aqkZBtDoxS4Igv+gCccldlMI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:49:52 2026 by rpki-client