
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa
File: a54a8459-0e0e-3ac7-a09c-54965f63560e.roa (raw, json)
Hash identifier: 3KKJ0m+l4J/sDHPsfeNRG8A7p2dTkrtb0KIbcUn/jy0=
Subject key identifier: 7A:A0:55:C0:04:90:70:71:44:AA:63:09:24:D5:0B:DD:A1:C8:7B:AB
Certificate issuer: /CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647
Certificate serial: 010D0C9F4328584D359FFFF9C13E1AF0DA55E040
Authority key identifier: 17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 30562
IP address blocks: 168.100.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:ff:f9:c1:3e:1a:f0:da:55:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=d5872428-442c-445e-ab47-0458a676d0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:86:8d:d4:c2:bd:51:ba:0d:77:82:de:99:
9f:64:73:54:45:c3:0c:ca:aa:b0:b6:81:f5:b0:13:
6a:69:c8:c7:c9:be:4b:14:53:0d:59:8c:4d:57:7a:
18:98:5c:ce:72:fd:5e:18:0b:7f:a8:dd:b5:8f:ef:
50:cf:bf:55:82:c1:b9:4f:6a:43:70:91:19:2c:3a:
af:ff:01:bb:d8:bf:0e:ab:3a:30:bd:0f:7a:f2:9d:
48:99:d9:4d:88:03:fd:5c:20:50:4f:44:a6:6a:db:
61:ec:65:c1:d2:8d:0f:4e:92:d3:5d:fc:34:28:82:
f9:b9:fe:84:f9:fb:17:68:d4:2b:50:73:d1:49:f5:
50:f0:50:06:e2:6f:3b:f6:27:c8:eb:42:17:0c:ef:
0e:ef:26:67:b5:91:54:c6:cd:25:5d:2f:21:64:c8:
0c:8b:fb:7f:7e:cb:56:51:72:f0:0f:3c:b9:09:fd:
4d:c0:59:ad:e7:f2:45:e1:24:ed:62:82:30:1a:e7:
c3:a6:7c:5b:7e:89:44:92:bd:8d:46:40:91:52:38:
56:af:92:14:62:0c:f1:5b:8c:c5:4c:62:09:bc:5e:
b8:6c:7d:03:22:e1:59:d9:5e:90:0b:68:dd:93:9f:
0c:89:d9:a9:2c:43:8a:92:ec:2f:cf:2a:a1:e3:f3:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:55:C0:04:90:70:71:44:AA:63:09:24:D5:0B:DD:A1:C8:7B:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl
X509v3 Authority Key Identifier:
keyid:17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:c5:dc:37:47:81:7c:cd:87:1f:ae:fa:49:f6:79:b5:f0:06:
38:45:32:38:6b:4d:63:69:63:7b:1b:49:9e:ce:00:6c:94:45:
cc:26:89:f1:37:29:88:2d:33:cd:ad:dd:55:16:a0:a8:63:45:
cc:06:8d:3d:85:f9:b3:2c:19:af:ef:f7:00:5d:50:c5:5c:87:
49:7d:d4:fd:61:31:79:57:01:3f:1f:d2:42:f4:58:27:af:ee:
8b:19:45:74:c3:09:02:85:c6:b8:60:c9:ba:70:cb:70:80:4f:
0f:3e:af:02:d8:63:b5:8b:59:fe:29:61:b0:70:50:47:ff:ba:
2a:e6:06:4e:4f:46:13:f0:49:50:7d:f7:16:a8:4a:2e:20:17:
83:aa:a4:8d:33:db:a8:a4:46:83:12:3e:ad:d9:60:93:b4:d1:
60:7c:76:b5:ed:1f:ce:21:8a:d0:a2:2e:24:15:7b:e4:68:a5:
ff:e6:9b:e4:59:8b:87:f7:cf:61:9c:8b:e1:55:ae:7d:64:c6:
c4:14:fd:84:f5:05:98:43:98:80:01:5e:86:0b:02:0d:c4:9a:
91:7f:98:d9:50:44:2f:db:f9:be:35:6e:96:d2:2f:69:0c:17:
75:93:5f:e2:fd:51:ee:10:94:9b:ee:94:6b:b1:23:40:85:a2:
96:07:3a:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n//5wT4a8NpV4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ZiYTNlMTUtM2ZlMS00NjM0LThlM2ItODM4ZTlmMmFl
NjQ3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
ZDU4NzI0MjgtNDQyYy00NDVlLWFiNDctMDQ1OGE2NzZkMGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iqGjdTCvVG6DXeC3pmfZHNURcMMyqqwtoH1
sBNqacjHyb5LFFMNWYxNV3oYmFzOcv1eGAt/qN21j+9Qz79VgsG5T2pDcJEZLDqv
/wG72L8OqzowvQ968p1ImdlNiAP9XCBQT0Smatth7GXB0o0PTpLTXfw0KIL5uf6E
+fsXaNQrUHPRSfVQ8FAG4m879ifI60IXDO8O7yZntZFUxs0lXS8hZMgMi/t/fstW
UXLwDzy5Cf1NwFmt5/JF4STtYoIwGufDpnxbfolEkr2NRkCRUjhWr5IUYgzxW4zF
TGIJvF64bH0DIuFZ2V6QC2jdk58MidmpLEOKkuwvzyqh4/PqVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqgVcAEkHBxRKpjCSTVC92hyHurMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJh
M2UxNS0zZmUxLTQ2MzQtOGUzYi04MzhlOWYyYWU2NDcvYTU0YTg0NTktMGUwZS0z
YWM3LWEwOWMtNTQ5NjVmNjM1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZiYTNlMTUtM2ZlMS00NjM0LThl
M2ItODM4ZTlmMmFlNjQ3L2NmYmEzZTE1LTNmZTEtNDYzNC04ZTNiLTgzOGU5ZjJh
ZTY0Ny5jcmwwHwYDVR0jBBgwFoAUF4osSiJcdbt6e/SwjjBRtyARNSowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJhM2UxNS0zZmUxLTQ2MzQtOGUzYi04Mzhl
OWYyYWU2NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPF3DdHgXzNhx+u+kn2ebXwBjhFMjhrTWNpY3sbSZ7OAGyURcwmifE3
KYgtM82t3VUWoKhjRcwGjT2F+bMsGa/v9wBdUMVch0l91P1hMXlXAT8f0kL0WCev
7osZRXTDCQKFxrhgybpwy3CATw8+rwLYY7WLWf4pYbBwUEf/uirmBk5PRhPwSVB9
9xaoSi4gF4OqpI0z26ikRoMSPq3ZYJO00WB8drXtH84hitCiLiQVe+Ropf/mm+RZ
i4f3z2Gci+FVrn1kxsQU/YT1BZhDmIABXoYLAg3EmpF/mNlQRC/b+b41bpbSL2kM
F3WTX+L9Ue4QlJvulGuxI0CFopYHOoI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:46 2026 by rpki-client