
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa
File: 04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa (raw, json)
Hash identifier: GaOd40aYSkWZGjTnjejm8toCAqhcsVeMRWslWRt20Jg=
Subject key identifier: 4A:00:68:E7:14:DF:78:8E:D7:80:A8:D5:1A:51:25:DF:C9:40:D3:1A
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F4328584D2BDA06DFFBDB38E295366680
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 16509
IP address blocks: 209.54.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:06:df:fb:db:38:e2:95:36:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=fdcffda8-abad-4a83-84c0-024d6205ebea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:bf:a5:87:ba:3f:de:ce:fe:2e:0f:4a:bd:
a6:0b:d9:33:9e:3d:d5:e4:44:fb:78:66:12:37:a1:
ca:0c:f9:80:39:89:fd:48:a5:ce:87:43:97:47:1d:
6a:b2:a0:ad:a9:57:42:56:79:ce:f3:a2:ac:85:50:
81:08:89:f3:ef:51:61:16:1f:e8:a9:66:1d:5d:a2:
97:49:94:55:07:e4:22:af:e2:64:50:28:b6:65:f1:
35:de:bc:74:99:25:f6:a6:df:1a:ae:39:57:d7:ec:
3a:af:c3:6c:06:47:47:e3:3d:36:cf:c1:c1:aa:bd:
3f:fa:ac:27:9f:d0:ef:f4:b3:ad:42:1f:ab:4b:2e:
5e:7e:af:3c:25:f0:a2:5f:22:c3:72:13:6f:75:06:
29:6f:28:b9:fd:cd:60:28:1d:22:38:52:69:a0:80:
fb:df:d2:d9:53:21:bc:9e:df:54:6c:c2:d8:f0:eb:
80:f5:e5:10:c0:ac:10:3c:ed:4a:70:aa:ca:f6:38:
c3:b5:70:2b:20:f0:50:7d:22:36:e4:de:85:7e:16:
89:78:21:3d:4f:ea:5d:81:1e:15:df:5a:cc:54:30:
bb:48:bd:21:b3:cf:fd:87:72:16:2b:6e:20:ad:ad:
e5:60:cc:17:d1:aa:a2:6c:c3:54:6b:1e:6e:36:7a:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:68:E7:14:DF:78:8E:D7:80:A8:D5:1A:51:25:DF:C9:40:D3:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.54.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:1a:79:86:3f:e9:c1:70:41:44:80:68:00:66:e5:81:36:00:
14:55:04:66:9c:bc:96:ab:e4:08:15:c3:2c:5b:50:85:5b:b7:
12:90:89:fd:3e:dd:a0:ee:1c:bd:b9:4b:6e:26:39:5d:cb:b5:
c0:7b:0b:cd:a9:fe:44:ba:05:6e:4d:dc:64:4a:fb:98:7d:c2:
e1:a7:cc:18:47:53:96:e4:7e:b2:75:88:cf:82:69:3c:d3:d7:
d3:0b:ac:7e:d0:bc:01:08:89:b0:d3:a5:5d:a0:ae:55:f5:6a:
75:60:29:93:8a:5a:7c:73:8e:46:a3:da:a8:38:e8:50:ab:b0:
a6:38:4a:05:7e:34:69:80:32:7f:cb:e2:cb:a2:0a:a1:41:09:
6e:c3:8f:2c:38:58:6c:13:00:3a:a5:bb:8a:4a:c3:53:d4:11:
76:0d:36:f8:a7:22:8e:a1:8c:b6:7e:23:56:37:24:d7:5e:e5:
b0:d3:0f:ea:8c:f4:72:85:a4:00:29:22:1a:0c:a8:d1:4d:5e:
d7:b9:7a:10:c7:2b:cd:0a:70:5c:28:79:f8:af:65:af:47:83:
78:1d:42:64:24:7d:04:79:97:ce:81:9c:ca:ea:0d:e0:24:14:
9c:1f:e5:ab:e2:27:99:e4:87:53:4e:de:d5:f6:62:45:12:c6:
dd:a8:72:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gbf+9s44pU2ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy
MzRlMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
ZmRjZmZkYTgtYWJhZC00YTgzLTg0YzAtMDI0ZDYyMDVlYmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4a/pYe6P97O/i4PSr2mC9kznj3V5ET7eGYS
N6HKDPmAOYn9SKXOh0OXRx1qsqCtqVdCVnnO86KshVCBCInz71FhFh/oqWYdXaKX
SZRVB+Qir+JkUCi2ZfE13rx0mSX2pt8arjlX1+w6r8NsBkdH4z02z8HBqr0/+qwn
n9Dv9LOtQh+rSy5efq88JfCiXyLDchNvdQYpbyi5/c1gKB0iOFJpoID739LZUyG8
nt9UbMLY8OuA9eUQwKwQPO1KcKrK9jjDtXArIPBQfSI25N6FfhaJeCE9T+pdgR4V
31rMVDC7SL0hs8/9h3IWK24gra3lYMwX0aqibMNUax5uNnoAwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEoAaOcU33iO14Co1RpRJd/JQNMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3
MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMDRmZGMzNzQtZjMyMS0z
YWU3LWFhODktOWRjM2Q0MWZhZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0
MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3
MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh
ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAaeYY/6cFwQUSAaABm5YE2ABRVBGacvJar5AgVwyxbUIVbtxKQif0+
3aDuHL25S24mOV3LtcB7C82p/kS6BW5N3GRK+5h9wuGnzBhHU5bkfrJ1iM+CaTzT
19MLrH7QvAEIibDTpV2grlX1anVgKZOKWnxzjkaj2qg46FCrsKY4SgV+NGmAMn/L
4suiCqFBCW7Djyw4WGwTADqlu4pKw1PUEXYNNvinIo6hjLZ+I1Y3JNde5bDTD+qM
9HKFpAApIhoMqNFNXte5ehDHK80KcFwoefivZa9Hg3gdQmQkfQR5l86BnMrqDeAk
FJwf5aviJ5nkh1NO3tX2YkUSxt2ocnM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:11 2026 by rpki-client