
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa
File: 53e525d4-39a8-3e09-a5e2-111cbb592081.roa (raw, json)
Hash identifier: U+2Kt6rwOIWYdjsEQ1CspIKhpxxLNBKBgGiPdEW/UuI=
Subject key identifier: 79:8D:EA:DB:B6:31:09:96:A1:67:A7:B4:45:2C:D2:84:ED:3C:7B:DF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D2BDA22B21837BCBD11D04640
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 45671
IP address blocks: 172.94.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:22:b2:18:37:bc:bd:11:d0:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=91b4233e-3d42-49c4-bf41-cf8b96c6dd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:5d:4a:ff:a7:6d:26:f0:ed:1a:ea:7f:78:
08:e3:b6:ae:2d:5a:00:5b:13:ca:eb:40:e0:0b:fd:
32:28:16:9e:2b:fa:5b:7a:a9:14:86:1c:0c:61:ae:
3b:e6:93:a5:61:be:75:e9:37:13:25:1b:0c:f1:0f:
fe:10:e3:01:6a:5c:f6:7d:0e:79:86:d9:b0:9e:8b:
ad:d8:c0:12:48:d3:a8:6c:1b:58:f2:d3:65:a7:e7:
14:8c:be:ee:d2:3f:55:6d:b5:7c:99:2f:28:87:58:
f7:0f:74:57:c8:c1:3a:73:4f:e5:fe:70:03:34:9b:
52:d9:e7:b9:a9:08:73:6d:4c:cc:55:a8:c6:3c:31:
64:be:a7:cc:a1:31:b8:51:30:db:63:8b:5c:33:bf:
6e:7e:82:4c:3d:ab:14:c4:2c:f1:5c:70:41:bc:9c:
10:a1:89:bd:8c:62:7d:ba:ff:37:0e:56:6e:f5:06:
99:81:f2:45:87:c9:3c:89:e6:91:f8:ea:34:96:b1:
c3:0b:08:ed:cd:e1:aa:ad:bb:56:bf:b0:de:cf:1d:
8f:3a:e5:c7:cf:c6:ad:db:92:6b:f8:44:db:14:c5:
35:c2:51:20:53:56:3c:cb:f7:c7:3a:d4:3f:d0:5d:
24:8e:5b:3d:34:8b:2c:77:78:08:4e:45:ba:90:71:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:EA:DB:B6:31:09:96:A1:67:A7:B4:45:2C:D2:84:ED:3C:7B:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:d9:f8:0f:44:13:f0:b0:c8:fd:25:bf:a2:62:96:c6:86:43:
01:6a:da:d4:dc:dc:6c:65:c8:f0:e9:19:11:fe:91:08:56:17:
25:26:27:a3:5b:73:86:99:8e:cb:36:ec:80:78:7d:6a:47:9d:
0d:a8:1f:c2:a3:ef:a6:66:33:6c:26:c0:99:7a:85:cd:aa:f8:
39:f3:28:47:c8:7e:a2:99:86:d8:4f:5f:df:04:ad:0d:90:1e:
6a:bc:db:de:5b:f3:b9:d1:98:9e:f8:51:b9:58:f3:8e:d5:b3:
8e:a1:fc:24:fa:c3:b1:db:5a:4e:90:ef:f6:a0:d0:37:da:12:
69:b7:14:be:bd:18:e5:ac:98:9d:46:37:7e:9e:58:9b:49:c1:
5e:d9:28:7e:38:05:df:28:b2:fb:b2:49:81:29:f8:f1:f3:fa:
7d:29:ef:3c:db:95:f0:9c:8c:44:6c:28:7d:99:30:ba:c6:8e:
f9:a3:70:c8:8a:bb:ed:54:84:42:7c:61:80:65:47:af:61:df:
bb:1b:6b:42:82:35:cf:14:a8:a9:15:8a:9b:10:24:7f:50:9a:
4c:be:28:f3:3b:6c:f1:77:eb:03:5d:ae:ac:95:6f:4c:60:2f:
bb:12:26:3d:9a:44:5b:8b:8b:58:13:4e:85:b0:82:04:a7:69:
47:0d:df:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iKyGDe8vRHQRkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
OTFiNDIzM2UtM2Q0Mi00OWM0LWJmNDEtY2Y4Yjk2YzZkZDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt9dSv+nbSbw7Rrqf3gI47auLVoAWxPK60Dg
C/0yKBaeK/pbeqkUhhwMYa475pOlYb516TcTJRsM8Q/+EOMBalz2fQ55htmwnout
2MASSNOobBtY8tNlp+cUjL7u0j9VbbV8mS8oh1j3D3RXyME6c0/l/nADNJtS2ee5
qQhzbUzMVajGPDFkvqfMoTG4UTDbY4tcM79ufoJMPasUxCzxXHBBvJwQoYm9jGJ9
uv83DlZu9QaZgfJFh8k8ieaR+Oo0lrHDCwjtzeGqrbtWv7Dezx2POuXHz8at25Jr
+ETbFMU1wlEgU1Y8y/fHOtQ/0F0kjls9NIssd3gITkW6kHGF0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmN6tu2MQmWoWentEUs0oTtPHvfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTNlNTI1ZDQtMzlhOC0z
ZTA5LWE1ZTItMTExY2JiNTkyMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLZ+A9EE/CwyP0lv6JilsaGQwFq2tTc3GxlyPDpGRH+kQhWFyUmJ6Nb
c4aZjss27IB4fWpHnQ2oH8Kj76ZmM2wmwJl6hc2q+DnzKEfIfqKZhthPX98ErQ2Q
Hmq8295b87nRmJ74UblY847Vs46h/CT6w7HbWk6Q7/ag0DfaEmm3FL69GOWsmJ1G
N36eWJtJwV7ZKH44Bd8osvuySYEp+PHz+n0p7zzblfCcjERsKH2ZMLrGjvmjcMiK
u+1UhEJ8YYBlR69h37sba0KCNc8UqKkVipsQJH9Qmky+KPM7bPF36wNdrqyVb0xg
L7sSJj2aRFuLi1gTToWwggSnaUcN3+s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:02 2026 by rpki-client