
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6da34f7a-4c3e-384b-b842-cf106d0adec7.roa
File: 6da34f7a-4c3e-384b-b842-cf106d0adec7.roa (raw, json)
Hash identifier: tb4vJny9IvdLD4nYjvieHJqI4/xB1aV/haMQuUc/NUk=
Subject key identifier: 76:82:C8:C2:22:5F:1F:EF:6D:8D:75:C1:40:8B:04:DE:42:1F:9C:CC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584E991A5018DFB32AE0CFCABE00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6da34f7a-4c3e-384b-b842-cf106d0adec7.roa
Signing time: Thu 23 Jul 2026 21:00:11 +0000
ROA not before: Thu 23 Jul 2026 21:00:11 +0000
ROA not after: Wed 21 Oct 2026 21:00:11 +0000
asID: 134451
IP address blocks: 172.111.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:99:1a:50:18:df:b3:2a:e0:cf:ca:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 23 21:00:11 2026 GMT
Not After : Oct 21 21:00:11 2026 GMT
Subject: CN=419e2089-e10a-4f5d-b501-f9d6aad99bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:9c:06:27:c7:02:81:de:ec:ca:61:46:3e:
a6:5b:72:73:e4:42:4c:9c:c6:08:b3:4a:1d:49:5e:
50:47:0f:96:e9:2e:ef:a1:57:bc:b3:13:00:30:8b:
40:87:d6:2f:e2:a2:72:68:11:49:b9:d6:94:af:e8:
24:4c:ca:e8:7e:8b:d6:f9:d4:ab:bc:4d:50:a9:f1:
8f:50:83:46:61:90:8c:43:6d:b2:9c:28:d7:ae:9e:
56:8e:ed:3f:13:a1:cc:c5:f5:27:28:92:33:44:9c:
e1:60:ca:c3:dc:60:2f:fd:73:df:29:db:be:30:05:
0c:49:01:fc:7f:4b:1d:16:15:f9:a5:3d:ce:ef:5d:
11:94:fc:e4:78:22:48:ae:b3:b9:40:b6:cf:f7:92:
51:12:34:2d:b5:ee:7e:56:26:e6:0e:4b:dc:af:f5:
ca:5c:79:df:07:92:86:0f:d1:d0:f3:45:85:44:b1:
8c:ab:72:2d:ad:07:c3:66:7d:6b:af:86:97:7c:d8:
e1:7b:dd:0e:3a:3d:b2:35:a2:69:fd:42:72:a0:f6:
fd:28:bb:7d:f4:2c:78:93:9f:f6:e0:5e:6a:91:04:
b5:a0:d7:2a:94:66:dc:57:05:6b:2c:7e:bb:43:01:
b1:4a:51:48:37:26:05:5a:22:61:ab:19:28:96:5c:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:82:C8:C2:22:5F:1F:EF:6D:8D:75:C1:40:8B:04:DE:42:1F:9C:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6da34f7a-4c3e-384b-b842-cf106d0adec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:2f:41:e7:c6:39:1d:78:1b:b2:c5:3c:d4:5f:9a:9c:f9:a8:
c1:56:55:9b:fe:d5:00:a0:97:e0:1f:a2:a4:9a:20:92:6c:16:
dd:f2:43:7d:9e:9d:fc:13:cf:63:70:26:e9:60:d1:70:d1:66:
00:80:6c:e4:bb:c1:7d:c6:a0:66:05:df:22:3f:6d:25:19:c3:
c7:ef:b4:82:c5:17:b8:7a:e2:72:6a:0e:42:47:03:c0:c4:c5:
f6:b5:57:fc:aa:17:81:f9:38:bd:54:4b:7f:6c:f0:91:c8:9d:
cf:34:62:b0:a3:1f:40:20:e0:3f:cf:31:fa:3d:b2:f7:16:10:
77:64:5f:1b:91:26:3a:82:c7:dd:10:c7:dc:9d:7b:59:4c:59:
49:e4:2a:90:14:f8:b9:4d:03:bf:2f:57:1e:9c:bd:2a:94:71:
fd:5d:1a:c2:83:ef:c4:74:68:15:15:be:19:ca:e5:e8:95:b3:
32:16:f3:16:10:5c:5b:bb:f4:4c:1a:88:12:6a:98:85:c9:eb:
b4:cf:0b:c4:db:66:77:ee:35:7c:78:86:a1:03:4a:c5:db:0a:
a4:e7:4d:e7:75:3b:f8:3d:18:de:40:76:2a:5f:5c:f6:9f:65:
a0:99:b5:cd:32:2b:66:81:7a:c4:c2:5f:e5:fc:97:c7:82:1b:
91:e2:2d:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ZGlAY37Mq4M/KvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDcyMzIxMDAxMVoXDTI2MTAyMTIxMDAxMVowLzEtMCsGA1UEAxMk
NDE5ZTIwODktZTEwYS00ZjVkLWI1MDEtZjlkNmFhZDk5YmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hOcBifHAoHe7MphRj6mW3Jz5EJMnMYIs0od
SV5QRw+W6S7voVe8sxMAMItAh9Yv4qJyaBFJudaUr+gkTMrofovW+dSrvE1QqfGP
UINGYZCMQ22ynCjXrp5Wju0/E6HMxfUnKJIzRJzhYMrD3GAv/XPfKdu+MAUMSQH8
f0sdFhX5pT3O710RlPzkeCJIrrO5QLbP95JREjQtte5+VibmDkvcr/XKXHnfB5KG
D9HQ80WFRLGMq3ItrQfDZn1rr4aXfNjhe90OOj2yNaJp/UJyoPb9KLt99Cx4k5/2
4F5qkQS1oNcqlGbcVwVrLH67QwGxSlFINyYFWiJhqxkollzRZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaCyMIiXx/vbY11wUCLBN5CH5zMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNmRhMzRmN2EtNGMzZS0z
ODRiLWI4NDItY2YxMDZkMGFkZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcvQefGOR14G7LFPNRfmpz5qMFWVZv+1QCgl+AfoqSaIJJsFt3yQ32e
nfwTz2NwJulg0XDRZgCAbOS7wX3GoGYF3yI/bSUZw8fvtILFF7h64nJqDkJHA8DE
xfa1V/yqF4H5OL1US39s8JHInc80YrCjH0Ag4D/PMfo9svcWEHdkXxuRJjqCx90Q
x9yde1lMWUnkKpAU+LlNA78vVx6cvSqUcf1dGsKD78R0aBUVvhnK5eiVszIW8xYQ
XFu79EwaiBJqmIXJ67TPC8TbZnfuNXx4hqEDSsXbCqTnTed1O/g9GN5AdipfXPaf
ZaCZtc0yK2aBesTCX+X8l8eCG5HiLUk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:52 2026 by rpki-client