
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa
File: 89c763ab-13dd-3b24-8c22-2a785ba3be64.roa (raw, json)
Hash identifier: FHDH2QM2AF5IVCTgxHcVrN+TLJb222yuRrAzlACkMgE=
Subject key identifier: 54:C8:97:A0:A3:18:7C:6B:F9:87:85:6F:0C:80:37:BF:E4:9E:61:B2
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D47C4E560530C902057C8AE40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa
Signing time: Wed 25 Mar 2026 01:00:32 +0000
ROA not before: Wed 25 Mar 2026 01:00:32 +0000
ROA not after: Tue 23 Jun 2026 01:00:32 +0000
asID: 9009
IP address blocks: 172.111.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:47:c4:e5:60:53:0c:90:20:57:c8:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 25 01:00:32 2026 GMT
Not After : Jun 23 01:00:32 2026 GMT
Subject: CN=f47643d2-1be1-4eb7-b966-194953d745a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:a1:3e:d8:9a:dd:b3:ed:6a:72:df:fb:a0:
3f:e7:37:69:a3:9e:1f:2b:7b:db:02:03:2c:8d:6d:
27:80:7d:4b:94:d2:9f:b8:df:d3:12:4c:bb:22:f2:
0b:35:b9:6a:3f:fd:b6:fd:8c:62:34:3a:74:97:ba:
ea:28:d8:f0:f3:13:b9:4d:00:84:c9:4b:cb:cf:fd:
74:ff:99:e7:0a:56:2a:b6:5d:1e:f1:51:02:6b:e7:
b6:da:a4:a9:bb:4d:34:f0:65:44:f6:af:53:ff:21:
97:2c:c5:e8:09:b3:f5:af:4a:e4:05:f1:2a:aa:40:
4a:84:f5:e6:fc:34:1e:8a:78:ba:85:09:04:79:51:
d1:55:20:64:72:fb:22:71:6b:7c:06:90:bc:aa:f4:
40:c4:29:84:e5:10:9d:32:f0:b0:5a:ae:8d:03:7c:
d0:20:2a:ab:4f:28:2e:3d:e9:d2:d9:88:0a:c0:bb:
22:1d:c8:f8:c9:4e:c8:1e:81:85:5a:ef:51:b7:50:
ea:ac:25:69:ee:4e:b9:b6:0c:07:d2:58:11:3c:a5:
9f:83:05:7e:eb:8e:fd:dc:5a:d2:e4:5d:4f:06:06:
04:1e:81:22:2b:e3:74:bd:df:cb:b6:cc:91:81:ab:
bf:4e:2b:e7:5d:03:5c:d6:31:63:c6:5a:55:48:fc:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:97:A0:A3:18:7C:6B:F9:87:85:6F:0C:80:37:BF:E4:9E:61:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ce:62:47:df:fd:28:7c:10:e7:df:33:c1:94:6c:95:f1:fe:
b3:b1:ca:34:37:dc:79:5b:69:95:e4:e8:b8:ae:e1:40:aa:71:
32:35:7c:d7:5d:d0:ff:97:53:b4:bd:36:1e:c4:14:a5:48:52:
84:26:7c:43:5b:98:ad:6a:81:e8:5b:58:21:2a:f3:29:89:4f:
bc:00:8d:43:bf:6d:63:ed:00:94:0f:b6:b7:88:b3:ac:f5:96:
55:02:b2:13:49:ad:3d:8d:c5:b6:75:75:cc:37:bd:95:03:75:
d8:83:a0:30:78:9c:f0:f3:ff:3b:bc:b2:4c:79:64:6a:42:e6:
63:43:c1:17:6f:82:28:82:c6:17:14:aa:c6:1c:88:d8:43:78:
36:d7:f2:f8:4f:8b:9e:e0:cf:7b:7c:58:d5:5b:d6:76:bd:f7:
53:8c:de:8a:d3:46:04:a0:34:fe:19:7b:5b:b3:48:27:41:75:
f0:30:2a:9c:db:b8:a4:6b:81:f9:58:5d:89:a1:c2:3f:f8:1d:
2a:9b:10:c9:23:e0:50:53:3e:0c:00:4b:e4:35:d9:16:1b:44:
fb:a7:df:c5:fa:98:62:11:5f:de:13:f9:20:70:da:9f:86:be:
01:58:2e:71:56:ab:54:2e:32:85:1d:0b:6d:8b:8f:ce:22:d4:
4e:bd:81:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOVgUwyQIFfIrkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
ZjQ3NjQzZDItMWJlMS00ZWI3LWI5NjYtMTk0OTUzZDc0NWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheehPtia3bPtanLf+6A/5zdpo54fK3vbAgMs
jW0ngH1LlNKfuN/TEky7IvILNblqP/22/YxiNDp0l7rqKNjw8xO5TQCEyUvLz/10
/5nnClYqtl0e8VECa+e22qSpu0008GVE9q9T/yGXLMXoCbP1r0rkBfEqqkBKhPXm
/DQeini6hQkEeVHRVSBkcvsicWt8BpC8qvRAxCmE5RCdMvCwWq6NA3zQICqrTygu
PenS2YgKwLsiHcj4yU7IHoGFWu9Rt1DqrCVp7k65tgwH0lgRPKWfgwV+64793FrS
5F1PBgYEHoEiK+N0vd/LtsyRgau/TivnXQNc1jFjxlpVSPwxkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFTIl6CjGHxr+YeFbwyAN7/knmGyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODljNzYzYWItMTNkZC0z
YjI0LThjMjItMmE3ODViYTNiZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzOYkff/Sh8EOffM8GUbJXx/rOxyjQ33HlbaZXk6Liu4UCqcTI1fNdd
0P+XU7S9Nh7EFKVIUoQmfENbmK1qgehbWCEq8ymJT7wAjUO/bWPtAJQPtreIs6z1
llUCshNJrT2NxbZ1dcw3vZUDddiDoDB4nPDz/zu8skx5ZGpC5mNDwRdvgiiCxhcU
qsYciNhDeDbX8vhPi57gz3t8WNVb1na991OM3orTRgSgNP4Ze1uzSCdBdfAwKpzb
uKRrgflYXYmhwj/4HSqbEMkj4FBTPgwAS+Q12RYbRPun38X6mGIRX94T+SBw2p+G
vgFYLnFWq1QuMoUdC22Lj84i1E69gW0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:30 2026 by rpki-client