
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901e2de8-abd6-31fe-9cbc-beb65203a112.roa
File: 901e2de8-abd6-31fe-9cbc-beb65203a112.roa (raw, json)
Hash identifier: 6F4HEgrbYgSdlb7xuOGC5HtnZz4XcxsuQnlA3SlI9M8=
Subject key identifier: 58:C6:4D:E8:9E:8A:B2:1A:13:5D:CE:95:DF:EC:8A:19:69:5F:F8:A9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584DB864F64BA0D5071972DE87A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901e2de8-abd6-31fe-9cbc-beb65203a112.roa
Signing time: Mon 04 May 2026 09:13:44 +0000
ROA not before: Mon 04 May 2026 09:13:44 +0000
ROA not after: Sun 02 Aug 2026 09:13:44 +0000
asID: 55154
IP address blocks: 104.250.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b8:64:f6:4b:a0:d5:07:19:72:de:87:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 4 09:13:44 2026 GMT
Not After : Aug 2 09:13:44 2026 GMT
Subject: CN=b95d56c1-72b4-4628-a26b-72e39316aec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:64:95:dd:82:54:c1:3e:4c:2f:b0:9d:38:
f0:5f:ea:0b:ea:b0:be:dd:cc:62:20:d0:d1:ff:75:
a8:06:94:85:1b:26:af:48:87:28:51:20:cb:d4:3f:
b9:c7:3e:62:dc:8c:90:32:4d:ed:4b:3a:81:51:c7:
8e:a8:09:ad:4d:cb:40:9c:20:17:bf:2c:51:1e:cb:
73:fb:13:9e:28:3d:c6:91:80:1d:0d:50:38:01:07:
95:69:05:31:14:a2:e2:1f:66:3c:85:5c:7f:00:69:
0c:b9:41:53:2c:ba:9c:b4:27:5a:6b:24:44:ca:2a:
29:ed:ee:df:d7:1a:a8:6e:27:e8:25:c1:0c:0d:b8:
cc:6e:01:68:f7:79:38:41:80:7f:f7:a1:a6:52:32:
bb:c5:42:b6:45:96:07:72:b3:8b:cf:28:fc:91:f4:
81:d0:ba:94:b1:20:43:70:aa:ae:96:0b:a1:b6:3f:
f5:10:b9:7e:b7:fc:82:57:2a:58:6f:2d:3b:8d:b8:
ac:af:df:64:b1:a1:d5:3b:e0:3a:b1:66:ac:32:b6:
bd:73:0d:78:f4:a8:29:a6:b7:f8:60:3b:d4:08:19:
b0:95:76:5f:da:23:93:37:51:1b:52:7c:bf:3f:50:
53:1e:f5:88:32:7b:9e:18:ec:4d:ed:7b:52:7e:72:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:4D:E8:9E:8A:B2:1A:13:5D:CE:95:DF:EC:8A:19:69:5F:F8:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901e2de8-abd6-31fe-9cbc-beb65203a112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:07:a5:a0:e1:fc:12:6d:c6:66:75:b8:1d:78:f1:6e:e0:1d:
3a:7b:c7:5c:c0:0f:3e:dc:e4:7c:3d:15:1a:fa:e1:f8:14:0e:
73:8a:20:90:3a:99:bf:6f:57:76:45:14:be:c8:9b:97:51:70:
6b:2e:91:63:9b:ef:d5:14:51:57:e6:57:19:52:f9:16:c8:2b:
88:7f:52:b7:a4:b9:88:07:9b:1b:43:c3:a8:81:19:f1:16:24:
b8:c1:75:28:32:95:4c:7e:52:5d:4c:cd:b1:a3:24:9a:03:8f:
b4:18:63:d2:d6:d8:f5:ac:65:81:6d:be:78:ca:fd:3f:ce:e3:
85:f8:0c:23:da:d5:bb:b4:e2:61:fb:c5:b4:0b:57:dd:47:66:
f1:17:23:53:66:9c:13:e7:58:ff:4b:7d:86:9d:55:ff:78:a6:
24:00:34:52:f4:99:55:45:33:68:bd:13:d0:3b:c7:c1:b0:4b:
d0:f8:0f:ac:7d:5d:72:f3:f0:95:64:8f:1e:34:95:a1:00:d2:
23:78:92:f9:d6:d3:fe:c0:42:38:dc:6b:7f:66:2b:03:a3:0f:
71:e4:0e:31:ce:1e:6f:dd:d2:95:65:59:7c:31:54:1d:0a:9f:
03:02:c5:0e:0a:0e:a0:99:37:86:5f:13:66:44:7a:4c:d1:49:
54:a4:94:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE24ZPZLoNUHGXLeh6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDUwNDA5MTM0NFoXDTI2MDgwMjA5MTM0NFowLzEtMCsGA1UEAxMk
Yjk1ZDU2YzEtNzJiNC00NjI4LWEyNmItNzJlMzkzMTZhZWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwFkld2CVME+TC+wnTjwX+oL6rC+3cxiINDR
/3WoBpSFGyavSIcoUSDL1D+5xz5i3IyQMk3tSzqBUceOqAmtTctAnCAXvyxRHstz
+xOeKD3GkYAdDVA4AQeVaQUxFKLiH2Y8hVx/AGkMuUFTLLqctCdaayREyiop7e7f
1xqobifoJcEMDbjMbgFo93k4QYB/96GmUjK7xUK2RZYHcrOLzyj8kfSB0LqUsSBD
cKqulguhtj/1ELl+t/yCVypYby07jbisr99ksaHVO+A6sWasMra9cw149Kgpprf4
YDvUCBmwlXZf2iOTN1EbUny/P1BTHvWIMnueGOxN7XtSfnJ62wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjGTeieirIaE13Old/sihlpX/ipMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxZTJkZTgtYWJkNi0z
MWZlLTljYmMtYmViNjUyMDNhMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkHpaDh/BJtxmZ1uB148W7gHTp7x1zADz7c5Hw9FRr64fgUDnOKIJA6
mb9vV3ZFFL7Im5dRcGsukWOb79UUUVfmVxlS+RbIK4h/UrekuYgHmxtDw6iBGfEW
JLjBdSgylUx+Ul1MzbGjJJoDj7QYY9LW2PWsZYFtvnjK/T/O44X4DCPa1bu04mH7
xbQLV91HZvEXI1NmnBPnWP9LfYadVf94piQANFL0mVVFM2i9E9A7x8GwS9D4D6x9
XXLz8JVkjx40laEA0iN4kvnW0/7AQjjca39mKwOjD3HkDjHOHm/d0pVlWXwxVB0K
nwMCxQ4KDqCZN4ZfE2ZEekzRSVSklLQ=
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:26 2026 by rpki-client