
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
File: 0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa (raw, json)
Hash identifier: mTi0EeK5BhbhGtQUUNJ4diB3BgpHS8/TK9qL995OnPc=
Subject key identifier: 89:C6:20:DD:D9:B9:C2:32:38:2F:41:4E:77:36:CA:60:6E:87:D2:56
Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial: 010D0C9F4328584D0D4269BA45C7FC0EBEDA1AB0
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 208889
IP address blocks: 206.168.135.0/24 maxlen: 24
2602:fbd9:ff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:69:ba:45:c7:fc:0e:be:da:1a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=1a0fc81b-87ec-4a86-ba1d-0fc94d3b4839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:ac:9d:9b:cc:6c:47:38:b8:dc:bb:d0:f9:
1e:54:e7:08:3c:19:df:e2:ab:5c:90:73:70:4d:ef:
01:10:e4:d6:0c:0e:3f:a5:e9:5d:3a:ee:7c:52:65:
c1:bc:04:56:87:6f:37:8e:98:00:6b:20:92:f5:79:
d0:d9:c5:69:c6:4a:08:30:9e:5c:24:95:7e:d9:7f:
f3:7b:a0:59:12:d8:da:5e:2e:73:12:10:cb:9e:d2:
de:70:55:fe:d7:38:cc:85:78:f4:ef:44:bb:83:87:
e7:7f:cc:21:10:2d:04:f8:6b:7e:bc:1b:46:61:e8:
e5:3b:60:a4:a1:dd:33:e7:61:c9:f8:b0:d2:7f:4c:
b3:7a:f3:c7:cd:a4:98:ec:b5:b8:f9:cc:e1:4e:c9:
cf:98:aa:34:a7:23:73:95:9f:00:a6:c0:17:58:66:
92:d2:bb:96:a2:d7:05:2d:84:34:fe:84:f7:6e:9d:
f7:14:2f:9d:cc:80:8d:c4:16:c1:0c:55:01:bb:5c:
56:ee:72:75:2e:ed:52:f8:d4:55:f6:a8:4d:9d:7f:
e3:9f:29:97:02:30:01:68:72:8e:8f:0b:e3:d2:75:
d0:7f:7d:48:79:a1:6e:4a:56:56:9d:16:68:b5:48:
86:bb:5b:da:85:e1:f3:23:45:a6:bc:a1:f2:33:e4:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:20:DD:D9:B9:C2:32:38:2F:41:4E:77:36:CA:60:6E:87:D2:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
X509v3 Authority Key Identifier:
keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.135.0/24
IPv6:
2602:fbd9:ff0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:be:a2:7a:3b:25:6c:30:9e:4a:1f:73:20:63:af:ee:1e:a6:
b2:b0:b4:a7:f9:32:e4:89:e0:18:ed:de:8e:7c:c5:72:81:0f:
84:85:d8:b3:86:8e:39:fd:12:df:17:bb:b0:f7:01:03:b8:35:
f7:bf:76:1d:ec:7a:d0:b5:91:0e:c6:15:54:05:18:28:7f:37:
40:89:62:ac:10:4e:3e:0c:5b:79:3c:95:89:35:67:98:2d:b7:
cb:f2:ec:88:26:82:16:3d:a6:54:17:ce:0c:ac:9d:eb:0d:46:
f2:35:a6:0c:9a:4e:5c:f6:30:bb:07:8f:1d:27:47:8e:e5:13:
37:de:46:59:4d:9b:23:b2:c3:49:70:9e:c6:bc:22:05:22:c6:
f8:a9:cb:2e:4b:d2:9f:24:64:cd:4f:d4:65:78:57:22:3f:4c:
ae:b4:b6:c0:83:9d:3d:07:6f:ca:70:37:1e:eb:4a:68:3e:d8:
57:5a:c4:a2:3f:27:4f:d9:80:6d:6c:81:e7:7a:0c:c3:15:94:
5d:2a:d7:0e:a8:4a:e1:59:16:41:0d:25:6f:10:17:52:e1:2f:
d4:4e:8a:79:c2:f8:92:d2:a1:71:91:ae:ae:6b:72:0d:b3:9d:
72:28:36:b2:22:d5:7f:1f:11:15:fc:ac:af:de:0e:d2:51:ac:
2f:37:63:86
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0NQmm6Rcf8Dr7aGrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl
Njc2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
MWEwZmM4MWItODdlYy00YTg2LWJhMWQtMGZjOTRkM2I0ODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyWsnZvMbEc4uNy70PkeVOcIPBnf4qtckHNw
Te8BEOTWDA4/peldOu58UmXBvARWh283jpgAayCS9XnQ2cVpxkoIMJ5cJJV+2X/z
e6BZEtjaXi5zEhDLntLecFX+1zjMhXj070S7g4fnf8whEC0E+Gt+vBtGYejlO2Ck
od0z52HJ+LDSf0yzevPHzaSY7LW4+czhTsnPmKo0pyNzlZ8ApsAXWGaS0ruWotcF
LYQ0/oT3bp33FC+dzICNxBbBDFUBu1xW7nJ1Lu1S+NRV9qhNnX/jnymXAjABaHKO
jwvj0nXQf31IeaFuSlZWnRZotUiGu1vaheHzI0WmvKHyM+RcwwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFInGIN3ZucIyOC9BTnc2ymBuh9JWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh
OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvMGQ4ZTY3ZjAtYjI5Yi0z
YmM5LTk2NzEtOGYzYTE3OTU1NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2
YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj
ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw
MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqiHMA8E
AgACMAkDBwQmAvvZD/AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIL6iejslbDCeSh9zIGOv7h6msrC0p/ky
5IngGO3ejnzFcoEPhIXYs4aOOf0S3xe7sPcBA7g19792Hex60LWRDsYVVAUYKH83
QIlirBBOPgxbeTyViTVnmC23y/LsiCaCFj2mVBfODKyd6w1G8jWmDJpOXPYwuweP
HSdHjuUTN95GWU2bI7LDSXCexrwiBSLG+KnLLkvSnyRkzU/UZXhXIj9MrrS2wIOd
PQdvynA3HutKaD7YV1rEoj8nT9mAbWyB53oMwxWUXSrXDqhK4VkWQQ0lbxAXUuEv
1E6KecL4ktKhcZGurmtyDbOdcig2siLVfx8RFfysr94O0lGsLzdjhg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:09 2026 by rpki-client