
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa
File: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (raw, json)
Hash identifier: w1Y5qKms+hoPkrH0/eldnkTIrhDafEUJ3NKXGBSYWGk=
Subject key identifier: B3:B8:81:66:7E:15:A6:5E:59:5A:C5:47:CC:94:69:B8:15:54:9C:2E
Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b
Certificate serial: 010D0C9F4328584D4A8FA51A6415E8FEC159E18C
Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 9009
IP address blocks: 162.254.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:a5:1a:64:15:e8:fe:c1:59:e1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=29afaff5-644f-47a5-b3b5-8786303ba51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:2a:79:d1:71:fd:1b:ac:6c:7b:9d:8b:d6:
b8:b5:45:f5:36:f9:7f:d4:4d:a5:7b:ba:f2:9e:4a:
92:2a:cb:46:c6:70:8f:36:bc:5e:d2:9c:43:07:88:
06:27:6c:b6:25:0c:c2:dc:41:4f:f6:e5:40:20:30:
67:ca:b8:a7:e0:d7:66:99:de:36:05:21:da:3c:8a:
59:dd:c8:1c:9e:7b:77:40:49:5c:7b:b6:62:21:97:
ed:12:2c:74:c8:34:b0:1f:82:2a:2d:40:20:63:03:
9e:c4:91:2c:16:11:2e:88:d2:5a:b3:be:fe:07:32:
8b:f9:02:72:5d:e2:9d:aa:75:56:f2:7c:c6:6b:82:
7d:c5:11:88:52:3f:b4:c2:79:06:eb:8c:b8:f2:f1:
5f:8d:6e:b8:9d:e5:3d:8a:e7:1c:c3:da:29:2d:92:
70:94:26:7a:8d:af:1d:c3:61:35:db:4e:00:c5:d3:
63:cc:95:ca:e6:6c:21:38:3b:dd:b1:c4:21:36:59:
88:4b:04:80:0a:1d:10:34:75:6f:f4:1f:e5:af:48:
8d:d4:5b:3b:b9:35:06:f0:54:d9:73:3a:3a:fd:5c:
b9:ba:b2:03:93:79:0a:9b:8e:d3:53:7e:dd:7c:d6:
86:03:ea:25:9c:e4:2c:0a:5d:86:bc:a0:a7:7e:94:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:81:66:7E:15:A6:5E:59:5A:C5:47:CC:94:69:B8:15:54:9C:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl
X509v3 Authority Key Identifier:
keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:69:cd:d7:05:cd:c8:b3:44:6e:47:86:29:fc:02:be:2f:ee:
c1:d0:b8:15:cf:ec:8e:da:36:ca:36:2a:72:c3:3a:c6:7d:ab:
e9:b5:db:67:bb:19:27:f0:ac:87:18:83:46:ec:c8:8b:3e:99:
d6:4e:f3:67:d9:0f:35:5f:54:93:66:bd:69:4a:a9:de:bf:4d:
41:01:18:89:5a:3f:b5:2c:ef:0d:61:f8:86:fb:5a:b5:9e:eb:
0b:0e:c9:98:e7:9c:2e:03:cb:a7:a1:1b:13:13:22:26:6c:b3:
84:eb:06:bb:18:a3:0c:a0:a9:5b:25:8a:83:9e:94:ba:f9:32:
a9:d6:ae:a5:bb:bc:da:5c:0a:20:55:bc:98:c6:74:0f:8f:38:
bd:ce:64:20:be:13:6a:93:f9:bf:59:87:1c:18:bf:0f:9e:45:
83:fc:3a:9a:20:cf:69:89:1f:9b:0e:26:e0:9a:29:91:52:9f:
1d:c3:40:c6:0d:c6:a7:03:6a:ae:58:29:9a:6a:7d:0a:a0:f9:
ca:25:4e:99:d5:fc:ab:9d:4d:38:e9:af:3e:c7:96:b4:80:a1:
a0:b8:bd:3b:be:69:03:ce:76:f1:37:b3:58:bc:9b:71:c1:b3:
ec:e9:7e:5b:a6:53:3a:2a:1b:e2:2e:5c:f2:77:82:b4:8c:18:
8e:20:22:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6UaZBXo/sFZ4YwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2
OTNiMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
MjlhZmFmZjUtNjQ0Zi00N2E1LWIzYjUtODc4NjMwM2JhNTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjEqedFx/RusbHudi9a4tUX1Nvl/1E2le7ry
nkqSKstGxnCPNrxe0pxDB4gGJ2y2JQzC3EFP9uVAIDBnyrin4Ndmmd42BSHaPIpZ
3cgcnnt3QElce7ZiIZftEix0yDSwH4IqLUAgYwOexJEsFhEuiNJas77+BzKL+QJy
XeKdqnVW8nzGa4J9xRGIUj+0wnkG64y48vFfjW64neU9iuccw9opLZJwlCZ6ja8d
w2E1204AxdNjzJXK5mwhODvdscQhNlmISwSACh0QNHVv9B/lr0iN1Fs7uTUG8FTZ
czo6/Vy5urIDk3kKm47TU37dfNaGA+olnOQsCl2GvKCnfpSwjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLO4gWZ+FaZeWVrFR8yUabgVVJwuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk
MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNjhlNGM2M2MtZjNkOC0z
NzYyLWJhMWQtYTAyMDUzYTA2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm
NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk
NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk
Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9pzdcFzcizRG5Hhin8Ar4v7sHQuBXP7I7aNso2KnLDOsZ9q+m122e7
GSfwrIcYg0bsyIs+mdZO82fZDzVfVJNmvWlKqd6/TUEBGIlaP7Us7w1h+Ib7WrWe
6wsOyZjnnC4Dy6ehGxMTIiZss4TrBrsYowygqVslioOelLr5MqnWrqW7vNpcCiBV
vJjGdA+POL3OZCC+E2qT+b9ZhxwYvw+eRYP8Opogz2mJH5sOJuCaKZFSnx3DQMYN
xqcDaq5YKZpqfQqg+colTpnV/KudTTjprz7HlrSAoaC4vTu+aQPOdvE3s1i8m3HB
s+zpflumUzoqG+IuXPJ3grSMGI4gImU=
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:57:48 2026 by rpki-client