
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa
File: 5d5e9cfa-65df-3536-bd71-8854db468e18.roa (raw, json)
Hash identifier: lfo5tis/4gDy/4NIKs13+Gi2G0UgMRmo2CqWCazzdGA=
Subject key identifier: 8B:18:26:DA:43:A0:36:82:FB:CE:F2:BF:80:C2:01:6A:FF:19:15:D9
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584D091266F49D5E22B1BB41CB80
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 13536
IP address blocks: 216.59.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:66:f4:9d:5e:22:b1:bb:41:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=9b0ee9f2-5744-443a-844a-2fdcbaa85ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:35:b4:4b:ae:aa:35:45:9b:51:87:bb:79:
a8:5c:00:08:e1:68:4e:c6:91:8f:4a:85:35:79:a3:
1d:7d:7f:8f:d2:69:e3:39:b0:de:c5:b7:29:d5:e9:
b0:75:c4:a1:12:bf:91:c4:dd:43:1d:30:80:5b:e7:
e4:40:cd:52:95:43:aa:a4:2c:0b:d7:2d:42:99:20:
db:6b:1d:40:af:50:b1:79:5d:f3:80:a3:26:b1:53:
4c:6e:9b:ca:19:5c:07:d1:c3:4b:07:67:fe:3d:15:
9b:86:5e:43:21:56:9c:47:1e:19:79:15:67:52:4e:
63:08:c6:11:dc:01:46:75:e6:06:ea:b8:17:a5:90:
f4:49:f7:97:98:43:35:ea:27:33:36:cc:73:94:ac:
a2:c5:3a:6a:d1:91:42:8f:f9:bf:ff:06:23:73:5e:
33:de:f2:96:63:8f:62:eb:22:c6:4a:cb:20:ee:8a:
2e:a1:f4:4c:bd:56:20:64:26:d7:28:53:9c:44:f8:
47:25:76:2e:48:49:60:c8:13:1c:f3:f4:db:81:dc:
2f:b3:28:0f:72:0e:9d:7b:74:cd:80:6f:2e:d6:eb:
79:d7:31:08:6c:0e:e5:3f:f9:eb:f4:07:38:e7:18:
23:1d:5c:3a:24:3c:1f:13:b7:6b:6c:13:07:5a:44:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:26:DA:43:A0:36:82:FB:CE:F2:BF:80:C2:01:6A:FF:19:15:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.59.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:16:72:47:1c:28:81:bc:aa:ed:02:25:5b:2a:0e:ee:ee:c2:
e2:b0:23:7e:2e:46:ae:e1:69:aa:4f:56:05:be:b0:e7:aa:70:
f5:78:76:13:21:5a:50:a4:30:2e:1b:ca:2e:e0:06:01:7e:9b:
ea:39:9f:66:96:52:1d:17:9b:12:59:11:3b:21:6b:4a:a7:cd:
6e:51:68:a0:2c:d6:5c:ad:a3:65:2b:af:1f:a1:06:51:a4:68:
fd:c6:00:60:00:25:8b:48:8b:35:8c:7e:d4:48:24:e3:af:80:
be:a6:26:52:b3:0d:64:f6:df:10:da:ce:63:76:2f:9f:8a:ec:
19:5f:20:86:d5:0d:a1:a2:be:7b:48:d2:22:1c:50:71:35:34:
3b:77:c0:1d:54:e5:ab:06:5d:68:c2:20:12:bb:4e:a7:72:71:
fa:88:9c:5a:79:97:54:08:e0:fc:35:95:fe:13:b6:ab:1e:bc:
f2:32:0a:e9:7e:33:50:12:f4:2a:d4:13:ac:7e:88:bf:68:6e:
7b:e9:55:9b:a9:d7:dc:52:65:e2:6b:41:fb:dd:37:64:b9:5d:
04:0f:d5:ed:62:e3:66:52:63:dc:c4:bd:a7:0d:2e:40:30:0f:
cc:79:11:11:98:08:da:dc:87:0e:62:b5:80:11:8f:cc:aa:6d:
f4:57:36:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmb0nV4isbtBy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
OWIwZWU5ZjItNTc0NC00NDNhLTg0NGEtMmZkY2JhYTg1Y2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjus1tEuuqjVFm1GHu3moXAAI4WhOxpGPSoU1
eaMdfX+P0mnjObDexbcp1emwdcShEr+RxN1DHTCAW+fkQM1SlUOqpCwL1y1CmSDb
ax1Ar1CxeV3zgKMmsVNMbpvKGVwH0cNLB2f+PRWbhl5DIVacRx4ZeRVnUk5jCMYR
3AFGdeYG6rgXpZD0SfeXmEM16iczNsxzlKyixTpq0ZFCj/m//wYjc14z3vKWY49i
6yLGSssg7oouofRMvVYgZCbXKFOcRPhHJXYuSElgyBMc8/TbgdwvsygPcg6de3TN
gG8u1ut51zEIbA7lP/nr9Ac45xgjHVw6JDwfE7drbBMHWkT/5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsYJtpDoDaC+87yv4DCAWr/GRXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNWQ1ZTljZmEtNjVkZi0z
NTM2LWJkNzEtODg1NGRiNDY4ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcWckccKIG8qu0CJVsqDu7uwuKwI34uRq7haapPVgW+sOeqcPV4dhMh
WlCkMC4byi7gBgF+m+o5n2aWUh0XmxJZETsha0qnzW5RaKAs1lyto2Urrx+hBlGk
aP3GAGAAJYtIizWMftRIJOOvgL6mJlKzDWT23xDazmN2L5+K7BlfIIbVDaGivntI
0iIcUHE1NDt3wB1U5asGXWjCIBK7TqdycfqInFp5l1QI4Pw1lf4TtqsevPIyCul+
M1AS9CrUE6x+iL9obnvpVZup19xSZeJrQfvdN2S5XQQP1e1i42ZSY9zEvacNLkAw
D8x5ERGYCNrchw5itYARj8yqbfRXNsI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:11 2026 by rpki-client