
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa
File: 2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa (raw, json)
Hash identifier: 6RGU0845OJ4Tx670nvVwKgdObCksw5MSP3Oj8S1eZE4=
Subject key identifier: 67:4B:9D:6F:E5:5D:CB:59:47:C1:CD:03:56:5C:A1:35:65:F9:73:43
Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial: 010D0C9F4328584D2A74EE25360ADFC89C760980
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 33322
IP address blocks: 204.15.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:ee:25:36:0a:df:c8:9c:76:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=619507b9-1135-454c-94c1-56c420973a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:7b:b7:a9:18:fa:d2:33:59:ca:aa:aa:54:
2e:2b:45:0d:3b:98:c6:1c:56:4d:26:95:43:be:d5:
69:5f:71:b9:68:ee:cf:85:4e:4f:52:6c:96:86:af:
57:71:50:17:c9:69:1c:a4:86:c4:89:3c:92:6f:04:
5b:b7:fb:24:3d:a8:fe:24:45:c0:70:dc:cf:27:45:
a0:e7:42:b6:50:ce:63:8e:e1:b2:5c:eb:e2:98:f8:
bf:9f:38:45:76:54:e7:48:e2:a1:d6:84:f4:82:20:
00:c6:2b:97:36:d4:5d:cd:b7:4c:eb:06:22:24:42:
a6:f5:0e:2c:93:19:9c:b9:b5:37:c1:be:29:e6:41:
4c:b0:07:18:d5:4f:76:cc:2f:d4:ac:7a:91:4e:3b:
ac:01:b5:8e:bb:cd:88:18:e9:7e:ea:01:2d:a1:48:
62:4e:bb:03:0f:8e:bc:d8:1a:49:93:e6:96:c8:d9:
50:bd:3f:e3:fc:7f:ef:76:9b:08:e5:2b:6b:6d:9f:
f4:7e:fd:de:7b:f9:a8:29:be:25:36:24:80:6d:b7:
a4:06:6b:ee:f8:df:83:77:94:61:62:ce:c3:e2:4f:
2e:b8:fc:96:70:e9:4f:3f:0f:0c:65:7a:3d:48:dc:
9c:ea:59:e0:33:e6:5e:99:f1:8e:87:65:a3:54:70:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:9D:6F:E5:5D:CB:59:47:C1:CD:03:56:5C:A1:35:65:F9:73:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
X509v3 Authority Key Identifier:
keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:0a:22:a9:f4:38:20:a2:4c:f5:51:16:8a:b3:68:15:e5:58:
c9:f4:f0:43:20:86:85:e7:e4:3b:4f:a6:84:cb:9b:c0:3c:59:
1c:5c:2c:22:64:4e:c0:61:12:f3:f5:6b:3c:ec:81:5e:1d:4f:
91:7f:4d:8f:c2:c8:10:69:73:70:ae:b9:a5:7b:a5:3b:ca:f8:
50:3c:a2:21:86:dc:bb:66:9e:17:9d:36:ef:53:38:26:c0:b0:
98:c6:62:73:13:34:bb:f1:01:93:62:17:5b:fb:6a:f1:7d:cb:
4a:20:e6:c2:d2:ee:d0:bf:b9:d4:ba:10:01:b1:fc:ff:f2:45:
31:26:2e:11:8e:df:46:9f:3a:63:e3:60:57:8d:c9:2c:07:09:
1d:1a:68:27:98:37:c4:32:b2:49:7c:28:3c:38:26:aa:25:ce:
00:f2:34:24:6d:46:db:62:b8:14:f7:45:31:6b:84:1b:d0:db:
8f:0b:7e:75:e1:30:37:f4:df:e2:f6:c8:59:95:a2:cc:4c:53:
93:c9:67:3d:a3:95:e2:8f:1b:2f:6a:b4:0e:f7:80:31:3a:ed:
4b:62:c4:d2:58:93:58:1c:05:e4:d5:55:e6:76:6f:fb:10:aa:
7f:f5:46:d5:8a:12:61:73:61:e0:3e:2a:ec:89:38:6f:4e:56:
14:7c:a9:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO4lNgrfyJx2CYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx
OGJiMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
NjE5NTA3YjktMTEzNS00NTRjLTk0YzEtNTZjNDIwOTczYTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMR7t6kY+tIzWcqqqlQuK0UNO5jGHFZNJpVD
vtVpX3G5aO7PhU5PUmyWhq9XcVAXyWkcpIbEiTySbwRbt/skPaj+JEXAcNzPJ0Wg
50K2UM5jjuGyXOvimPi/nzhFdlTnSOKh1oT0giAAxiuXNtRdzbdM6wYiJEKm9Q4s
kxmcubU3wb4p5kFMsAcY1U92zC/UrHqRTjusAbWOu82IGOl+6gEtoUhiTrsDD468
2BpJk+aWyNlQvT/j/H/vdpsI5StrbZ/0fv3ee/moKb4lNiSAbbekBmvu+N+Dd5Rh
Ys7D4k8uuPyWcOlPPw8MZXo9SNyc6lngM+ZemfGOh2WjVHCEiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdLnW/lXctZR8HNA1ZcoTVl+XNDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj
Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMmZiOTYyOTctMGE4Yi0z
N2VjLWJlM2YtMzBiYTViOGMyYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm
MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5
MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0
OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ8KIqn0OCCiTPVRFoqzaBXlWMn08EMghoXn5DtPpoTLm8A8WRxcLCJk
TsBhEvP1azzsgV4dT5F/TY/CyBBpc3CuuaV7pTvK+FA8oiGG3LtmnhedNu9TOCbA
sJjGYnMTNLvxAZNiF1v7avF9y0og5sLS7tC/udS6EAGx/P/yRTEmLhGO30afOmPj
YFeNySwHCR0aaCeYN8Qyskl8KDw4JqolzgDyNCRtRttiuBT3RTFrhBvQ248LfnXh
MDf03+L2yFmVosxMU5PJZz2jleKPGy9qtA73gDE67UtixNJYk1gcBeTVVeZ2b/sQ
qn/1RtWKEmFzYeA+KuyJOG9OVhR8qT4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:51 2026 by rpki-client