
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa
File: 4311dda3-f166-334e-9176-878240d2d1dc.roa (raw, json)
Hash identifier: woHoi6/JgMUZQgJArJAirZ7Hc/RQ/EG7RkQXoUMXFr0=
Subject key identifier: F4:23:45:C8:AC:56:ED:CE:2E:B0:32:69:8B:CB:E6:A7:BE:A2:DA:0B
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584D40CA3F3C5A1582DA6E9A4080
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 62610
IP address blocks: 128.1.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:3f:3c:5a:15:82:da:6e:9a:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=31e67629-0c69-4318-b4b1-57c152ad9bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:df:d7:83:6e:fe:cb:1e:c5:55:e5:bd:39:
8b:a6:4f:f1:01:59:cb:99:cb:e5:db:f2:fd:c4:6a:
78:09:23:53:83:89:8d:82:62:12:32:9c:e5:26:84:
cc:27:58:9c:a3:c1:9f:f9:80:b2:5c:8d:eb:60:a3:
43:1a:10:22:d5:bd:32:65:ac:01:69:9b:41:40:5c:
24:b8:f4:d9:4e:ad:26:aa:0f:a8:c1:a3:b0:05:12:
9f:c0:a7:75:62:33:f6:28:b8:fc:fc:6b:76:02:9c:
e9:55:bb:2d:ba:7b:30:11:f5:dc:ea:8c:58:60:5e:
68:1e:bd:88:80:eb:12:91:60:52:72:d1:f0:66:47:
12:34:0c:17:75:ed:f3:e0:68:a8:30:f4:63:f2:d9:
3d:22:e9:2f:98:45:b8:0c:8a:d3:75:f2:a0:6a:30:
8c:1e:8d:9e:48:b7:df:a1:18:c8:79:1d:5c:13:db:
69:f9:a5:fb:d3:15:df:f8:58:31:e9:2a:7c:47:d8:
f8:11:9e:f7:39:ec:79:16:da:d8:19:d4:42:90:0c:
66:44:4d:96:e8:f1:47:b8:ea:af:ce:19:0a:2a:11:
e7:83:0c:fe:61:69:dd:ab:c1:41:b7:94:af:85:e8:
9e:3d:68:ef:2c:33:e1:5f:82:91:00:e7:75:83:dd:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:23:45:C8:AC:56:ED:CE:2E:B0:32:69:8B:CB:E6:A7:BE:A2:DA:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:e2:7c:47:85:43:0e:4d:ae:bf:79:bf:e6:26:ef:8f:c0:fe:
da:cc:91:df:ad:38:b1:a7:6c:3e:64:87:f5:44:c6:94:df:21:
6e:d9:6a:c4:d5:7f:57:1a:e3:f5:16:6f:d5:fd:a3:04:f9:d4:
6b:58:98:f1:f5:e9:b2:fd:7f:f4:9e:59:d1:09:72:44:75:e8:
09:25:f4:90:47:32:be:e7:a1:18:52:14:c6:ab:65:2b:ae:cd:
e5:01:eb:67:c3:7a:1a:fc:b2:c5:1f:65:b8:be:ea:28:f0:a6:
61:17:6b:ef:e3:18:7e:d6:ec:a6:31:7d:92:e9:62:ba:17:d4:
77:04:6c:01:f6:9c:d0:79:f6:8b:65:d1:0d:d3:4e:62:a9:71:
c7:a5:c5:05:bf:f3:63:5d:36:ad:3b:d5:03:9b:e1:11:55:eb:
a5:47:10:0a:3e:dc:cf:4b:38:2f:73:a8:50:c7:14:c0:f4:73:
5b:57:9c:f0:69:ba:5e:cf:f5:17:f6:98:76:06:06:1c:db:2a:
26:d1:81:2a:a2:71:70:a3:de:59:70:97:1e:f6:32:c6:ee:a6:
34:df:12:36:5c:5f:92:9a:9a:f7:61:65:01:0c:38:db:0f:fe:
b4:40:d5:94:00:ba:e3:36:95:ca:0b:f3:4f:60:c3:c2:78:15:
75:c3:0c:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayj88WhWC2m6aQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
MzFlNjc2MjktMGM2OS00MzE4LWI0YjEtNTdjMTUyYWQ5YmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxDf14Nu/ssexVXlvTmLpk/xAVnLmcvl2/L9
xGp4CSNTg4mNgmISMpzlJoTMJ1ico8Gf+YCyXI3rYKNDGhAi1b0yZawBaZtBQFwk
uPTZTq0mqg+owaOwBRKfwKd1YjP2KLj8/Gt2ApzpVbstunswEfXc6oxYYF5oHr2I
gOsSkWBSctHwZkcSNAwXde3z4GioMPRj8tk9IukvmEW4DIrTdfKgajCMHo2eSLff
oRjIeR1cE9tp+aX70xXf+Fgx6Sp8R9j4EZ73Oex5FtrYGdRCkAxmRE2W6PFHuOqv
zhkKKhHngwz+YWndq8FBt5SvheiePWjvLDPhX4KRAOd1g93F/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQjRcisVu3OLrAyaYvL5qe+otoLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNDMxMWRkYTMtZjE2Ni0z
MzRlLTkxNzYtODc4MjQwZDJkMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLifEeFQw5Nrr95v+Ym74/A/trMkd+tOLGnbD5kh/VExpTfIW7ZasTV
f1ca4/UWb9X9owT51GtYmPH16bL9f/SeWdEJckR16Akl9JBHMr7noRhSFMarZSuu
zeUB62fDehr8ssUfZbi+6ijwpmEXa+/jGH7W7KYxfZLpYroX1HcEbAH2nNB59otl
0Q3TTmKpccelxQW/82NdNq071QOb4RFV66VHEAo+3M9LOC9zqFDHFMD0c1tXnPBp
ul7P9Rf2mHYGBhzbKibRgSqicXCj3llwlx72MsbupjTfEjZcX5KamvdhZQEMONsP
/rRA1ZQAuuM2lcoL809gw8J4FXXDDL4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:47 2026 by rpki-client