
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa
File: 49981ea0-1655-3c52-98ab-4de0a45d03b2.roa (raw, json)
Hash identifier: nObe1N+NmuYQYJYwESMutCSp9sDL0WNuedpvr0E9fSk=
Subject key identifier: 33:8A:8F:59:A2:22:8A:8B:A8:FB:AE:5A:B5:78:C4:12:97:38:63:AC
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D0D425218FCACE3C59D04DF00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 21723
IP address blocks: 208.181.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:52:18:fc:ac:e3:c5:9d:04:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=2a2c4075-2332-496b-8378-309a7d4e0ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:f6:98:e4:3a:d1:e9:32:e5:8f:61:ba:c4:
91:ac:b6:ef:a1:26:a2:58:2f:d1:b8:d8:0e:16:72:
7e:a5:31:e9:62:8d:a5:d2:62:22:09:a6:38:db:8f:
72:b1:c7:c4:23:01:2f:f1:0e:1d:56:f4:75:c7:2d:
6a:c0:c6:bf:52:5e:76:43:0a:b5:b1:22:0c:1a:54:
12:f0:33:e9:c1:fa:72:af:85:34:6c:8b:ef:73:51:
7e:31:2e:82:68:e0:1f:b0:89:04:08:7b:42:11:b8:
6f:51:d2:a3:5d:fb:f6:eb:89:23:f4:c7:ec:82:56:
55:cc:9f:ea:e7:67:46:9c:28:81:f5:71:32:59:51:
eb:28:48:38:6c:63:67:c8:26:e4:12:6e:e8:0a:ae:
c0:54:b6:68:69:dd:18:bc:e7:15:99:fe:2d:3b:6b:
04:ee:fb:b1:cc:6c:d4:7b:e8:24:de:59:11:39:1e:
9a:2e:ef:2c:90:4a:a3:10:e5:0c:f5:af:62:a1:93:
7d:f7:ac:c1:e5:d6:ea:36:e5:58:7d:28:ac:5a:2d:
a5:59:0e:2c:2d:b1:db:d4:49:0e:c8:f5:f1:fc:b0:
97:bb:25:55:ec:a6:c4:b0:8f:6b:39:40:1a:c1:5c:
13:c5:96:b3:f1:71:17:b5:c6:c8:b1:f7:ed:f1:e6:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:8F:59:A2:22:8A:8B:A8:FB:AE:5A:B5:78:C4:12:97:38:63:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7c:cd:52:b9:fd:18:db:0f:67:76:47:79:80:ec:32:60:28:
5a:f9:8a:13:47:3d:18:e3:ee:aa:1f:b4:cf:ab:2b:ae:2b:df:
0f:50:43:a5:65:31:e3:c0:fd:31:7a:53:1d:b0:7f:e2:b3:b1:
f9:1a:0a:ab:1d:f0:7a:38:be:38:13:6d:5d:74:0f:5d:c1:e3:
e5:c8:1c:13:80:a7:ad:4e:7e:98:27:60:0a:50:be:c5:02:64:
9d:a7:3b:df:42:19:79:2a:8f:3b:aa:9e:c5:36:d7:11:b8:80:
3e:51:74:0e:5f:0b:05:b5:87:94:96:88:3d:d7:b3:62:5e:27:
bc:83:74:68:ea:22:b7:07:c1:47:5b:32:48:ee:ef:04:12:d6:
76:37:3e:9d:64:fa:67:4d:15:a6:1d:02:03:0e:05:d3:cb:11:
67:12:7a:94:6e:41:1f:d0:8b:53:26:14:f6:56:af:de:b9:41:
8f:4a:73:74:3d:c6:60:38:26:24:f1:10:77:cc:df:29:ea:97:
c2:e8:7f:be:15:4e:9a:69:63:52:c4:91:82:06:d9:7f:26:15:
5d:12:07:fb:92:5d:eb:49:19:80:e5:49:ce:3f:2a:07:67:68:
35:61:a4:3e:56:b2:45:6e:ad:44:35:94:e3:c8:74:07:67:35:
4e:02:e6:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlIY/KzjxZ0E3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
MmEyYzQwNzUtMjMzMi00OTZiLTgzNzgtMzA5YTdkNGUwZmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq72mOQ60eky5Y9husSRrLbvoSaiWC/RuNgO
FnJ+pTHpYo2l0mIiCaY4249yscfEIwEv8Q4dVvR1xy1qwMa/Ul52Qwq1sSIMGlQS
8DPpwfpyr4U0bIvvc1F+MS6CaOAfsIkECHtCEbhvUdKjXfv264kj9MfsglZVzJ/q
52dGnCiB9XEyWVHrKEg4bGNnyCbkEm7oCq7AVLZoad0YvOcVmf4tO2sE7vuxzGzU
e+gk3lkROR6aLu8skEqjEOUM9a9ioZN996zB5dbqNuVYfSisWi2lWQ4sLbHb1EkO
yPXx/LCXuyVV7KbEsI9rOUAawVwTxZaz8XEXtcbIsfft8ebEewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOKj1miIoqLqPuuWrV4xBKXOGOsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDk5ODFlYTAtMTY1NS0z
YzUyLTk4YWItNGRlMGE0NWQwM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEh8zVK5/RjbD2d2R3mA7DJgKFr5ihNHPRjj7qoftM+rK64r3w9QQ6Vl
MePA/TF6Ux2wf+KzsfkaCqsd8Ho4vjgTbV10D13B4+XIHBOAp61OfpgnYApQvsUC
ZJ2nO99CGXkqjzuqnsU21xG4gD5RdA5fCwW1h5SWiD3Xs2JeJ7yDdGjqIrcHwUdb
Mkju7wQS1nY3Pp1k+mdNFaYdAgMOBdPLEWcSepRuQR/Qi1MmFPZWr965QY9Kc3Q9
xmA4JiTxEHfM3ynql8Lof74VTpppY1LEkYIG2X8mFV0SB/uSXetJGYDlSc4/Kgdn
aDVhpD5WskVurUQ1lOPIdAdnNU4C5qw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:08 2026 by rpki-client