
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
File: 5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa (raw, json)
Hash identifier: mVcHY4tmUr0DXGQ/0gJVW8F7NqE4qrJ2VqauEBhggjM=
Subject key identifier: 67:9E:E9:06:A2:7C:35:78:11:26:D4:17:30:02:2F:A7:44:C9:0B:83
Certificate issuer: /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial: 010D0C9F4328584DC5659133042A96B8204F73C0
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
Signing time: Sat 09 May 2026 01:00:25 +0000
ROA not before: Sat 09 May 2026 01:00:25 +0000
ROA not after: Fri 07 Aug 2026 01:00:25 +0000
asID: 14333
IP address blocks: 199.168.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c5:65:91:33:04:2a:96:b8:20:4f:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Validity
Not Before: May 9 01:00:25 2026 GMT
Not After : Aug 7 01:00:25 2026 GMT
Subject: CN=33ceee4b-36e5-47e6-a45c-49a4030eba86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:2d:d5:67:b1:d8:c8:93:22:a6:1c:e9:ad:
c1:6c:4c:06:80:b6:37:63:04:36:bd:f0:8b:a3:85:
48:6a:f3:84:e1:bd:13:17:9e:a7:57:50:f2:81:42:
74:e0:4c:85:9d:a5:05:24:de:6e:47:82:8e:95:c1:
5f:07:c9:0b:88:d1:40:be:be:0a:e1:d9:a9:9d:fa:
c9:3f:82:f6:16:5b:b5:c5:e4:d6:55:2e:03:55:9d:
0a:54:0a:7b:c8:0b:42:c1:2b:7c:64:5c:b3:a9:3e:
79:62:4b:cd:c5:da:71:d7:ed:bb:cc:e7:7a:70:a3:
76:b7:9b:12:18:ae:51:dd:47:6a:25:bc:67:e3:97:
a1:11:41:e9:2e:e2:0f:ac:55:14:9b:04:c7:63:83:
79:7b:bf:b2:4c:08:47:0c:d4:be:c9:f7:c9:51:11:
66:82:a7:62:a4:50:92:25:77:7c:f6:52:19:72:99:
22:7d:8b:bf:92:3a:f7:26:29:84:f6:fe:7e:5d:75:
c8:db:09:a8:01:b3:a8:19:f7:3c:f4:07:78:3a:10:
c0:13:11:f3:53:08:7a:c2:f6:9c:bc:5d:08:65:b7:
7f:4c:7c:66:a8:f3:a6:71:fc:1b:0d:88:ca:d8:e3:
88:7d:e0:fd:23:51:58:d6:71:db:55:3c:41:68:74:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:E9:06:A2:7C:35:78:11:26:D4:17:30:02:2F:A7:44:C9:0B:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
X509v3 Authority Key Identifier:
keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:a9:57:83:5b:ba:3b:80:6e:97:88:d8:14:8e:ef:22:a2:e9:
3d:08:b6:19:83:f1:f6:cf:4a:a1:bc:bc:cb:ef:b9:11:a4:aa:
f6:61:f1:63:09:b5:4e:25:b8:fe:80:cc:4c:48:cd:4e:ec:ac:
16:e3:4b:22:69:7f:9b:ab:15:b6:d5:1f:5d:40:e5:06:33:0c:
42:81:5c:00:6f:6f:92:69:1f:67:b1:8f:13:97:a6:d9:1e:4c:
51:44:42:91:34:aa:e8:b3:4b:3f:bc:02:e4:41:a7:9e:62:bc:
c3:fc:5b:bb:ae:68:cb:71:5d:8e:de:e5:6f:bf:5c:18:df:d7:
f6:bd:2b:aa:51:8c:8b:ee:c6:83:ff:62:78:f1:67:1f:bc:50:
41:43:bb:f1:0f:db:5a:ee:e0:9a:15:50:bb:d3:0b:b9:8c:fd:
57:21:4f:dd:37:fa:a2:fe:47:ed:a8:8f:26:c8:ad:54:db:49:
37:02:c7:1e:11:40:9a:09:0f:eb:46:6a:97:55:7a:4e:a6:7c:
e4:94:bc:90:48:d8:aa:05:8f:63:75:77:01:03:00:84:c7:39:
4f:e4:2d:fe:7b:c6:99:11:a3:44:b3:d7:85:db:fe:1d:bf:1d:
53:d2:13:93:15:8f:cf:e8:76:39:ad:1c:72:9b:22:3d:7d:1a:
46:67:6c:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZEzBCqWuCBPc8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYyN2M5MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0NjUz
MzRiMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
MzNjZWVlNGItMzZlNS00N2U2LWE0NWMtNDlhNDAzMGViYTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UMt1Wex2MiTIqYc6a3BbEwGgLY3YwQ2vfCL
o4VIavOE4b0TF56nV1DygUJ04EyFnaUFJN5uR4KOlcFfB8kLiNFAvr4K4dmpnfrJ
P4L2Flu1xeTWVS4DVZ0KVAp7yAtCwSt8ZFyzqT55YkvNxdpx1+27zOd6cKN2t5sS
GK5R3UdqJbxn45ehEUHpLuIPrFUUmwTHY4N5e7+yTAhHDNS+yffJURFmgqdipFCS
JXd89lIZcpkifYu/kjr3JimE9v5+XXXI2wmoAbOoGfc89Ad4OhDAExHzUwh6wvac
vF0IZbd/THxmqPOmcfwbDYjK2OOIfeD9I1FY1nHbVTxBaHR7gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGee6QaifDV4ESbUFzACL6dEyQuDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3
YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNjYzQ2NTMzNGIvNWU5YTY0Y2EtZDljMi0z
YTQwLWIyMTgtNDQyZTJkZWQyMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5MzQtZWJjNi00NGE0LWJi
YTAtYTAzY2M0NjUzMzRiLzhmMjdjOTM0LWViYzYtNDRhNC1iYmEwLWEwM2NjNDY1
MzM0Yi5jcmwwHwYDVR0jBBgwFoAU4bkaPPumXs0F9g4Sq6n1oxOo8WkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNj
YzQ2NTMzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6iAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALupV4NbujuAbpeI2BSO7yKi6T0IthmD8fbPSqG8vMvvuRGkqvZh8WMJ
tU4luP6AzExIzU7srBbjSyJpf5urFbbVH11A5QYzDEKBXABvb5JpH2exjxOXptke
TFFEQpE0quizSz+8AuRBp55ivMP8W7uuaMtxXY7e5W+/XBjf1/a9K6pRjIvuxoP/
YnjxZx+8UEFDu/EP21ru4JoVULvTC7mM/VchT903+qL+R+2ojybIrVTbSTcCxx4R
QJoJD+tGapdVek6mfOSUvJBI2KoFj2N1dwEDAITHOU/kLf57xpkRo0Sz14Xb/h2/
HVPSE5MVj8/odjmtHHKbIj19GkZnbA4=
-----END CERTIFICATE-----
Generated at Wed May 13 11:37:52 2026 by rpki-client