
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa
File: 07010c4c-e7fc-34be-b307-456a7d77aa20.roa (raw, json)
Hash identifier: wsy09iHw/3C4aGul514Hq5a4cPAVtzjLDnUtIA2UDQ4=
Subject key identifier: A8:9B:D7:FE:C7:0E:35:0B:F0:C2:8E:3E:6D:F2:81:56:E4:54:51:01
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328584D2BDA00770C08F6D6F2E6F700
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 33208
IP address blocks: 206.109.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:00:77:0c:08:f6:d6:f2:e6:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=01000cfd-269f-4074-b583-0c64e48e686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:3e:d0:d8:95:1f:bc:bf:9b:86:66:c5:bb:
d2:1c:a4:95:00:b7:aa:f3:a6:a6:40:ec:a2:e3:79:
07:58:9f:d2:7a:e0:00:73:2f:73:be:05:bd:8f:df:
e4:b3:67:e0:8a:6b:11:a4:01:c2:c4:2c:7f:9b:e0:
63:15:b9:01:dc:dc:68:9a:56:b8:72:9e:d1:fe:e8:
80:14:ec:21:fc:91:f9:0a:56:46:5d:fe:ed:81:f6:
19:a9:b6:69:c6:ed:d0:76:f7:3d:c1:c3:7a:c0:75:
37:bd:89:5f:c5:8b:92:f7:0b:10:c0:99:5a:99:e2:
55:0e:90:2b:78:d9:d6:9a:a6:f2:44:e0:b6:47:7d:
f5:fa:16:fe:37:d8:75:23:d9:b1:96:74:9c:40:f0:
93:ea:c3:23:4d:7e:3d:01:68:52:de:d4:71:55:d0:
81:15:02:3a:0a:6d:e0:9d:b1:e0:1e:77:85:71:9d:
12:c6:07:9a:74:b9:b7:8d:21:9e:34:49:65:20:cd:
78:82:95:cf:83:4c:71:8c:19:2a:bc:1a:59:f3:21:
05:9c:89:32:79:c4:7c:34:26:2a:79:9c:63:05:d2:
26:b3:7c:38:c5:0d:c7:89:31:86:b8:18:a8:ca:32:
1f:38:ea:2d:70:51:a6:30:5f:26:05:48:15:68:00:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:D7:FE:C7:0E:35:0B:F0:C2:8E:3E:6D:F2:81:56:E4:54:51:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.109.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:2c:61:70:b5:b8:65:4f:c5:38:44:c2:e9:c5:01:ad:0a:a3:
d4:f7:63:1b:24:71:4c:a9:a6:f5:c9:70:04:68:2c:b5:08:c2:
83:ab:96:39:f2:dd:ab:10:8e:61:09:c4:bc:7f:7c:91:8a:d6:
4e:ae:6e:37:82:d4:9b:94:8d:c9:f0:62:f8:a3:45:39:fe:c4:
aa:f3:93:65:3a:b5:59:85:3f:f5:15:1d:29:75:e1:98:03:9d:
2a:b6:7c:91:ec:c1:ad:91:77:16:d8:1e:b3:36:40:05:f9:92:
fb:02:0c:b0:c8:2a:a4:75:2c:3c:8f:01:1d:34:00:96:8c:6c:
b3:4b:ea:e1:ba:42:f7:76:bd:cc:54:82:6a:31:57:4a:91:f6:
4a:1b:35:e4:b4:d2:a1:bc:12:f4:33:c9:de:b4:88:0e:0b:62:
62:7f:7d:ca:40:a1:c6:d3:db:67:a3:e4:f7:5c:70:53:81:0b:
87:0a:65:f4:84:93:4c:a0:03:29:0d:7a:fa:8b:48:7e:39:c3:
d7:52:0a:ee:34:0a:c1:c5:1b:de:04:34:1d:12:24:ab:57:6f:
ef:37:e6:5b:87:13:28:c7:a8:5e:0a:d1:08:e7:75:5f:ea:1d:
ee:a0:ea:11:b6:03:e6:2b:ab:48:86:85:24:90:0f:b7:81:6e:
16:d1:63:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gB3DAj21vLm9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
MDEwMDBjZmQtMjY5Zi00MDc0LWI1ODMtMGM2NGU0OGU2ODZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIk+0NiVH7y/m4ZmxbvSHKSVALeq86amQOyi
43kHWJ/SeuAAcy9zvgW9j9/ks2fgimsRpAHCxCx/m+BjFbkB3Nxomla4cp7R/uiA
FOwh/JH5ClZGXf7tgfYZqbZpxu3Qdvc9wcN6wHU3vYlfxYuS9wsQwJlameJVDpAr
eNnWmqbyROC2R331+hb+N9h1I9mxlnScQPCT6sMjTX49AWhS3tRxVdCBFQI6Cm3g
nbHgHneFcZ0SxgeadLm3jSGeNEllIM14gpXPg0xxjBkqvBpZ8yEFnIkyecR8NCYq
eZxjBdIms3w4xQ3HiTGGuBioyjIfOOotcFGmMF8mBUgVaAAWdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKib1/7HDjUL8MKOPm3ygVbkVFEBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMDcwMTBjNGMtZTdmYy0z
NGJlLWIzMDctNDU2YTdkNzdhYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzm3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAsYXC1uGVPxThEwunFAa0Ko9T3YxskcUyppvXJcARoLLUIwoOrljny
3asQjmEJxLx/fJGK1k6ubjeC1JuUjcnwYvijRTn+xKrzk2U6tVmFP/UVHSl14ZgD
nSq2fJHswa2RdxbYHrM2QAX5kvsCDLDIKqR1LDyPAR00AJaMbLNL6uG6Qvd2vcxU
gmoxV0qR9kobNeS00qG8EvQzyd60iA4LYmJ/fcpAocbT22ej5PdccFOBC4cKZfSE
k0ygAykNevqLSH45w9dSCu40CsHFG94ENB0SJKtXb+835luHEyjHqF4K0QjndV/q
He6g6hG2A+Yrq0iGhSSQD7eBbhbRY4Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:46 2026 by rpki-client