
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/be38717f-7942-3e78-a331-6212be219ca6.roa
File: be38717f-7942-3e78-a331-6212be219ca6.roa (raw, json)
Hash identifier: qdLZLGrHiVKpwzCMLxF85HhfxbgP+VoNo2ODPIbDpd8=
Subject key identifier: FF:E3:9B:34:CE:18:7F:02:7B:4C:05:99:C5:C9:66:C1:37:90:93:83
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D386A3F963B52830D538E7B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/be38717f-7942-3e78-a331-6212be219ca6.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 33363
IP address blocks: 97.71.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:3f:96:3b:52:83:0d:53:8e:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=f5a3607a-5c67-4cfa-862a-2a18c1499142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:44:92:93:73:5c:0d:f8:5b:46:0c:7b:33:
b5:eb:bc:62:6f:d2:ee:26:03:41:42:5a:25:23:06:
ad:e2:e9:f0:cd:f4:98:c7:f3:82:f4:28:ad:f8:9c:
b0:94:ef:63:5e:8d:09:d5:09:e6:43:c7:39:69:47:
fd:08:26:1b:49:b9:be:3b:df:90:30:a3:21:d0:01:
9b:b5:03:59:7c:e1:65:41:d0:bb:f4:3c:0c:2f:3f:
49:f2:a8:6c:4d:ce:df:5c:fd:7e:f0:67:7f:96:d0:
0d:de:1a:ae:e7:16:41:5e:14:5c:69:5f:79:67:92:
17:9b:c8:02:58:b0:82:d9:38:01:9b:bc:a5:5e:3a:
9f:44:ba:9d:38:5e:19:fa:f7:44:8b:4b:ee:44:3b:
f8:34:c9:7c:af:5b:9a:f4:d3:95:03:a4:6b:41:92:
2b:8e:54:6a:02:06:65:84:0a:02:d2:39:a6:ff:28:
7f:a3:0a:c8:e0:9e:5d:27:70:78:41:3f:b2:2a:01:
56:fc:f0:cc:c5:3f:0f:18:fb:14:38:c7:d4:7b:da:
10:e1:4f:85:10:d1:18:84:1f:af:8a:3f:72:b8:1a:
f9:e4:b2:57:f2:f4:f9:4f:2a:9e:04:27:93:60:43:
cd:b5:9e:88:c8:e5:33:33:a4:f4:87:3d:cd:14:e7:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:9B:34:CE:18:7F:02:7B:4C:05:99:C5:C9:66:C1:37:90:93:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/be38717f-7942-3e78-a331-6212be219ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
97.71.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:6f:5c:80:e3:1d:8f:98:4d:e2:cd:8b:51:a2:a7:1f:5b:d2:
1a:f6:9b:f2:8e:c6:06:53:2c:5d:ef:91:93:48:82:3f:7c:23:
66:58:a8:3a:e0:79:8e:97:42:f1:8c:0f:66:50:32:6f:c2:86:
3a:54:f9:e8:94:75:ef:8e:e7:1a:0d:eb:aa:46:25:fc:30:01:
89:ae:36:1e:79:6a:5b:9d:5b:07:c7:9f:ca:7c:e6:7e:71:94:
6c:67:71:0a:4f:53:26:f2:f4:6b:22:16:f0:93:62:dc:e4:c0:
37:43:44:97:c5:c0:68:90:90:5e:ce:e1:2d:a7:4b:f5:e7:00:
cc:84:10:bc:1b:13:ea:a1:2f:94:d9:d5:ee:c0:0b:9a:2d:37:
4a:02:40:20:eb:06:07:8e:c6:dc:a0:76:7a:0b:29:6c:7e:e3:
bc:ea:44:2b:4e:ba:0c:b4:28:de:4c:af:3b:9f:ca:cb:61:37:
0c:e8:80:ef:2c:f5:67:84:b9:c6:61:cc:d0:db:ee:71:d1:b9:
4f:23:3c:95:0a:d3:a8:ec:cb:39:a8:15:c3:f2:f4:2d:fd:90:
7a:49:b1:04:10:4f:c0:1b:dd:ee:c3:64:98:55:fa:20:33:76:
23:a5:49:fb:4d:de:25:4f:47:68:fe:98:fd:5f:76:3d:0a:09:
eb:03:7d:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aj+WO1KDDVOOewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
ZjVhMzYwN2EtNWM2Ny00Y2ZhLTg2MmEtMmExOGMxNDk5MTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvtEkpNzXA34W0YMezO167xib9LuJgNBQlol
Iwat4unwzfSYx/OC9Cit+JywlO9jXo0J1QnmQ8c5aUf9CCYbSbm+O9+QMKMh0AGb
tQNZfOFlQdC79DwMLz9J8qhsTc7fXP1+8Gd/ltAN3hqu5xZBXhRcaV95Z5IXm8gC
WLCC2TgBm7ylXjqfRLqdOF4Z+vdEi0vuRDv4NMl8r1ua9NOVA6RrQZIrjlRqAgZl
hAoC0jmm/yh/owrI4J5dJ3B4QT+yKgFW/PDMxT8PGPsUOMfUe9oQ4U+FENEYhB+v
ij9yuBr55LJX8vT5TyqeBCeTYEPNtZ6IyOUzM6T0hz3NFOdSkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/jmzTOGH8Ce0wFmcXJZsE3kJODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYmUzODcxN2YtNzk0Mi0z
ZTc4LWEzMzEtNjIxMmJlMjE5Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYUdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1vXIDjHY+YTeLNi1Gipx9b0hr2m/KOxgZTLF3vkZNIgj98I2ZYqDrg
eY6XQvGMD2ZQMm/ChjpU+eiUde+O5xoN66pGJfwwAYmuNh55aludWwfHn8p85n5x
lGxncQpPUyby9GsiFvCTYtzkwDdDRJfFwGiQkF7O4S2nS/XnAMyEELwbE+qhL5TZ
1e7AC5otN0oCQCDrBgeOxtygdnoLKWx+47zqRCtOugy0KN5MrzufysthNwzogO8s
9WeEucZhzNDb7nHRuU8jPJUK06jsyzmoFcPy9C39kHpJsQQQT8Ab3e7DZJhV+iAz
diOlSftN3iVPR2j+mP1fdj0KCesDfV8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:33 2026 by rpki-client