
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa
File: d966d503-7893-3029-a31a-2ca439bfc75d.roa (raw, json)
Hash identifier: ynMkOMZqWUvI/THuHirL7B4VMeWta+6j2Od9RoBFLkE=
Subject key identifier: 8F:DF:EA:16:2C:D4:5F:3F:E2:55:2A:E0:0D:CF:3A:15:50:8B:CC:D1
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFEE5DD464782ACFA5DD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 71.44.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:ee:5d:d4:64:78:2a:cf:a5:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=b4b3c399-f667-4aa3-89a7-bc6e867972a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:5e:26:de:70:4d:35:38:06:9b:70:66:c1:
dd:3e:bd:ed:3d:82:a4:10:95:e1:b5:2d:95:99:ea:
74:3d:40:47:17:32:8c:dc:9b:ae:f7:17:99:e7:3f:
ba:85:4d:ac:d9:c8:2e:f5:0f:25:1d:26:16:1f:fa:
7b:3c:c8:3b:54:29:eb:bf:37:04:67:5d:08:23:9a:
a0:04:ff:3a:90:7a:7e:b1:72:39:a7:22:3a:81:35:
0c:b2:ef:ba:c9:35:07:8e:15:c5:00:02:2d:3a:ca:
1b:0c:2d:4f:a2:8a:c6:3a:81:c4:34:a4:15:d1:50:
8a:e5:32:83:d1:7b:e4:41:05:cb:54:ab:0b:62:61:
ea:c5:22:73:14:25:7d:54:a8:a3:2c:b2:ef:29:e0:
7c:63:be:0f:3a:02:af:39:ac:34:97:b0:e8:9a:76:
8d:80:c7:f3:69:b0:ab:96:fb:99:59:fd:3b:ef:b3:
2c:5f:56:fe:a7:c9:f8:1b:23:19:08:8e:a1:88:d8:
74:45:c2:39:5b:e3:1d:df:d9:78:d5:27:a6:a0:b2:
c1:87:2c:40:df:e0:43:a2:d3:c8:80:0b:f8:ab:8c:
d9:73:44:d6:4d:ef:b3:5a:63:ba:12:03:cd:ef:f7:
40:fa:76:ab:f4:49:92:94:e5:d9:0c:a8:1e:30:d3:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:EA:16:2C:D4:5F:3F:E2:55:2A:E0:0D:CF:3A:15:50:8B:CC:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.44.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b0:57:dd:56:e7:23:2b:94:fa:fe:85:7c:f0:e1:f3:8a:d4:
ef:a7:1b:d8:f4:39:58:31:56:3e:5e:fb:bf:67:b9:56:14:ac:
27:f1:26:33:e8:4d:0e:16:5f:1f:05:a0:3b:63:f8:c5:97:32:
35:a3:ce:9c:f8:76:df:70:ca:cf:d5:9d:7c:fa:4a:0d:54:85:
cf:79:ae:ae:b4:18:06:d0:fc:bf:b8:de:39:91:8d:6b:58:6c:
da:c1:1b:9b:ae:2f:81:f9:3b:98:53:db:fb:ba:c4:02:8f:1e:
be:df:6c:2d:6d:bf:3b:2d:d0:a0:76:d9:63:cb:72:cf:58:3a:
64:8d:c4:9e:ae:c2:f0:d1:5c:0f:ab:42:bb:5c:5e:88:bf:3e:
68:bb:3a:20:d3:91:26:74:0e:55:dc:ae:10:90:d1:ad:47:b7:
1c:87:26:54:c5:99:c7:13:83:7d:7b:5e:0c:ef:a0:36:f8:70:
67:47:4e:40:2f:af:3f:90:32:6a:90:65:a8:18:71:56:97:ee:
9f:02:8b:ca:69:0f:3a:2f:f8:b6:bd:70:64:61:b2:38:9c:9a:
b6:ed:83:8e:2d:87:3f:c7:76:97:b9:3f:6e:56:12:73:1e:6f:
27:ad:29:1c:04:87:f3:23:b1:8c:05:0c:06:a5:91:3f:10:cc:
74:1e:4c:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+5d1GR4Ks+l3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
YjRiM2MzOTktZjY2Ny00YWEzLTg5YTctYmM2ZTg2Nzk3MmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJeJt5wTTU4BptwZsHdPr3tPYKkEJXhtS2V
mep0PUBHFzKM3Juu9xeZ5z+6hU2s2cgu9Q8lHSYWH/p7PMg7VCnrvzcEZ10II5qg
BP86kHp+sXI5pyI6gTUMsu+6yTUHjhXFAAItOsobDC1PoorGOoHENKQV0VCK5TKD
0XvkQQXLVKsLYmHqxSJzFCV9VKijLLLvKeB8Y74POgKvOaw0l7DomnaNgMfzabCr
lvuZWf0777MsX1b+p8n4GyMZCI6hiNh0RcI5W+Md39l41SemoLLBhyxA3+BDotPI
gAv4q4zZc0TWTe+zWmO6EgPN7/dA+nar9EmSlOXZDKgeMNPEfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/f6hYs1F8/4lUq4A3POhVQi8zRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDk2NmQ1MDMtNzg5My0z
MDI5LWEzMWEtMmNhNDM5YmZjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERyzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASwV91W5yMrlPr+hXzw4fOK1O+nG9j0OVgxVj5e+79nuVYUrCfxJjPo
TQ4WXx8FoDtj+MWXMjWjzpz4dt9wys/VnXz6Sg1Uhc95rq60GAbQ/L+43jmRjWtY
bNrBG5uuL4H5O5hT2/u6xAKPHr7fbC1tvzst0KB22WPLcs9YOmSNxJ6uwvDRXA+r
QrtcXoi/Pmi7OiDTkSZ0DlXcrhCQ0a1HtxyHJlTFmccTg317XgzvoDb4cGdHTkAv
rz+QMmqQZagYcVaX7p8Ci8ppDzov+La9cGRhsjicmrbtg44thz/Hdpe5P25WEnMe
byetKRwEh/MjsYwFDAalkT8QzHQeTGM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:37 2026 by rpki-client