
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa
File: 3c531f86-93ab-3895-9a5b-924845a382d9.roa (raw, json)
Hash identifier: zUw/Q3CdsEylsWHPWZq40XKZziJVt7paQ75tmgAp5ZU=
Subject key identifier: 06:9D:A5:FC:42:E1:83:94:18:B8:25:61:5A:6C:03:D7:28:DB:9C:52
Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
Certificate serial: 010D0C9F4328584D1DE492AFA049E6FAEFDBAB80
Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa
Signing time: Tue 10 Mar 2026 01:00:31 +0000
ROA not before: Tue 10 Mar 2026 01:00:31 +0000
ROA not after: Mon 08 Jun 2026 01:00:31 +0000
asID: 63073
IP address blocks: 64.186.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1d:e4:92:af:a0:49:e6:fa:ef:db:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
Validity
Not Before: Mar 10 01:00:31 2026 GMT
Not After : Jun 8 01:00:31 2026 GMT
Subject: CN=f8b83fb4-49a4-44d2-b174-0c090f3961fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:37:ab:42:52:83:4f:ec:d5:3a:3e:be:a0:
0e:f3:3f:92:47:f7:d0:3e:b2:da:c7:1f:38:63:c1:
99:63:94:94:dd:00:f8:b9:dd:ac:0c:a5:09:e7:67:
ae:ef:68:3a:40:be:35:12:d4:6e:8c:a4:6c:98:35:
1a:55:11:15:26:c0:3f:20:b7:bb:2c:20:75:e5:b0:
6c:9e:d0:73:3d:42:4c:e1:a0:fb:ad:0c:58:3b:5f:
59:52:78:f7:b8:cc:56:97:c3:28:6e:00:b1:2f:b7:
c9:3b:86:7e:aa:eb:9b:6e:ba:af:c6:8a:88:99:0a:
14:66:8f:44:27:71:3e:49:ab:53:86:a7:0a:0c:ff:
d6:8f:a0:70:1e:28:4f:ea:da:9f:2c:e3:81:8e:83:
fa:47:97:d5:de:8c:55:3b:74:ce:38:f7:3d:43:cc:
84:cd:37:3f:03:1f:d9:58:bd:7a:12:88:05:b9:c2:
f8:ac:a2:a2:c9:eb:d6:3c:f8:41:f7:87:c7:5d:42:
27:79:08:40:77:ea:f4:00:8a:b8:4e:95:d3:ec:eb:
af:58:e7:64:ea:4a:64:a5:f9:24:be:3d:b1:12:33:
b4:36:97:b8:b0:90:fe:5c:3c:a3:e2:7f:9d:20:1e:
6b:8b:e7:0c:24:45:2c:c9:47:f8:bf:0c:98:74:78:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9D:A5:FC:42:E1:83:94:18:B8:25:61:5A:6C:03:D7:28:DB:9C:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl
X509v3 Authority Key Identifier:
keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.186.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ab:4c:d8:0c:d2:5e:2d:4d:cc:81:9a:58:23:8d:ae:d8:73:
95:dc:8a:81:46:cf:37:07:18:77:8b:aa:95:8c:5c:79:5d:ba:
16:4b:56:f1:bb:42:b3:38:b8:a2:35:c0:83:c6:59:64:66:0f:
63:7a:98:3c:83:37:75:9e:e6:20:1d:34:be:86:ff:a2:40:93:
81:ff:ae:29:81:29:ab:9b:f9:a7:af:eb:bb:0b:fb:28:53:e8:
9a:3e:53:5a:ff:de:bf:55:b5:38:22:e0:a1:36:34:4f:47:ed:
a6:99:69:ae:9b:83:6e:28:65:de:f5:08:10:7a:3b:51:82:d3:
b1:62:20:64:b1:67:77:c2:98:11:e5:bc:f6:4f:65:a3:7a:88:
07:b9:5e:82:f5:9b:39:66:9e:b5:50:f6:3b:a6:92:d8:3c:39:
46:52:c2:a3:37:ba:12:84:ee:ac:6b:72:72:27:3e:8b:30:c9:
2d:0b:c5:90:f7:63:82:fc:f9:e0:bb:34:06:ec:e7:81:40:39:
10:66:25:d5:75:b6:68:69:a2:65:09:d9:27:04:57:26:92:fc:
78:ec:1b:d2:48:12:ce:ba:4f:b9:1c:b4:cc:ec:e2:74:4b:3c:
06:13:33:40:03:d2:db:7d:e4:a8:0e:af:45:97:bd:6e:a8:65:
1d:ac:2f:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JKvoEnm+u/bq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4
YjdkMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk
ZjhiODNmYjQtNDlhNC00NGQyLWIxNzQtMGMwOTBmMzk2MWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyc3q0JSg0/s1To+vqAO8z+SR/fQPrLaxx84
Y8GZY5SU3QD4ud2sDKUJ52eu72g6QL41EtRujKRsmDUaVREVJsA/ILe7LCB15bBs
ntBzPUJM4aD7rQxYO19ZUnj3uMxWl8MobgCxL7fJO4Z+quubbrqvxoqImQoUZo9E
J3E+SatThqcKDP/Wj6BwHihP6tqfLOOBjoP6R5fV3oxVO3TOOPc9Q8yEzTc/Ax/Z
WL16EogFucL4rKKiyevWPPhB94fHXUIneQhAd+r0AIq4TpXT7OuvWOdk6kpkpfkk
vj2xEjO0Npe4sJD+XDyj4n+dIB5ri+cMJEUsyUf4vwyYdHiyFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAadpfxC4YOUGLglYVpsA9co25xSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj
MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvM2M1MzFmODYtOTNhYi0z
ODk1LTlhNWItOTI0ODQ1YTM4MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0
OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk
OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4
ZjIwZDhiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLqHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGarTNgM0l4tTcyBmlgjja7Yc5XcioFGzzcHGHeLqpWMXHlduhZLVvG7
QrM4uKI1wIPGWWRmD2N6mDyDN3We5iAdNL6G/6JAk4H/rimBKaub+aev67sL+yhT
6Jo+U1r/3r9VtTgi4KE2NE9H7aaZaa6bg24oZd71CBB6O1GC07FiIGSxZ3fCmBHl
vPZPZaN6iAe5XoL1mzlmnrVQ9jumktg8OUZSwqM3uhKE7qxrcnInPoswyS0LxZD3
Y4L8+eC7NAbs54FAORBmJdV1tmhpomUJ2ScEVyaS/HjsG9JIEs66T7kctMzs4nRL
PAYTM0AD0tt95KgOr0WXvW6oZR2sL/A=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:23 2026 by rpki-client