
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
File: 17acb471-f0ec-3752-90a5-05f953ebd85f.roa (raw, json)
Hash identifier: rBAUjZQ6kUcCZtR0HtTjlxdJ4GSL7dgc7sZ1wpUSUno=
Subject key identifier: 55:11:58:19:4D:9F:03:AB:F1:78:9C:47:67:3F:BB:02:B8:55:6B:C1
Certificate issuer: /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Certificate serial: 010D0C9F4328584D3DFFA9FF0051C0505F732800
Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 36352
IP address blocks: 128.254.228.0/22 maxlen: 22
162.245.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:a9:ff:00:51:c0:50:5f:73:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=d6f216b4-ab2f-4ee7-b360-bebfbeda0ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:50:37:3d:a8:7f:e1:65:70:7e:7e:cd:9b:
ec:4d:f2:48:db:5c:8e:22:a8:ee:9a:bf:2a:c6:dd:
3f:a0:13:57:39:be:93:0f:aa:b6:91:92:ab:6c:74:
7d:0b:40:64:2e:06:a2:b5:b7:51:27:23:3c:d5:c4:
a4:0d:d6:98:e8:bf:9a:6c:ff:5c:67:9c:15:e8:27:
62:d3:67:e8:d2:0b:d3:94:dc:f2:0f:f0:18:e3:6d:
52:ad:34:27:88:94:d2:b9:b4:32:ab:de:5e:bb:49:
e6:b8:19:e7:82:bb:61:0d:a9:a8:df:b9:a4:10:46:
9b:c4:d8:81:d2:af:63:db:61:0f:b8:fc:19:fd:85:
0f:32:41:5e:fe:6f:cd:98:ff:18:12:e8:20:a7:db:
7d:64:82:4b:85:fb:b5:b6:d7:df:2f:e4:d1:50:0c:
04:d5:b5:2a:35:16:92:02:40:ca:88:bb:25:97:ec:
48:cd:6e:83:42:15:12:fe:0e:96:df:93:9f:37:63:
e7:2d:5c:0c:ac:4b:6e:6f:19:ea:a9:86:15:b6:b4:
ef:69:9d:1e:22:5c:ab:2a:d8:46:c3:99:44:a4:67:
76:94:ae:ce:db:37:62:05:a2:7e:31:67:0d:ae:5d:
39:b2:e0:a9:67:6e:8e:4d:a7:27:52:c3:cf:75:c6:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:11:58:19:4D:9F:03:AB:F1:78:9C:47:67:3F:BB:02:B8:55:6B:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
X509v3 Authority Key Identifier:
keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.228.0/22
162.245.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:59:e8:c6:8a:7b:53:d8:90:01:e9:11:b2:da:a6:4c:db:2b:
5d:ae:0b:e9:d2:15:c3:ae:bb:e7:dd:e2:13:4e:8a:ce:da:6e:
3a:1e:00:e2:59:4b:27:1e:d5:a4:9a:fe:53:7a:60:5b:57:97:
33:bb:72:e0:f3:c0:80:13:e3:a7:78:5c:a5:7d:e8:c8:12:9f:
2a:46:eb:68:06:d4:62:52:c2:87:6d:6f:d0:66:2f:60:33:0a:
6f:1b:62:47:d2:3b:73:46:da:f1:6c:d0:b9:8d:4b:c2:59:ef:
85:35:bd:67:e2:8b:e5:04:05:9b:ec:d0:13:6e:c5:89:65:31:
44:c5:67:34:33:f5:6f:c1:92:3e:5f:f9:3a:8d:b7:0f:be:07:
16:88:df:e2:5f:81:46:6d:a1:ad:d6:7d:fa:13:83:2e:11:eb:
bd:5e:1f:b9:4f:28:c0:79:01:54:f0:b4:51:8f:f6:04:ff:77:
40:2e:cd:5c:1d:3f:9b:63:6e:db:bb:e4:c4:bb:47:39:87:3b:
64:b6:9e:39:32:5c:01:75:6e:9c:31:a7:a5:cd:7e:44:c8:1e:
5e:a9:26:ce:b0:2e:1e:40:f4:c5:ad:df:ff:39:9b:8c:90:d2:
77:5f:cb:b7:e1:fa:1f:85:4f:81:4b:48:47:42:ca:ed:d8:5b:
53:15:44:eb
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE09/6n/AFHAUF9zKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY5YWZmMzAtNDc4Ni00MzFjLTkwZTgtYWFmNzhjYzY0
Y2JlMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZDZmMjE2YjQtYWIyZi00ZWU3LWIzNjAtYmViZmJlZGEwYWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmhQNz2of+FlcH5+zZvsTfJI21yOIqjumr8q
xt0/oBNXOb6TD6q2kZKrbHR9C0BkLgaitbdRJyM81cSkDdaY6L+abP9cZ5wV6Cdi
02fo0gvTlNzyD/AY421SrTQniJTSubQyq95eu0nmuBnngrthDamo37mkEEabxNiB
0q9j22EPuPwZ/YUPMkFe/m/NmP8YEuggp9t9ZIJLhfu1ttffL+TRUAwE1bUqNRaS
AkDKiLsll+xIzW6DQhUS/g6W35OfN2PnLVwMrEtubxnqqYYVtrTvaZ0eIlyrKthG
w5lEpGd2lK7O2zdiBaJ+MWcNrl05suCpZ26OTacnUsPPdcbr6QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFURWBlNnwOr8XicR2c/uwK4VWvBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlh
ZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3OGNjNjRjYmUvMTdhY2I0NzEtZjBlYy0z
NzUyLTkwYTUtMDVmOTUzZWJkODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzY5YWZmMzAtNDc4Ni00MzFjLTkw
ZTgtYWFmNzhjYzY0Y2JlL2M2OWFmZjMwLTQ3ODYtNDMxYy05MGU4LWFhZjc4Y2M2
NGNiZS5jcmwwHwYDVR0jBBgwFoAU4Qrm1Yk+AYyF+IGr+zP/YKM0L2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlhZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3
OGNjNjRjYmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgP7kAwQC
ovVkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAJZ6MaKe1PYkAHpEbLapkzbK12uC+nSFcOuu+fd4hNOis7a
bjoeAOJZSyce1aSa/lN6YFtXlzO7cuDzwIAT46d4XKV96MgSnypG62gG1GJSwodt
b9BmL2AzCm8bYkfSO3NG2vFs0LmNS8JZ74U1vWfii+UEBZvs0BNuxYllMUTFZzQz
9W/Bkj5f+TqNtw++BxaI3+JfgUZtoa3WffoTgy4R671eH7lPKMB5AVTwtFGP9gT/
d0AuzVwdP5tjbtu75MS7RzmHO2S2njkyXAF1bpwxp6XNfkTIHl6pJs6wLh5A9MWt
3/85m4yQ0ndfy7fh+h+FT4FLSEdCyu3YW1MVROs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:53:44 2026 by rpki-client