
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
File: b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa (raw, json)
Hash identifier: nVFth++xWqlpxoK3FIXZgriVks//pFx7YnKsLWtUSZM=
Subject key identifier: E7:11:E0:81:07:E4:91:5C:8C:B6:6E:14:12:42:86:50:EA:D4:35:5F
Certificate issuer: /CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
Certificate serial: 010D0C9F4328584D9A201A6987401A3A63F1ED00
Authority key identifier: 8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 13319
IP address blocks: 104.192.232.0/22 maxlen: 24
199.167.116.0/22 maxlen: 24
199.246.168.0/23 maxlen: 24
209.87.224.0/19 maxlen: 24
216.106.96.0/20 maxlen: 24
2607:f0b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:1a:69:87:40:1a:3a:63:f1:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=79b497c5-6b73-449d-9cb4-7b6959a6c9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:c6:ac:c7:0e:d2:df:91:69:01:19:e6:5e:
09:e9:48:50:9f:83:94:6c:7e:9c:ff:86:4f:9f:88:
62:47:52:02:9f:e7:95:59:ab:73:b6:50:13:5c:8a:
1a:3a:42:c0:50:a7:68:b2:8e:0d:e6:7e:e6:75:28:
16:82:01:c3:70:79:4f:8a:7c:a6:a9:f7:98:c3:54:
59:25:ea:67:e7:ed:0d:6d:71:c7:16:e6:ca:e8:24:
06:45:04:ba:c9:24:4c:f2:b7:00:bb:01:80:9e:23:
8f:a3:5c:1b:87:65:dc:a9:e5:66:c6:5f:da:87:b1:
5f:c7:9c:1e:1b:6d:04:21:8c:4a:f4:08:35:d8:a7:
d9:c4:a8:9e:4f:f7:38:ac:ca:c5:86:f8:20:ef:29:
a8:c4:f0:a7:08:21:0a:1f:b4:12:c5:7f:4e:27:e3:
1d:1b:e7:3e:90:e1:a3:6c:51:70:5f:73:38:90:81:
15:21:e0:94:92:ce:d9:d7:c9:62:49:19:4b:5f:34:
2f:ca:8f:b3:23:2d:ce:93:55:ee:39:73:02:b6:72:
14:fd:e4:3a:da:f6:f9:97:da:1f:d0:5b:cf:a0:06:
38:d7:db:26:ce:63:32:6f:4f:d5:f7:7f:26:54:90:
6b:d7:b0:d5:41:3b:32:02:bb:22:74:e7:5a:19:1f:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:E0:81:07:E4:91:5C:8C:B6:6E:14:12:42:86:50:EA:D4:35:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl
X509v3 Authority Key Identifier:
keyid:8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
sbgp-ipAddrBlock: critical
IPv4:
104.192.232.0/22
199.167.116.0/22
199.246.168.0/23
209.87.224.0/19
216.106.96.0/20
IPv6:
2607:f0b0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:47:cc:8f:f2:aa:51:59:44:d8:8c:23:02:bf:90:ea:aa:36:
16:fd:66:e7:fc:03:20:49:f0:02:ed:04:43:49:43:eb:bb:dd:
85:77:de:1d:bb:8a:83:1f:81:6c:3d:2b:30:3d:4c:73:a2:47:
b5:ec:3f:19:f3:86:ac:c1:f0:bf:75:21:e3:44:24:ec:1f:83:
39:72:84:e7:86:e4:20:6f:82:71:3f:f6:eb:84:69:b9:d9:fe:
65:2a:79:17:dc:36:86:d8:0c:77:30:aa:a1:ca:64:6b:2e:1b:
31:30:69:e8:0b:ad:5b:d6:38:08:9d:21:87:77:29:fe:f5:65:
78:dc:a1:a7:5d:6a:9c:bd:f6:38:b7:03:53:56:a0:a3:40:eb:
8e:a0:dd:ed:d2:eb:f3:bf:31:fb:79:76:a9:bd:5a:1b:19:27:
f6:6f:2e:7d:31:16:35:dd:22:cf:81:fd:21:83:e7:87:79:ee:
72:4b:08:12:0a:49:70:65:8d:e4:e8:7c:c0:06:51:35:93:96:
8a:c4:64:e4:01:41:65:00:25:c5:d9:e6:49:aa:df:3f:db:1e:
09:15:9b:3e:3f:91:b2:1c:f7:db:4f:ad:9b:6f:bb:7b:be:f2:
be:b9:19:f2:87:c6:8c:1a:3b:49:0f:a5:a5:65:c4:d4:80:54:
e2:e9:3a:82
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE2aIBpph0AaOmPx7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0NDBhMzItMmUxZS00OTQ4LTk2NjEtN2FlMmFhMDU5
YzIwMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NzliNDk3YzUtNmI3My00NDlkLTljYjQtN2I2OTU5YTZjOWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijfGrMcO0t+RaQEZ5l4J6UhQn4OUbH6c/4ZP
n4hiR1ICn+eVWatztlATXIoaOkLAUKdoso4N5n7mdSgWggHDcHlPinymqfeYw1RZ
Jepn5+0NbXHHFubK6CQGRQS6ySRM8rcAuwGAniOPo1wbh2XcqeVmxl/ah7Ffx5we
G20EIYxK9Ag12KfZxKieT/c4rMrFhvgg7ymoxPCnCCEKH7QSxX9OJ+MdG+c+kOGj
bFFwX3M4kIEVIeCUks7Z18liSRlLXzQvyo+zIy3Ok1XuOXMCtnIU/eQ62vb5l9of
0FvPoAY419smzmMyb0/V938mVJBr17DVQTsyArsidOdaGR94AQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFOcR4IEH5JFcjLZuFBJChlDq1DVfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTQ0
MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUyYWEwNTljMjAvYjFmYjE2YTMtYmZkMy0z
YzczLTkzZjQtNTZjNjU2N2U2N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U0NDBhMzItMmUxZS00OTQ4LTk2
NjEtN2FlMmFhMDU5YzIwL2NlNDQwYTMyLTJlMWUtNDk0OC05NjYxLTdhZTJhYTA1
OWMyMC5jcmwwHwYDVR0jBBgwFoAUjqUr0BDypIJJ2Q9kuCksmmtY9lUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTQ0MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUy
YWEwNTljMjAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCaMDoAwQC
x6d0AwQBx/aoAwQF0VfgAwQE2GpgMA0EAgACMAcDBQAmB/CwMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE1H
zI/yqlFZRNiMIwK/kOqqNhb9Zuf8AyBJ8ALtBENJQ+u73YV33h27ioMfgWw9KzA9
THOiR7XsPxnzhqzB8L91IeNEJOwfgzlyhOeG5CBvgnE/9uuEabnZ/mUqeRfcNobY
DHcwqqHKZGsuGzEwaegLrVvWOAidIYd3Kf71ZXjcoaddapy99ji3A1NWoKNA646g
3e3S6/O/Mft5dqm9WhsZJ/ZvLn0xFjXdIs+B/SGD54d57nJLCBIKSXBljeTofMAG
UTWTlorEZOQBQWUAJcXZ5kmq3z/bHgkVmz4/kbIc99tPrZtvu3u+8r65GfKHxowa
O0kPpaVlxNSAVOLpOoI=
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:13 2026 by rpki-client