
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa
File: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (raw, json)
Hash identifier: RzSvWOdqxtNDEf6j3SKl3RYeCwlsjHPiO+YnxJ26DQU=
Subject key identifier: D8:DA:4B:AA:FD:11:6F:09:C6:DF:5F:8C:46:C8:59:AF:11:CD:02:48
Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc
Certificate serial: 010D0C9F4328584D15A25C878CFE5DCEA7ABC400
Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa
Signing time: Sat 07 Mar 2026 02:00:32 +0000
ROA not before: Sat 07 Mar 2026 02:00:32 +0000
ROA not after: Fri 05 Jun 2026 01:00:32 +0000
asID: 14618
IP address blocks: 162.216.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:15:a2:5c:87:8c:fe:5d:ce:a7:ab:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc
Validity
Not Before: Mar 7 02:00:32 2026 GMT
Not After : Jun 5 01:00:32 2026 GMT
Subject: CN=591718f4-e1d8-4328-9f84-193320117ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:30:66:1a:8c:9b:e4:fa:ce:2e:bb:9b:4d:
12:68:62:82:2d:88:f7:a7:93:b9:08:aa:ca:e6:df:
15:04:7d:aa:77:6f:1c:02:ff:be:ed:c8:b3:9f:d1:
a7:12:be:27:9d:39:95:fc:9e:47:ae:70:a1:1f:c5:
41:39:d0:43:a2:1b:e6:d9:a7:9f:8d:c7:3b:48:e1:
55:44:c6:f1:9e:94:d2:c9:ce:1c:e5:b8:f7:27:71:
1d:22:35:72:4a:c4:62:ae:2d:61:e1:c6:ce:03:14:
6d:8d:57:4d:94:ec:6b:2a:90:dc:8c:fc:4c:3c:31:
34:b9:f9:b2:61:55:cf:16:a6:4d:48:8a:62:e6:3e:
91:5a:a3:1d:71:73:56:7e:59:fd:3b:25:da:12:66:
4b:06:ab:ee:19:75:41:ae:b8:5d:01:a6:53:fd:31:
d6:44:29:8c:1e:c7:41:6f:8d:62:74:8f:19:75:d7:
97:49:56:90:b1:d9:9d:eb:5f:e9:8e:9e:04:cc:a7:
9e:4a:cf:49:22:57:e1:97:bd:07:41:c5:ff:e3:be:
90:d5:76:d2:34:dd:f1:c0:2b:c5:3b:ac:e5:42:13:
cc:2e:29:ef:64:db:2a:6c:72:ee:c0:34:75:09:35:
b0:a4:46:11:ef:c0:e5:eb:d9:cc:88:7e:15:a4:c5:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:4B:AA:FD:11:6F:09:C6:DF:5F:8C:46:C8:59:AF:11:CD:02:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl
X509v3 Authority Key Identifier:
keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.216.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ef:85:55:dc:a9:55:86:f4:87:20:4d:0a:40:1a:ee:36:2f:
23:df:ec:73:fe:df:44:65:47:41:22:3a:96:b7:5f:0f:e8:1c:
d7:0e:05:e7:73:ca:f4:69:99:84:c4:c6:8d:1f:d5:d5:4a:e4:
f5:f0:9a:d3:d6:d6:f2:96:4f:4c:58:20:3f:6a:8d:c3:5a:1c:
1b:be:bf:48:2d:cc:5f:bd:70:fe:1d:79:51:10:b2:cb:81:bf:
33:26:ed:2e:3e:e1:e0:0a:45:25:73:7f:e8:ab:f6:b1:54:04:
2e:f6:27:e3:a8:5f:59:85:85:48:b5:00:8c:17:db:9a:1f:7e:
51:cc:b6:d8:e9:72:14:ed:3e:4e:e9:be:29:11:17:b2:f5:8c:
d2:2f:3b:fb:34:7f:7f:3f:57:c1:37:11:a2:80:cf:f8:a9:8f:
f4:5e:c3:1e:fa:1f:78:68:ae:9e:8e:ca:ca:c7:3a:a7:39:88:
ec:f8:73:a8:45:56:5d:07:8b:32:21:87:bc:3b:6e:76:9d:66:
6d:04:e6:41:6e:e1:75:62:ba:68:0d:56:bd:3d:52:f9:48:3c:
ca:56:44:80:13:f2:95:86:88:74:d9:f6:97:24:74:6f:d9:df:
4d:dd:3a:4f:2f:83:bf:15:d4:24:56:f5:9f:fb:f4:bd:be:d7:
2d:31:c9:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolyHjP5dzqerxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy
ZmNjMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
NTkxNzE4ZjQtZTFkOC00MzI4LTlmODQtMTkzMzIwMTE3YmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwowZhqMm+T6zi67m00SaGKCLYj3p5O5CKrK
5t8VBH2qd28cAv++7cizn9GnEr4nnTmV/J5HrnChH8VBOdBDohvm2aefjcc7SOFV
RMbxnpTSyc4c5bj3J3EdIjVySsRiri1h4cbOAxRtjVdNlOxrKpDcjPxMPDE0ufmy
YVXPFqZNSIpi5j6RWqMdcXNWfln9OyXaEmZLBqvuGXVBrrhdAaZT/THWRCmMHsdB
b41idI8ZddeXSVaQsdmd61/pjp4EzKeeSs9JIlfhl70HQcX/476Q1XbSNN3xwCvF
O6zlQhPMLinvZNsqbHLuwDR1CTWwpEYR78Dl69nMiH4VpMUtnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjaS6r9EW8Jxt9fjEbIWa8RzQJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz
ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvZmY4OWQ5YjQtZDNhOS0z
ZTI5LTk1YTktMDkxNmFjNjZkNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz
MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy
MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5
OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETvhVXcqVWG9IcgTQpAGu42LyPf7HP+30RlR0EiOpa3Xw/oHNcOBedz
yvRpmYTExo0f1dVK5PXwmtPW1vKWT0xYID9qjcNaHBu+v0gtzF+9cP4deVEQssuB
vzMm7S4+4eAKRSVzf+ir9rFUBC72J+OoX1mFhUi1AIwX25offlHMttjpchTtPk7p
vikRF7L1jNIvO/s0f38/V8E3EaKAz/ipj/Rewx76H3horp6OysrHOqc5iOz4c6hF
Vl0HizIhh7w7bnadZm0E5kFu4XViumgNVr09UvlIPMpWRIAT8pWGiHTZ9pckdG/Z
303dOk8vg78V1CRW9Z/79L2+1y0xyYA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:23 2026 by rpki-client