
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa
File: ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa (raw, json)
Hash identifier: pwMWlI8NU9V0LQt/brT8lcUEXT78RQht+dUepylRYMg=
Subject key identifier: 43:D7:EB:8C:F5:2E:BC:7C:E9:1C:C7:42:EC:07:84:E7:08:AE:08:BC
Certificate issuer: /CN=567c448b-a401-4208-bd87-aee67852522e
Certificate serial: 010D0C9F4328584D3DFFB6436452B0B55B952780
Authority key identifier: 52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 19016
IP address blocks: 64.72.199.0/24 maxlen: 24
2606:9e40:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:b6:43:64:52:b0:b5:5b:95:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567c448b-a401-4208-bd87-aee67852522e
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=95812b4c-667e-4579-bfa8-7dd6d15c9f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:f7:00:90:d3:bd:cf:67:88:3e:18:67:50:
1a:d3:2d:e2:82:89:68:aa:f1:9c:d5:5f:fd:fc:75:
50:4d:ff:d7:c5:63:b1:14:f7:2b:53:60:ea:d2:37:
92:30:a7:0d:06:68:b7:be:ed:be:1a:d9:2f:09:27:
c1:43:42:49:1a:82:8b:d4:2b:f7:e3:28:3f:ba:8f:
96:e5:19:85:81:3b:f6:c6:07:a8:99:e1:1a:69:27:
67:dc:a9:f6:6d:ef:e7:0d:98:42:5c:db:e2:87:ab:
14:c3:81:31:54:41:20:75:69:71:b6:a5:a7:fb:db:
ec:55:5f:47:12:05:1c:f6:d8:30:c4:cb:10:84:fb:
cf:fb:30:d3:ce:ea:35:4e:db:17:63:88:2d:ce:07:
97:ae:97:13:d7:82:3e:9f:3a:9f:1d:2e:2a:49:15:
8a:dd:19:3a:8a:09:63:92:fc:78:ca:b6:c9:c9:4d:
b4:04:73:d6:f9:2a:7e:3f:7e:72:90:f6:4c:9b:14:
f8:c6:37:11:ab:52:ee:f0:30:84:49:0a:43:53:22:
b8:80:7c:1b:51:c6:07:11:82:20:7e:57:a0:e4:3c:
cf:43:26:40:aa:45:4e:67:72:6b:b2:63:38:f4:c3:
3e:41:68:1e:54:13:6e:c9:32:e7:4e:ce:09:0b:35:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:EB:8C:F5:2E:BC:7C:E9:1C:C7:42:EC:07:84:E7:08:AE:08:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl
X509v3 Authority Key Identifier:
keyid:52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.199.0/24
IPv6:
2606:9e40:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:6c:4e:59:7c:17:83:51:88:c8:73:74:0d:f5:41:61:f5:b6:
56:36:85:7c:ca:9b:9a:5f:f9:3a:cc:b2:46:e2:3e:94:75:23:
f5:2c:94:f6:07:ca:b4:21:d9:d0:1e:82:50:c8:07:52:f0:90:
52:13:9a:dc:28:f4:d4:8d:4c:2e:2b:90:64:18:31:b2:29:18:
5a:b7:0e:99:95:39:f3:44:61:c8:b4:e6:b0:dc:22:09:56:4d:
eb:42:34:0c:9e:f1:90:ac:8f:81:ff:4e:bb:00:a5:36:27:cc:
8d:b5:f5:20:e2:04:70:62:35:21:ca:e9:1f:9c:ad:81:0d:74:
80:90:00:b4:9d:4b:58:6b:c7:06:36:c9:01:02:34:fb:a4:5d:
6b:13:f3:22:3a:ab:5b:c5:fb:7d:ea:6c:fd:39:ce:f4:38:a5:
ae:d9:4f:6a:42:f9:b6:06:c8:00:25:fc:4b:6d:7f:5e:24:18:
76:d8:02:dc:ff:bf:16:c9:24:e4:7f:a6:cb:f7:cd:c9:ef:7f:
c9:8d:85:e3:2f:43:a2:8c:81:24:c7:90:10:3c:0f:40:c2:5c:
11:3d:46:fe:21:22:e4:93:1d:3f:3b:df:dc:d9:e3:60:82:13:
94:1a:85:47:8a:58:27:29:6e:3c:81:df:ca:76:d7:d3:56:e0:
ea:56:b2:d0
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE09/7ZDZFKwtVuVJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY3YzQ0OGItYTQwMS00MjA4LWJkODctYWVlNjc4NTI1
MjJlMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
OTU4MTJiNGMtNjY3ZS00NTc5LWJmYTgtN2RkNmQxNWM5ZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx/3AJDTvc9niD4YZ1Aa0y3igoloqvGc1V/9
/HVQTf/XxWOxFPcrU2Dq0jeSMKcNBmi3vu2+GtkvCSfBQ0JJGoKL1Cv34yg/uo+W
5RmFgTv2xgeomeEaaSdn3Kn2be/nDZhCXNvih6sUw4ExVEEgdWlxtqWn+9vsVV9H
EgUc9tgwxMsQhPvP+zDTzuo1TtsXY4gtzgeXrpcT14I+nzqfHS4qSRWK3Rk6iglj
kvx4yrbJyU20BHPW+Sp+P35ykPZMmxT4xjcRq1Lu8DCESQpDUyK4gHwbUcYHEYIg
fleg5DzPQyZAqkVOZ3JrsmM49MM+QWgeVBNuyTLnTs4JCzWhMQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFEPX64z1Lrx86RzHQuwHhOcIrgi8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Njdj
NDQ4Yi1hNDAxLTQyMDgtYmQ4Ny1hZWU2Nzg1MjUyMmUvYmE3ZDU5YTMtN2ZhOC0z
NGE2LWJkYWMtZjA4ZjFiZTQ4ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTY3YzQ0OGItYTQwMS00MjA4LWJk
ODctYWVlNjc4NTI1MjJlLzU2N2M0NDhiLWE0MDEtNDIwOC1iZDg3LWFlZTY3ODUy
NTIyZS5jcmwwHwYDVR0jBBgwFoAUUgbmCrr4q9020IsqdO/j0X8RFi4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81NjdjNDQ4Yi1hNDAxLTQyMDgtYmQ4Ny1hZWU2
Nzg1MjUyMmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQEjHMA4E
AgACMAgDBgQmBp5AEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwbE5ZfBeDUYjIc3QN9UFh9bZWNoV8ypua
X/k6zLJG4j6UdSP1LJT2B8q0IdnQHoJQyAdS8JBSE5rcKPTUjUwuK5BkGDGyKRha
tw6ZlTnzRGHItOaw3CIJVk3rQjQMnvGQrI+B/067AKU2J8yNtfUg4gRwYjUhyukf
nK2BDXSAkAC0nUtYa8cGNskBAjT7pF1rE/MiOqtbxft96mz9Oc70OKWu2U9qQvm2
BsgAJfxLbX9eJBh22ALc/78WySTkf6bL983J73/JjYXjL0OijIEkx5AQPA9AwlwR
PUb+ISLkkx0/O9/c2eNgghOUGoVHilgnKW48gd/KdtfTVuDqVrLQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:24 2026 by rpki-client