
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/c919552e-29ac-3f52-af18-4e4fd459a3f3.roa
File: c919552e-29ac-3f52-af18-4e4fd459a3f3.roa (raw, json)
Hash identifier: AtZW0orfJYQ4o4cQ8XZcewWRyGFY/N0fCmrDazH/f3w=
Subject key identifier: 39:8C:88:2F:C8:80:FE:D1:B2:C4:B9:32:B8:E1:24:53:E0:46:B6:CA
Certificate issuer: /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Certificate serial: 010D0C9F4328584D4A8FA4292D0C63CCD428FAC0
Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/c919552e-29ac-3f52-af18-4e4fd459a3f3.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 14157
IP address blocks: 206.83.160.0/20 maxlen: 24
2620:13d:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:a4:29:2d:0c:63:cc:d4:28:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=86e7c0b2-61fb-428d-899e-248e11c6b4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:fa:b8:75:07:9a:ca:3d:6f:45:8b:2d:c7:
3e:d0:47:5d:1e:60:55:06:06:3f:f8:65:11:d7:8e:
51:ed:5e:d2:ce:78:0e:99:65:b1:89:5a:60:69:0f:
84:58:7c:b0:20:54:4d:3e:ac:8d:d7:3c:6a:2a:92:
81:8d:4a:17:8a:08:49:1d:8a:bb:51:43:32:93:75:
65:65:0e:89:00:f8:87:1b:bb:04:73:db:16:20:86:
6e:51:f6:17:51:3c:dd:55:d0:19:37:b4:48:3a:77:
91:4e:9a:c7:93:48:3c:cd:4e:30:cb:19:49:0b:4c:
1d:7b:f2:04:ba:05:f9:44:32:da:0a:f5:af:4d:ef:
a4:55:b4:d0:b9:c8:49:84:17:b9:c0:c2:3b:5c:71:
9f:b3:d7:1f:9b:b5:32:ae:d5:59:d5:ff:6c:18:16:
5e:14:77:61:57:2c:6e:9c:51:43:97:2c:7d:54:14:
df:bc:3d:fe:a5:7f:a4:59:97:cd:11:dc:b8:82:26:
61:5a:25:9a:a9:d5:0a:8b:06:8b:89:dc:88:40:fc:
ec:40:85:26:19:28:d9:f4:f0:a5:a2:d0:3b:00:0b:
2d:0d:9e:81:db:6a:e8:5f:a8:c8:ae:60:0a:69:08:
cc:99:ce:a0:e1:a3:fd:3a:13:cf:3c:49:27:48:1e:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8C:88:2F:C8:80:FE:D1:B2:C4:B9:32:B8:E1:24:53:E0:46:B6:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/c919552e-29ac-3f52-af18-4e4fd459a3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
X509v3 Authority Key Identifier:
keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.83.160.0/20
IPv6:
2620:13d:f000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ea:a2:c8:f8:41:47:3f:42:ea:a2:62:99:b2:46:16:c9:f6:
79:f3:d8:02:54:68:5a:3c:73:5d:7d:63:0f:91:8c:fa:f9:7f:
0d:34:7f:e9:83:35:4c:44:98:b7:4e:51:c8:bf:04:4d:bd:0e:
90:c9:5c:31:97:6c:cb:f0:1f:e5:80:9f:cc:fc:73:cd:3d:b2:
56:4b:2f:c8:0d:3f:9c:fd:53:e1:19:fe:d8:f9:4d:10:93:e6:
a4:11:d7:f5:74:4f:1f:67:fd:4f:25:08:36:4a:66:45:9b:4e:
4b:db:cc:a5:c4:5b:ba:ec:12:de:6e:c4:91:dd:0d:c2:28:a5:
15:85:1d:64:e0:27:ba:04:bc:20:18:42:9c:67:bb:02:1e:6d:
d5:94:19:27:5c:4c:0e:a7:ab:7f:47:5b:8f:46:1f:b3:05:9c:
53:80:1a:5a:54:cb:98:ef:cd:7a:56:88:d4:5f:66:d0:2e:28:
11:c9:aa:10:23:67:4e:e5:80:9c:c4:1b:1d:29:98:12:a8:d6:
ef:fa:00:b5:e2:27:62:8d:6f:c0:e0:ed:6a:1b:36:f1:23:2b:
b1:70:da:75:bd:3e:71:e8:d9:11:0b:d4:3c:9c:b7:bb:75:fa:
25:b9:67:34:84:ea:5e:2c:27:18:79:c4:ba:d6:0e:71:f7:b9:
79:30:8e:db
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1Kj6QpLQxjzNQo+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjgzNzVjZTQtZjljYi00MGViLTlmODMtNjdkMWNmYWFh
M2Y1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
ODZlN2MwYjItNjFmYi00MjhkLTg5OWUtMjQ4ZTExYzZiNGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinL6uHUHmso9b0WLLcc+0EddHmBVBgY/+GUR
145R7V7SzngOmWWxiVpgaQ+EWHywIFRNPqyN1zxqKpKBjUoXighJHYq7UUMyk3Vl
ZQ6JAPiHG7sEc9sWIIZuUfYXUTzdVdAZN7RIOneRTprHk0g8zU4wyxlJC0wde/IE
ugX5RDLaCvWvTe+kVbTQuchJhBe5wMI7XHGfs9cfm7UyrtVZ1f9sGBZeFHdhVyxu
nFFDlyx9VBTfvD3+pX+kWZfNEdy4giZhWiWaqdUKiwaLidyIQPzsQIUmGSjZ9PCl
otA7AAstDZ6B22roX6jIrmAKaQjMmc6g4aP9OhPPPEknSB5agwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFDmMiC/IgP7RssS5MrjhJFPgRrbKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3
NWNlNC1mOWNiLTQwZWItOWY4My02N2QxY2ZhYWEzZjUvYzkxOTU1MmUtMjlhYy0z
ZjUyLWFmMTgtNGU0ZmQ0NTlhM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjgzNzVjZTQtZjljYi00MGViLTlm
ODMtNjdkMWNmYWFhM2Y1LzY4Mzc1Y2U0LWY5Y2ItNDBlYi05ZjgzLTY3ZDFjZmFh
YTNmNS5jcmwwHwYDVR0jBBgwFoAURup/fr/edULFdRaspZP5BoounswwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3NWNlNC1mOWNiLTQwZWItOWY4My02N2Qx
Y2ZhYWEzZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEzlOgMA4E
AgACMAgDBgAmIAE98DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAX6qLI+EFHP0LqomKZskYWyfZ589gCVGha
PHNdfWMPkYz6+X8NNH/pgzVMRJi3TlHIvwRNvQ6QyVwxl2zL8B/lgJ/M/HPNPbJW
Sy/IDT+c/VPhGf7Y+U0Qk+akEdf1dE8fZ/1PJQg2SmZFm05L28ylxFu67BLebsSR
3Q3CKKUVhR1k4Ce6BLwgGEKcZ7sCHm3VlBknXEwOp6t/R1uPRh+zBZxTgBpaVMuY
7816VojUX2bQLigRyaoQI2dO5YCcxBsdKZgSqNbv+gC14idijW/A4O1qGzbxIyux
cNp1vT5x6NkRC9Q8nLe7dfoluWc0hOpeLCcYecS61g5x97l5MI7b
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:50 2026 by rpki-client