
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba5f958b-321d-35a6-b180-ef00f239d1dd.roa
File: ba5f958b-321d-35a6-b180-ef00f239d1dd.roa (raw, json)
Hash identifier: BPfQFQzaaDvGKJq6HWlRXzy1S7uoN+CS4PTMP8bH8Ss=
Subject key identifier: 68:C6:E0:A5:14:10:86:92:EE:E9:93:9F:9E:CA:C7:B2:54:7C:25:01
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB8DB5377686B2265DF5E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba5f958b-321d-35a6-b180-ef00f239d1dd.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 97.91.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:8d:b5:37:76:86:b2:26:5d:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=f1d0c133-0447-4e47-b21c-cd0a0a0d9d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:87:ef:db:c2:e5:00:3f:38:50:30:0c:74:
4a:57:3a:0a:f6:37:89:c2:c8:5e:7e:aa:8f:c2:94:
3b:3b:75:66:0b:e6:66:ce:3a:4d:a1:ef:87:e2:f3:
54:f4:9c:73:a9:1a:5e:cc:b6:c4:d8:c1:a5:cd:97:
13:01:f8:ce:02:00:1e:85:8d:4e:de:b0:d6:69:4e:
04:af:fb:1a:71:b3:a5:3d:cb:42:d8:4c:9e:40:23:
69:b8:4b:6a:52:2c:59:b0:07:e9:8a:97:90:c4:f7:
80:c1:41:9c:ff:33:3e:d2:b6:b0:6c:ad:aa:6f:10:
65:3c:cb:c4:78:78:f4:54:15:58:06:8d:8a:4f:10:
2b:a8:9f:3f:17:6a:43:ad:c5:04:2d:19:bb:85:73:
73:a0:f8:c9:73:65:ad:74:88:c7:ff:1a:fc:a4:13:
7c:0a:d4:42:5c:0e:11:42:a4:ef:2d:6c:89:30:7e:
a4:dc:f8:bf:8d:9b:57:03:80:56:17:85:7d:4b:ea:
5f:bf:75:c4:16:52:b9:f6:f1:f3:8f:9b:5e:5e:6f:
45:e0:31:2a:19:37:33:c0:12:f6:48:d9:0f:56:fb:
65:b9:0a:93:e7:ec:4c:ab:61:d0:34:e3:5c:d2:2f:
cb:a2:4a:cd:78:7c:0c:a5:00:3f:4e:59:ad:57:04:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:E0:A5:14:10:86:92:EE:E9:93:9F:9E:CA:C7:B2:54:7C:25:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba5f958b-321d-35a6-b180-ef00f239d1dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.91.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:2b:2e:0c:a3:15:68:e3:5a:d1:1e:b1:33:a5:a3:2f:f4:dc:
c2:6b:84:a9:69:cd:c7:92:f9:5b:b9:3b:0b:b3:6a:b8:f0:d2:
1d:6f:2f:08:37:1b:8e:37:ed:ef:f5:a2:ee:b6:18:ce:18:5b:
07:b6:ad:e7:8c:6a:2a:4d:dc:41:8c:04:c0:54:68:f6:be:8b:
df:f6:7f:3e:60:9d:87:c4:b5:8b:e6:4f:eb:67:1b:bd:6a:7c:
a3:3f:a8:66:1d:6c:a9:3f:08:c1:1d:25:c5:94:98:5c:b8:25:
ed:5e:06:08:dc:59:4b:59:41:01:6e:cb:41:9a:48:31:a5:84:
49:17:fb:93:ec:d0:14:8e:38:63:40:bb:98:f6:da:1b:35:e9:
6a:6b:c2:3a:00:cc:2d:e5:ee:73:5f:08:44:69:07:27:60:c2:
f4:2b:f4:2a:9a:08:31:6c:17:1b:70:61:32:bd:49:13:d0:d6:
8c:c2:d5:5b:bb:a1:e4:c1:e7:3d:c9:fe:46:a7:99:63:e3:8c:
40:6c:ec:42:1f:5b:74:b7:3e:8e:e5:b4:88:c4:9a:3e:e2:0e:
c8:6c:8e:40:09:32:08:c5:bc:50:b6:9f:99:08:c2:c5:3e:98:
e8:9f:f7:8a:ce:68:c7:eb:cc:ca:b6:d9:6b:9b:94:d3:b7:58:
df:3e:0b:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay421N3aGsiZd9eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZjFkMGMxMzMtMDQ0Ny00ZTQ3LWIyMWMtY2QwYTBhMGQ5ZDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwESH79vC5QA/OFAwDHRKVzoK9jeJwshefqqP
wpQ7O3VmC+ZmzjpNoe+H4vNU9JxzqRpezLbE2MGlzZcTAfjOAgAehY1O3rDWaU4E
r/sacbOlPctC2EyeQCNpuEtqUixZsAfpipeQxPeAwUGc/zM+0rawbK2qbxBlPMvE
eHj0VBVYBo2KTxArqJ8/F2pDrcUELRm7hXNzoPjJc2WtdIjH/xr8pBN8CtRCXA4R
QqTvLWyJMH6k3Pi/jZtXA4BWF4V9S+pfv3XEFlK59vHzj5teXm9F4DEqGTczwBL2
SNkPVvtluQqT5+xMq2HQNONc0i/LokrNeHwMpQA/TlmtVwTyfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjG4KUUEIaS7umTn57Kx7JUfCUBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmE1Zjk1OGItMzIxZC0z
NWE2LWIxODAtZWYwMGYyMzlkMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYVuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkrLgyjFWjjWtEesTOloy/03MJrhKlpzceS+Vu5Owuzarjw0h1vLwg3
G4437e/1ou62GM4YWwe2reeMaipN3EGMBMBUaPa+i9/2fz5gnYfEtYvmT+tnG71q
fKM/qGYdbKk/CMEdJcWUmFy4Je1eBgjcWUtZQQFuy0GaSDGlhEkX+5Ps0BSOOGNA
u5j22hs16WprwjoAzC3l7nNfCERpBydgwvQr9CqaCDFsFxtwYTK9SRPQ1ozC1Vu7
oeTB5z3J/kanmWPjjEBs7EIfW3S3Po7ltIjEmj7iDshsjkAJMgjFvFC2n5kIwsU+
mOif94rOaMfrzMq22WublNO3WN8+C9c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:03 2026 by rpki-client