
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa
File: 591c3c16-29be-383d-a211-f4243526102e.roa (raw, json)
Hash identifier: pzbRD+36Kw2xOIKnP2sItllKCoN64ti3cPJi3I2mM/0=
Subject key identifier: FE:6B:F4:51:2B:72:06:16:8A:1A:1C:0E:AF:33:A1:F6:CC:24:B1:37
Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial: 010D0C9F4328584D44FA2FE82A06CC0C38B44900
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 16509
IP address blocks: 208.80.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:2f:e8:2a:06:cc:0c:38:b4:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=2e9c0868-e944-4a5a-9838-909b22887d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:d7:9f:41:95:a9:16:d3:33:35:c7:95:84:
ca:1e:83:f7:81:bd:fe:33:c0:c0:08:10:31:f5:21:
67:49:e7:3d:45:7e:7c:88:a5:13:53:9a:96:04:1f:
ce:c6:14:2b:e3:cd:66:ee:ed:dc:82:ea:f3:e2:09:
ba:90:91:57:f9:44:6f:c6:d4:3a:da:32:44:f3:be:
f9:b8:04:33:39:c9:22:02:0b:85:7b:aa:b9:41:bd:
51:1f:b9:c5:cc:99:b8:37:51:22:bf:82:2e:e6:b1:
83:1f:d2:67:22:6f:75:3e:ee:31:b1:36:c3:81:8c:
f8:7d:4d:92:53:6d:03:0f:95:ed:6f:bc:23:6d:f0:
ac:35:57:03:f0:88:c6:23:77:57:27:b2:37:8a:05:
e3:78:dd:08:9a:03:99:fb:d3:16:d7:5e:84:eb:f9:
0f:d2:fe:aa:d8:21:99:fb:ab:bf:8d:a9:d3:cc:96:
de:b8:8b:6c:f0:d4:88:9b:4a:7e:3d:27:6f:33:9e:
6a:b1:8f:63:1f:6e:39:62:d6:f5:04:f1:83:7b:84:
96:d9:31:c4:77:21:a7:63:09:13:63:18:d3:fa:f3:
45:f0:a5:69:87:cb:94:48:f2:6a:b3:1d:59:fd:cb:
eb:12:6f:9f:5c:a7:d5:15:a6:8a:59:33:46:b8:fa:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:F4:51:2B:72:06:16:8A:1A:1C:0E:AF:33:A1:F6:CC:24:B1:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
X509v3 Authority Key Identifier:
keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
sbgp-ipAddrBlock: critical
IPv4:
208.80.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3e:15:bd:05:04:04:29:89:dd:4d:d2:90:98:8c:95:63:bc:
ed:10:82:0d:7e:c0:8f:2f:19:fe:6f:cc:ed:5a:04:ea:07:4d:
e6:2f:e2:7f:43:81:33:82:d3:e4:64:04:3e:f0:ff:7d:cf:ee:
66:04:42:a1:9d:a1:d9:18:47:41:15:5e:37:b6:96:17:a9:cc:
31:41:cc:fe:96:42:88:36:e7:e9:a0:a1:f2:6b:51:35:42:2b:
b5:0b:4c:40:74:ac:2b:a2:d7:e8:7b:2b:44:88:85:05:89:3a:
25:e0:02:12:66:ef:79:2a:18:42:3a:41:6d:78:94:53:9a:a0:
87:dd:89:bb:38:f8:96:44:0c:e7:c8:45:0e:ed:d7:3f:51:b4:
7c:32:7f:58:85:85:44:55:95:cb:f5:4a:9c:91:77:b6:32:fb:
31:e8:2d:fa:7c:37:4d:13:d7:4d:96:86:40:72:9f:2e:ac:fc:
c6:de:5c:2f:b1:a2:90:f9:a8:32:1f:dc:b5:a6:ae:54:10:6b:
1d:b8:ad:3d:88:ed:19:1b:b0:2b:46:bb:45:ed:b6:22:13:cf:
5a:74:37:97:4e:66:98:54:8b:a0:7f:ee:c8:7b:01:87:1c:ab:
f2:0d:55:70:3b:13:5c:65:2a:99:f2:df:1e:ec:3e:eb:a0:8e:
f6:66:ab:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+i/oKgbMDDi0SQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx
MDUzMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
MmU5YzA4NjgtZTk0NC00YTVhLTk4MzgtOTA5YjIyODg3ZDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7Xn0GVqRbTMzXHlYTKHoP3gb3+M8DACBAx
9SFnSec9RX58iKUTU5qWBB/OxhQr481m7u3cgurz4gm6kJFX+URvxtQ62jJE8775
uAQzOckiAguFe6q5Qb1RH7nFzJm4N1Eiv4Iu5rGDH9JnIm91Pu4xsTbDgYz4fU2S
U20DD5Xtb7wjbfCsNVcD8IjGI3dXJ7I3igXjeN0ImgOZ+9MW116E6/kP0v6q2CGZ
+6u/janTzJbeuIts8NSIm0p+PSdvM55qsY9jH245Ytb1BPGDe4SW2THEdyGnYwkT
YxjT+vNF8KVph8uUSPJqsx1Z/cvrEm+fXKfVFaaKWTNGuPoXGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5r9FErcgYWihocDq8zofbMJLE3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1
ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNTkxYzNjMTYtMjliZS0z
ODNkLWEyMTEtZjQyNDM1MjYxMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm
NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3
MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2
OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FDKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAII+Fb0FBAQpid1N0pCYjJVjvO0Qgg1+wI8vGf5vzO1aBOoHTeYv4n9D
gTOC0+RkBD7w/33P7mYEQqGdodkYR0EVXje2lhepzDFBzP6WQog25+mgofJrUTVC
K7ULTEB0rCui1+h7K0SIhQWJOiXgAhJm73kqGEI6QW14lFOaoIfdibs4+JZEDOfI
RQ7t1z9RtHwyf1iFhURVlcv1SpyRd7Yy+zHoLfp8N00T102WhkByny6s/MbeXC+x
opD5qDIf3LWmrlQQax24rT2I7RkbsCtGu0XttiITz1p0N5dOZphUi6B/7sh7AYcc
q/INVXA7E1xlKpny3x7sPuugjvZmq6M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:12:03 2026 by rpki-client