
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
File: c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa (raw, json)
Hash identifier: yF1nmn6C3bXzubQI8rDcM4R6Cv4DdsjuFaDk482Qx5k=
Subject key identifier: 1B:DB:3E:2F:96:64:2B:21:1A:3B:4E:CA:FD:1F:EB:2D:41:90:B9:25
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584DD0906082908AB6D03BA04820
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
Signing time: Wed 13 May 2026 01:00:24 +0000
ROA not before: Wed 13 May 2026 01:00:24 +0000
ROA not after: Tue 11 Aug 2026 01:00:24 +0000
asID: 31898
IP address blocks: 67.217.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d0:90:60:82:90:8a:b6:d0:3b:a0:48:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: May 13 01:00:24 2026 GMT
Not After : Aug 11 01:00:24 2026 GMT
Subject: CN=6e06f68a-bdfb-4d5e-9d18-20bff9bec50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:8f:ed:f1:38:64:71:ca:3f:19:ed:7c:db:
28:f8:43:7c:4d:f6:be:e4:f4:36:7a:ca:d7:06:e8:
82:06:e8:ef:1e:8f:28:64:19:34:3e:ab:da:5a:9e:
73:89:23:5d:2e:96:16:12:ce:c2:c5:25:f3:51:25:
ea:a0:17:62:06:52:ee:e3:6a:8a:b6:d2:dd:34:28:
8c:29:35:56:6f:f6:ac:30:13:fe:ba:ed:dc:03:76:
e1:ec:e4:6a:9b:89:0a:ac:96:c1:14:d4:01:e1:c7:
57:07:94:b6:10:e0:96:76:6e:37:84:e8:4f:22:32:
64:3e:8f:6c:61:37:47:2e:f4:02:3b:e8:5a:53:20:
14:61:b4:e3:1e:bf:d4:6a:1f:cc:de:05:c7:81:df:
84:99:ab:71:19:28:b7:03:f4:fe:29:9b:53:b2:63:
57:3d:d8:45:4c:29:92:2b:8d:c3:eb:39:a8:8a:f9:
21:09:4a:65:3a:79:ff:eb:6c:f4:41:2e:ff:0f:b4:
79:81:24:75:56:13:b0:02:d3:86:bf:24:eb:42:b5:
15:08:a6:18:30:19:c1:02:b5:8b:64:e8:6e:8f:d7:
1b:19:dd:20:3d:90:2e:c2:be:56:d3:3b:e6:4b:d3:
62:70:c8:bb:51:eb:1a:61:47:fc:06:46:f8:b0:76:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DB:3E:2F:96:64:2B:21:1A:3B:4E:CA:FD:1F:EB:2D:41:90:B9:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:84:14:b1:c1:80:35:bd:3e:23:e9:d9:a7:fa:f3:a5:44:53:
87:d7:d2:cb:7f:b8:e6:b2:36:a5:7c:9a:ac:b6:f3:e0:90:0f:
d3:a3:be:4d:98:45:50:ca:31:af:9c:87:8a:dd:44:09:19:d8:
74:4b:01:d0:b5:0f:40:ea:8b:16:ba:b7:ab:78:26:91:b2:1b:
88:3f:0b:d8:e6:15:a2:9d:b3:85:4d:95:5a:69:a0:12:34:ec:
7f:c4:69:28:5c:5c:91:91:1d:7c:31:a3:3b:e8:72:a8:05:b1:
c3:53:2f:78:f2:07:c4:82:6f:3a:f2:b6:e4:f6:5c:f2:82:10:
d1:d7:76:04:89:b9:7c:81:80:96:8a:26:4f:d4:2f:c4:b2:1f:
34:f1:9b:e6:69:2a:19:0b:ce:41:90:57:5d:69:35:c0:8f:31:
77:71:0f:8d:06:c9:5d:17:bd:4a:e9:29:e0:5f:c6:8a:7e:2c:
16:02:a8:66:c9:07:00:b1:e1:85:8c:9c:7c:c1:a1:f2:d4:22:
d6:9f:58:72:34:f4:6f:61:ae:97:a8:27:f3:3b:aa:6c:d3:2d:
1b:7b:96:48:7f:7b:14:2a:d1:b5:bd:0a:12:35:3c:11:5a:4c:
3c:b1:07:2e:c9:38:3e:57:93:7f:72:38:fe:7a:c8:04:dd:64:
29:57:16:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkGCCkIq20DugSCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
NmUwNmY2OGEtYmRmYi00ZDVlLTlkMTgtMjBiZmY5YmVjNTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxKP7fE4ZHHKPxntfNso+EN8Tfa+5PQ2esrX
BuiCBujvHo8oZBk0PqvaWp5ziSNdLpYWEs7CxSXzUSXqoBdiBlLu42qKttLdNCiM
KTVWb/asMBP+uu3cA3bh7ORqm4kKrJbBFNQB4cdXB5S2EOCWdm43hOhPIjJkPo9s
YTdHLvQCO+haUyAUYbTjHr/Uah/M3gXHgd+EmatxGSi3A/T+KZtTsmNXPdhFTCmS
K43D6zmoivkhCUplOnn/62z0QS7/D7R5gSR1VhOwAtOGvyTrQrUVCKYYMBnBArWL
ZOhuj9cbGd0gPZAuwr5W0zvmS9NicMi7UesaYUf8Bkb4sHY0fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvbPi+WZCshGjtOyv0f6y1BkLklMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYzdkNWE4NmYtNGE2YS0z
MGNmLWEzYmEtOWNkNWQ5YjVhMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6EFLHBgDW9PiPp2af686VEU4fX0st/uOayNqV8mqy28+CQD9Ojvk2Y
RVDKMa+ch4rdRAkZ2HRLAdC1D0Dqixa6t6t4JpGyG4g/C9jmFaKds4VNlVppoBI0
7H/EaShcXJGRHXwxozvocqgFscNTL3jyB8SCbzrytuT2XPKCENHXdgSJuXyBgJaK
Jk/UL8SyHzTxm+ZpKhkLzkGQV11pNcCPMXdxD40GyV0XvUrpKeBfxop+LBYCqGbJ
BwCx4YWMnHzBofLUItafWHI09G9hrpeoJ/M7qmzTLRt7lkh/exQq0bW9ChI1PBFa
TDyxBy7JOD5Xk39yOP56yATdZClXFhU=
-----END CERTIFICATE-----
Generated at Wed May 13 09:04:02 2026 by rpki-client