
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3d97984-facc-3570-bbe3-203f382c1810.roa
File: c3d97984-facc-3570-bbe3-203f382c1810.roa (raw, json)
Hash identifier: dmUbPuT7+lbx2kimQLBAU7xEPll3HgPQfDe1jUI0PQU=
Subject key identifier: 33:B8:82:29:CB:C9:D2:32:FA:69:4B:B3:7B:17:AC:25:C2:13:6D:E3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8D8FF6C4A1FB9B7F096D6C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3d97984-facc-3570-bbe3-203f382c1810.roa
Signing time: Sun 19 Apr 2026 01:00:23 +0000
ROA not before: Sun 19 Apr 2026 01:00:23 +0000
ROA not after: Sat 18 Jul 2026 01:00:23 +0000
asID: 31898
IP address blocks: 207.127.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8d:8f:f6:c4:a1:fb:9b:7f:09:6d:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 19 01:00:23 2026 GMT
Not After : Jul 18 01:00:23 2026 GMT
Subject: CN=31d73dd1-da3c-405e-a3bd-cb7fd5b5bcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:72:69:9c:dc:6b:da:dd:93:33:a1:81:fe:
ff:06:ea:c9:c7:5c:a2:81:35:73:39:69:67:1a:1c:
d3:93:11:77:ac:e9:e8:2f:6d:4d:ec:f0:37:d0:9a:
73:c4:40:0b:19:07:ca:29:95:2a:86:f4:e8:7a:20:
de:03:f1:c8:55:8d:39:ec:4f:3b:2a:5b:ee:02:3b:
c5:cb:42:8e:42:62:43:12:68:cd:a5:f2:b7:fb:b8:
78:19:f2:53:23:78:09:ad:e1:a8:32:ad:36:54:1a:
c1:17:d9:38:69:32:54:36:02:4f:19:3b:97:97:bb:
7f:1e:40:ca:9d:e0:6e:ee:5d:09:39:62:8f:c5:71:
7f:6b:06:93:61:2d:b5:de:f4:9e:43:52:2e:9b:32:
f5:d9:55:cd:72:4c:76:cc:41:3a:a9:e5:c8:f0:fc:
58:fc:98:80:83:1b:23:05:47:f6:88:3b:1e:2d:15:
ac:ac:bb:db:0d:00:09:7b:5b:85:c7:d8:23:3a:ce:
fa:0d:96:22:df:6e:42:8c:70:c0:c4:23:76:1a:ba:
c1:9e:b3:26:52:8a:db:18:54:e6:95:bf:f3:91:cd:
63:a1:5e:a6:7a:4f:33:d0:74:38:78:e4:75:d9:c3:
f8:93:89:bc:b5:73:e4:8b:bc:a2:fc:42:98:7d:17:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B8:82:29:CB:C9:D2:32:FA:69:4B:B3:7B:17:AC:25:C2:13:6D:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3d97984-facc-3570-bbe3-203f382c1810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.127.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b8:d4:92:14:b1:cb:1b:be:09:f8:5d:a0:e7:c0:c4:e2:96:
4c:18:bb:0f:58:71:cb:0b:6d:ef:1c:40:60:8e:57:52:c7:a1:
e3:87:3d:07:d0:49:8c:e9:f7:f6:ee:56:4d:64:cc:17:b3:4d:
ac:a9:9b:c7:ce:7a:bd:40:34:dc:7e:76:6e:53:c1:2e:e7:22:
fc:34:81:47:1f:88:68:b5:a7:f8:b1:63:be:68:d5:d0:2c:76:
7a:56:2c:6e:b3:d3:7c:1b:b6:19:40:9a:a0:ef:f8:8a:c9:a9:
bd:bb:13:f9:89:7b:19:78:9b:7b:82:f6:0e:40:07:ef:6f:ae:
03:1c:8e:30:1a:fb:a6:63:bd:e1:ab:4e:6f:f6:0e:2b:38:fb:
59:a8:e7:70:c3:f8:12:d5:58:46:9b:3e:9f:aa:aa:3f:a9:93:
8c:88:a5:6a:b8:db:ff:3a:93:da:3b:6e:cb:82:ad:f1:c4:4f:
b6:8d:b5:e0:de:1c:72:fe:c1:c6:0d:a2:10:ba:cb:cb:49:99:
ca:74:b6:6d:13:62:bf:3f:27:e8:b3:05:e2:88:6d:38:9e:a4:
e8:3a:fd:29:ef:c3:d8:27:b9:bf:aa:7a:15:9e:d1:c4:2a:cd:
c2:34:ed:f7:b7:94:c4:63:6f:81:e1:d7:52:d3:44:fc:07:29:
59:06:e7:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/bEofubfwltbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk
MzFkNzNkZDEtZGEzYy00MDVlLWEzYmQtY2I3ZmQ1YjViY2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/9yaZzca9rdkzOhgf7/BurJx1yigTVzOWln
GhzTkxF3rOnoL21N7PA30JpzxEALGQfKKZUqhvToeiDeA/HIVY057E87KlvuAjvF
y0KOQmJDEmjNpfK3+7h4GfJTI3gJreGoMq02VBrBF9k4aTJUNgJPGTuXl7t/HkDK
neBu7l0JOWKPxXF/awaTYS213vSeQ1IumzL12VXNckx2zEE6qeXI8PxY/JiAgxsj
BUf2iDseLRWsrLvbDQAJe1uFx9gjOs76DZYi325CjHDAxCN2GrrBnrMmUorbGFTm
lb/zkc1joV6mek8z0HQ4eOR12cP4k4m8tXPki7yi/EKYfRdp/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDO4ginLydIy+mlLs3sXrCXCE23jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNkOTc5ODQtZmFjYy0z
NTcwLWJiZTMtMjAzZjM4MmMxODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz39IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAq41JIUscsbvgn4XaDnwMTilkwYuw9YccsLbe8cQGCOV1LHoeOHPQfQ
SYzp9/buVk1kzBezTaypm8fOer1ANNx+dm5TwS7nIvw0gUcfiGi1p/ixY75o1dAs
dnpWLG6z03wbthlAmqDv+IrJqb27E/mJexl4m3uC9g5AB+9vrgMcjjAa+6ZjveGr
Tm/2Dis4+1mo53DD+BLVWEabPp+qqj+pk4yIpWq42/86k9o7bsuCrfHET7aNteDe
HHL+wcYNohC6y8tJmcp0tm0TYr8/J+izBeKIbTiepOg6/Snvw9gnub+qehWe0cQq
zcI07fe3lMRjb4Hh11LTRPwHKVkG5w0=
-----END CERTIFICATE-----
Generated at Wed May 13 14:31:33 2026 by rpki-client