
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa
File: 8b9703ea-15af-3104-8c2a-8494561f93c3.roa (raw, json)
Hash identifier: z/1fhgkB9MLOp4WS1rgtXfJqsVj0+W70o0+UxtyNZ0Q=
Subject key identifier: B1:2F:95:42:0C:1E:0C:46:BB:F8:A1:3F:A3:ED:56:C8:1F:F8:1C:45
Certificate issuer: /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial: 010D0C9F4328584D55BA428AFB5DA15E047F6B80
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 32098
IP address blocks: 68.64.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:42:8a:fb:5d:a1:5e:04:7f:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=2d9faaba-426e-4c61-ae15-561ab1227a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:a3:ea:c1:d9:3f:9a:2d:39:50:d5:a6:bb:
09:fc:34:50:e1:33:6b:13:5b:73:54:ba:d9:96:88:
21:17:9b:65:37:91:5a:d9:9a:43:33:09:c3:6e:e0:
7f:d9:69:32:c3:25:3c:8b:9e:b3:b5:34:c4:94:7d:
b0:96:3d:5c:33:b0:ce:0f:39:36:45:eb:f1:ff:68:
21:9e:6b:f8:5f:ea:9d:16:51:cc:0a:f0:af:d0:21:
ae:76:32:e3:e6:1c:87:27:aa:93:6e:9f:41:b1:19:
b9:cc:2b:42:3c:de:da:98:78:96:dd:c8:1c:ae:55:
c4:5c:75:c4:e6:f5:7f:4b:9b:d7:7b:28:50:c7:15:
fa:6a:d3:8f:75:90:60:9d:84:a3:2d:6a:a2:e6:5c:
15:42:93:1e:44:44:ac:41:43:8a:fb:a4:f7:3f:41:
64:4f:15:46:0e:3c:66:f5:d6:e7:38:ea:12:47:5f:
3d:e3:a0:be:44:09:44:db:e5:80:bc:38:19:f0:91:
f2:27:84:66:d7:32:72:9a:5f:2b:77:df:ba:51:6e:
cf:ff:b8:fd:21:91:a9:7b:8f:33:3f:c0:d2:fe:cd:
27:ba:18:c1:7c:a4:0d:21:3f:87:03:f2:7d:e0:e6:
13:3f:9e:df:52:5a:b6:81:57:29:6a:4a:7a:5a:23:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2F:95:42:0C:1E:0C:46:BB:F8:A1:3F:A3:ED:56:C8:1F:F8:1C:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
X509v3 Authority Key Identifier:
keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:41:28:42:15:29:a7:c2:0c:f5:eb:28:62:b1:0f:f7:9e:7b:
42:81:5f:29:b8:93:d7:0f:57:a3:a8:3e:00:6b:16:d1:96:84:
36:85:ba:b6:92:45:de:c8:0b:f0:40:a8:e5:cb:f8:06:f5:d8:
b0:37:9c:a6:65:1f:0e:76:b3:74:b6:41:be:d9:eb:48:ec:11:
ff:f5:d4:22:39:b9:ce:39:1b:dc:20:e0:57:6c:2d:dd:7d:a5:
87:8c:eb:e7:a4:f7:5d:ea:81:50:f4:e8:84:ab:b3:53:a1:a3:
d5:a1:d5:ef:1b:8e:2b:2f:a6:2c:6f:91:d3:57:a3:ee:37:57:
41:4e:27:48:41:a9:f6:8d:86:a1:a3:d6:e0:21:45:1a:57:af:
2e:ec:cd:b6:87:16:ff:65:da:a5:ee:43:7a:3c:bc:ed:41:1a:
19:f6:dc:c9:4f:bc:ff:0a:5d:e2:37:57:5c:82:79:a1:b4:b4:
a2:26:72:4d:ca:0c:9a:40:0a:c7:34:47:d4:9c:a3:95:da:79:
5f:4b:e2:81:a4:66:a0:39:c5:4b:dc:5d:4c:4e:70:7c:b4:34:
32:52:f1:a8:c1:fc:90:b1:3e:53:5c:04:d0:b2:3d:ec:94:17:
c3:1f:87:94:a7:df:1a:ff:6c:df:11:77:e7:13:86:a4:6e:ef:
11:c2:af:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukKK+12hXgR/a4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdj
MzZlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MmQ5ZmFhYmEtNDI2ZS00YzYxLWFlMTUtNTYxYWIxMjI3YTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb+j6sHZP5otOVDVprsJ/DRQ4TNrE1tzVLrZ
loghF5tlN5Fa2ZpDMwnDbuB/2WkywyU8i56ztTTElH2wlj1cM7DODzk2Revx/2gh
nmv4X+qdFlHMCvCv0CGudjLj5hyHJ6qTbp9BsRm5zCtCPN7amHiW3cgcrlXEXHXE
5vV/S5vXeyhQxxX6atOPdZBgnYSjLWqi5lwVQpMeRESsQUOK+6T3P0FkTxVGDjxm
9dbnOOoSR18946C+RAlE2+WAvDgZ8JHyJ4Rm1zJyml8rd9+6UW7P/7j9IZGpe48z
P8DS/s0nuhjBfKQNIT+HA/J94OYTP57fUlq2gVcpakp6WiNKGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEvlUIMHgxGu/ihP6PtVsgf+BxFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1
ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvOGI5NzAzZWEtMTVhZi0z
MTA0LThjMmEtODQ5NDU2MWY5M2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTA4NWZhNzAtMzEyYy00Nzg2LWI1
ODctYmRiNWZjODdjMzZlL2UwODVmYTcwLTMxMmMtNDc4Ni1iNTg3LWJkYjVmYzg3
YzM2ZS5jcmwwHwYDVR0jBBgwFoAU+wFZJiVq4yf4fvzRnFfiezQbWG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1
ZmM4N2MzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1BKEIVKafCDPXrKGKxD/eee0KBXym4k9cPV6OoPgBrFtGWhDaFuraS
Rd7IC/BAqOXL+Ab12LA3nKZlHw52s3S2Qb7Z60jsEf/11CI5uc45G9wg4FdsLd19
pYeM6+ek913qgVD06ISrs1Oho9Wh1e8bjisvpixvkdNXo+43V0FOJ0hBqfaNhqGj
1uAhRRpXry7szbaHFv9l2qXuQ3o8vO1BGhn23MlPvP8KXeI3V1yCeaG0tKImck3K
DJpACsc0R9Sco5XaeV9L4oGkZqA5xUvcXUxOcHy0NDJS8ajB/JCxPlNcBNCyPeyU
F8Mfh5Sn3xr/bN8Rd+cThqRu7xHCr2A=
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:33:15 2026 by rpki-client