
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa
File: 411f3d4b-7409-3c60-9628-71e475898228.roa (raw, json)
Hash identifier: 11JyQvrx6jKRLkRqyhC82qyRptXgRvwhA8/Vv0WSkLU=
Subject key identifier: A8:71:36:96:BC:E1:07:12:20:AB:55:A0:47:A5:DD:B9:6A:EA:CC:9C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D24E0FE5F4F799952AB9A8A60
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 142.251.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:fe:5f:4f:79:99:52:ab:9a:8a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=d655ebc4-9067-4c5c-985a-83e43f8b65ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:ad:d8:3f:45:d7:17:98:fe:ea:f9:8d:54:
e6:38:ea:f5:69:5e:b4:44:79:bb:fa:fb:9c:dc:21:
cd:2e:4d:e1:c5:29:d9:d6:7f:f0:41:59:de:74:77:
26:63:a7:b4:d8:ee:e3:c4:87:76:b2:5e:e1:c1:9f:
c3:9a:1f:be:da:48:85:6a:8c:b7:5f:e6:e7:b7:5c:
b1:e6:ef:a9:56:92:89:c1:5e:38:66:5d:0a:db:46:
2e:b7:9d:6c:d8:1f:68:da:59:e7:2a:88:d3:88:a8:
65:78:df:03:3e:37:ad:a3:57:93:33:da:10:0c:a7:
f6:e1:c6:7f:49:ed:e5:24:bf:6f:64:6d:b8:64:29:
8d:e5:ba:13:49:e2:c8:7d:49:96:14:db:06:ef:63:
63:60:e7:c2:0b:de:6f:c4:4c:81:0e:49:6b:ec:c3:
dc:6c:4f:4f:a1:fa:c5:f8:3c:8f:c9:1a:f0:8b:fc:
1e:c4:00:82:f2:3d:2d:bf:bf:16:88:35:f9:88:f2:
34:71:78:b2:57:2e:77:ed:7f:8e:70:d8:48:0a:c3:
f1:b3:f5:2f:73:63:b3:8f:a1:f4:70:40:f9:9a:95:
ea:01:9e:64:d0:08:81:6e:1d:f8:54:0d:c0:04:4a:
29:91:f3:25:3b:d3:fc:8f:83:33:48:ab:59:2a:3e:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:36:96:BC:E1:07:12:20:AB:55:A0:47:A5:DD:B9:6A:EA:CC:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:3d:f8:58:74:08:e8:92:3d:2e:20:47:48:18:fb:4a:00:27:
9d:e9:7b:54:c2:9a:74:e4:10:32:69:e6:bb:db:de:fb:1b:16:
13:9a:dd:b0:29:2f:9d:52:9d:6c:9a:ab:7d:31:17:35:fe:8c:
25:54:da:cb:d6:e6:b3:25:8a:dc:bf:8c:20:67:4a:00:62:32:
f5:5b:87:3a:16:38:22:42:9c:38:91:89:c7:d6:b8:dd:92:59:
8b:c0:63:34:18:03:93:ba:bf:4d:9f:41:92:2f:cc:d7:e1:8d:
14:c6:7d:ba:fa:85:4e:c1:55:b1:c4:e1:14:d2:30:51:48:0c:
35:68:c5:62:49:d8:ac:a0:4a:50:70:cb:c0:77:c3:c5:7d:02:
9f:a3:07:75:64:79:86:29:f6:17:d1:82:56:83:35:65:c3:74:
aa:04:d9:a8:f6:5f:a4:9b:9c:47:95:6d:f8:4f:11:4d:32:2b:
95:c0:59:01:ab:20:09:23:be:1e:0d:75:b3:fb:e8:cd:f0:f1:
b4:7b:10:00:51:2d:b7:63:e6:0b:1a:16:41:87:1a:64:7a:5b:
92:43:5e:0a:b7:76:ab:71:25:48:f0:7b:e1:83:e2:20:d8:45:
ca:be:54:5a:de:11:61:2c:8e:cd:59:d1:17:b6:8d:e8:c9:6a:
48:62:59:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4P5fT3mZUquaimAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZDY1NWViYzQtOTA2Ny00YzVjLTk4NWEtODNlNDNmOGI2NWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Wt2D9F1xeY/ur5jVTmOOr1aV60RHm7+vuc
3CHNLk3hxSnZ1n/wQVnedHcmY6e02O7jxId2sl7hwZ/Dmh++2kiFaoy3X+bnt1yx
5u+pVpKJwV44Zl0K20Yut51s2B9o2lnnKojTiKhleN8DPjeto1eTM9oQDKf24cZ/
Se3lJL9vZG24ZCmN5boTSeLIfUmWFNsG72NjYOfCC95vxEyBDklr7MPcbE9PofrF
+DyPyRrwi/wexACC8j0tv78WiDX5iPI0cXiyVy537X+OcNhICsPxs/Uvc2Ozj6H0
cED5mpXqAZ5k0AiBbh34VA3ABEopkfMlO9P8j4MzSKtZKj6FrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhxNpa84QcSIKtVoEel3blq6sycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDExZjNkNGItNzQwOS0z
YzYwLTk2MjgtNzFlNDc1ODk4MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFM9+Fh0COiSPS4gR0gY+0oAJ53pe1TCmnTkEDJp5rvb3vsbFhOa3bAp
L51SnWyaq30xFzX+jCVU2svW5rMlity/jCBnSgBiMvVbhzoWOCJCnDiRicfWuN2S
WYvAYzQYA5O6v02fQZIvzNfhjRTGfbr6hU7BVbHE4RTSMFFIDDVoxWJJ2KygSlBw
y8B3w8V9Ap+jB3VkeYYp9hfRglaDNWXDdKoE2aj2X6SbnEeVbfhPEU0yK5XAWQGr
IAkjvh4NdbP76M3w8bR7EABRLbdj5gsaFkGHGmR6W5JDXgq3dqtxJUjwe+GD4iDY
Rcq+VFreEWEsjs1Z0Re2jejJakhiWbo=
-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:57 2026 by rpki-client