
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c071e4b0-a44b-39b7-8bf5-8aaad9efaf65.roa
File: c071e4b0-a44b-39b7-8bf5-8aaad9efaf65.roa (raw, json)
Hash identifier: 8hM3kmwYXw9WrzG20t+qks/OJeVIC4151cVXxG+kinI=
Subject key identifier: 04:52:46:F0:96:33:A4:6D:B1:4D:A8:8C:14:76:46:2B:69:70:43:0E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D24E0F9F733A884C69B6A21C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c071e4b0-a44b-39b7-8bf5-8aaad9efaf65.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 142.251.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:f9:f7:33:a8:84:c6:9b:6a:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=d2ad5c7e-8acc-4418-99ad-d51f7c3dae88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:6d:ad:e0:38:ae:2e:dd:fa:b9:b4:aa:89:
03:52:6f:29:f9:df:d5:17:ed:0f:1e:89:05:ad:52:
2a:ac:0b:12:a4:c5:1a:0d:b1:26:65:e1:b4:51:28:
84:6a:e3:6f:c4:13:9f:c6:c2:8a:53:f1:b9:98:f4:
83:02:dc:c8:79:9e:21:49:72:65:e8:2f:80:53:c1:
9e:6d:03:15:fb:ae:cd:d7:7d:82:e0:47:be:29:07:
ce:79:9c:e4:0d:a2:13:0a:b5:d1:4c:3d:8d:19:ea:
9e:5f:5e:a6:36:f4:80:8d:37:47:98:ba:38:0e:08:
d9:10:de:09:9e:20:c9:21:78:d3:dc:2d:1e:e5:ea:
68:9a:43:63:72:50:97:62:68:89:e0:54:30:ba:35:
e9:b7:7d:04:9a:c4:ea:4d:c1:49:cc:70:72:0e:65:
f6:09:4e:b3:9b:93:58:bf:fb:a0:d9:65:ab:70:7b:
75:6b:59:9e:ae:6f:99:98:0a:c1:a1:a7:0e:d2:de:
c7:11:c2:f9:70:09:72:ba:2a:81:d0:26:4a:4f:fd:
32:ea:8b:03:bb:bb:20:44:21:89:1f:cb:76:b0:9f:
ca:3e:89:12:05:c5:41:80:96:ce:72:bb:43:26:1d:
ae:1c:ef:2d:0e:cc:71:ea:cd:fc:b0:71:60:61:6f:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:46:F0:96:33:A4:6D:B1:4D:A8:8C:14:76:46:2B:69:70:43:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c071e4b0-a44b-39b7-8bf5-8aaad9efaf65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:b1:d0:56:f8:7e:f8:0d:98:44:83:97:7f:15:e1:85:fb:24:
fe:38:90:d7:f9:ef:01:a1:40:c2:94:f4:06:3d:03:b7:2c:b9:
39:e6:56:5e:91:7b:23:8f:d7:bc:b8:6e:6b:75:0c:09:f5:bb:
b7:6f:92:37:62:9a:d8:a3:1d:c1:ff:14:3f:f8:26:04:45:dd:
0b:11:d7:a9:43:91:71:38:53:90:78:90:14:61:e8:cf:d2:07:
af:a4:0e:32:da:c4:74:4f:f3:34:16:ae:9b:3f:9b:32:e9:cc:
cd:a9:67:4e:e6:3b:39:31:26:81:ac:ac:b3:17:20:12:5b:12:
8b:b1:55:74:11:e6:87:ce:d7:20:97:5b:05:96:66:27:bd:37:
57:69:14:86:1f:d1:62:6f:96:d6:15:7f:b0:f3:98:1d:be:09:
7e:82:77:5b:d9:d5:42:66:91:49:85:fd:ca:ee:97:5e:b3:5a:
f7:4a:ec:b2:23:7b:60:cc:33:9d:b3:70:2d:e7:32:06:60:1c:
84:da:50:d5:ba:3f:11:a2:9e:aa:f2:be:a5:cd:59:fa:8f:96:
0c:78:18:c6:d1:d6:66:e8:36:ba:4a:38:de:9c:42:ef:27:66:
aa:05:37:fb:b6:af:80:aa:5a:ab:96:ec:a3:e6:da:4f:40:da:
31:29:b8:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Pn3M6iExptqIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZDJhZDVjN2UtOGFjYy00NDE4LTk5YWQtZDUxZjdjM2RhZTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlERtreA4ri7d+rm0qokDUm8p+d/VF+0PHokF
rVIqrAsSpMUaDbEmZeG0USiEauNvxBOfxsKKU/G5mPSDAtzIeZ4hSXJl6C+AU8Ge
bQMV+67N132C4Ee+KQfOeZzkDaITCrXRTD2NGeqeX16mNvSAjTdHmLo4DgjZEN4J
niDJIXjT3C0e5epomkNjclCXYmiJ4FQwujXpt30EmsTqTcFJzHByDmX2CU6zm5NY
v/ug2WWrcHt1a1merm+ZmArBoacO0t7HEcL5cAlyuiqB0CZKT/0y6osDu7sgRCGJ
H8t2sJ/KPokSBcVBgJbOcrtDJh2uHO8tDsxx6s38sHFgYW/PPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARSRvCWM6RtsU2ojBR2RitpcEMOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzA3MWU0YjAtYTQ0Yi0z
OWI3LThiZjUtOGFhYWQ5ZWZhZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFux0Fb4fvgNmESDl38V4YX7JP44kNf57wGhQMKU9AY9A7csuTnmVl6R
eyOP17y4bmt1DAn1u7dvkjdimtijHcH/FD/4JgRF3QsR16lDkXE4U5B4kBRh6M/S
B6+kDjLaxHRP8zQWrps/mzLpzM2pZ07mOzkxJoGsrLMXIBJbEouxVXQR5ofO1yCX
WwWWZie9N1dpFIYf0WJvltYVf7DzmB2+CX6Cd1vZ1UJmkUmF/crul16zWvdK7LIj
e2DMM52zcC3nMgZgHITaUNW6PxGinqryvqXNWfqPlgx4GMbR1mboNrpKON6cQu8n
ZqoFN/u2r4CqWquW7KPm2k9A2jEpuPk=
-----END CERTIFICATE-----
Generated at Wed Mar 18 20:30:31 2026 by rpki-client