
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
File: 599d3743-7271-3612-ac7e-b695738f62c4.roa (raw, json)
Hash identifier: QBzyYEVnhX5RsM8zm3f8Vt5FHgvURK1IxPeHj5kM+5o=
Subject key identifier: 26:13:EC:5C:EA:09:C7:4E:C4:8C:AB:DE:5F:E0:58:04:1A:08:2F:14
Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial: 010D0C9F4328584D0D42617AC8A7D2105A61D51C
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 44486
IP address blocks: 23.227.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:61:7a:c8:a7:d2:10:5a:61:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=3565200f-3e7e-49b4-8e0b-a05f6ee8d028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:76:d6:9a:66:9a:72:65:c8:dc:ab:fb:66:
09:5c:4e:50:96:2c:b9:e5:8a:1a:09:f5:f9:4c:08:
9f:67:60:af:24:2c:d0:7e:ba:8d:96:bc:21:cf:19:
c8:75:71:38:5e:15:f0:2b:d0:76:75:09:aa:eb:ba:
6a:57:6d:5e:8a:98:4c:2e:7e:3e:6c:cd:0b:ac:f7:
ca:e2:2f:0c:b7:4c:4e:91:63:1d:c4:a1:e0:d0:44:
32:65:8c:d0:df:b0:10:93:6c:1c:b9:9f:70:4a:27:
a3:d9:05:a4:83:18:0e:eb:30:58:b5:49:2e:18:45:
c6:ae:39:19:28:33:f2:5e:41:5b:00:82:66:35:ff:
b3:d3:17:8e:9d:5a:8c:c4:01:fc:54:35:17:b4:b0:
9d:e7:84:fb:b6:49:6e:2f:a9:08:f5:b1:0e:9d:bc:
b2:b8:e4:ce:f7:9e:38:71:91:f1:af:62:59:2c:c2:
64:65:96:9a:ea:7d:4a:c1:43:00:af:f8:9d:ef:b2:
ef:de:35:be:81:f2:41:a2:9f:31:91:40:0a:05:34:
8b:9a:5f:75:89:d3:1c:bb:fb:68:e9:26:39:7a:99:
8e:b3:02:07:9a:b3:00:26:40:d4:fe:de:da:25:a5:
27:29:a9:e0:51:45:48:1a:bc:42:9f:e0:5f:31:87:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:EC:5C:EA:09:C7:4E:C4:8C:AB:DE:5F:E0:58:04:1A:08:2F:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
X509v3 Authority Key Identifier:
keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:83:39:58:74:d4:a1:31:73:2c:7b:a5:ab:cb:a6:18:cb:8a:
31:98:da:dc:9f:1e:ac:29:f5:a4:11:78:28:ae:30:a2:7c:11:
88:24:2b:76:44:fa:36:72:73:1c:77:74:43:70:96:f5:31:97:
a3:fc:ee:8a:9c:55:42:b0:85:11:77:60:5d:12:69:14:32:5d:
c6:a1:c3:85:6b:03:78:6a:38:0d:04:28:b1:bd:e8:8e:d4:7d:
37:c5:70:e1:8f:cc:bb:1d:c1:c9:04:af:eb:64:84:5d:a5:65:
a3:7a:b1:92:56:2e:4e:12:32:d6:1e:7a:1f:92:93:87:b0:37:
8f:2e:eb:ac:d9:51:84:aa:17:35:c4:05:8f:5c:e1:18:ea:c5:
e5:f1:06:4e:13:de:c5:49:5f:68:00:3f:bc:aa:32:be:30:b5:
a6:d9:64:43:af:95:36:87:45:9c:05:08:ea:a3:24:a6:26:03:
85:f2:2b:b6:6d:db:d0:de:4b:05:6f:0e:b3:4c:39:c0:bd:93:
d2:b2:85:c6:e4:64:1c:4f:0b:3d:40:c5:ba:c3:30:fb:f9:ca:
8e:ac:53:68:f7:99:db:08:15:dc:f9:68:08:5f:b7:dc:6f:84:
de:f0:6e:44:57:ec:9e:eb:b9:d9:7a:d6:66:8d:f6:ce:52:5d:
fc:b3:e1:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmF6yKfSEFph1RwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl
ZGRiMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
MzU2NTIwMGYtM2U3ZS00OWI0LThlMGItYTA1ZjZlZThkMDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAJ21ppmmnJlyNyr+2YJXE5Qliy55YoaCfX5
TAifZ2CvJCzQfrqNlrwhzxnIdXE4XhXwK9B2dQmq67pqV21eiphMLn4+bM0LrPfK
4i8Mt0xOkWMdxKHg0EQyZYzQ37AQk2wcuZ9wSiej2QWkgxgO6zBYtUkuGEXGrjkZ
KDPyXkFbAIJmNf+z0xeOnVqMxAH8VDUXtLCd54T7tkluL6kI9bEOnbyyuOTO9544
cZHxr2JZLMJkZZaa6n1KwUMAr/id77Lv3jW+gfJBop8xkUAKBTSLml91idMcu/to
6SY5epmOswIHmrMAJkDU/t7aJaUnKangUUVIGrxCn+BfMYcW3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYT7FzqCcdOxIyr3l/gWAQaCC8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj
ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvNTk5ZDM3NDMtNzI3MS0z
NjEyLWFjN2UtYjY5NTczOGY2MmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl
MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw
ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm
MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+PcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiDOVh01KExcyx7pavLphjLijGY2tyfHqwp9aQReCiuMKJ8EYgkK3ZE
+jZycxx3dENwlvUxl6P87oqcVUKwhRF3YF0SaRQyXcahw4VrA3hqOA0EKLG96I7U
fTfFcOGPzLsdwckEr+tkhF2lZaN6sZJWLk4SMtYeeh+Sk4ewN48u66zZUYSqFzXE
BY9c4RjqxeXxBk4T3sVJX2gAP7yqMr4wtabZZEOvlTaHRZwFCOqjJKYmA4XyK7Zt
29DeSwVvDrNMOcC9k9KyhcbkZBxPCz1AxbrDMPv5yo6sU2j3mdsIFdz5aAhft9xv
hN7wbkRX7J7rudl61maN9s5SXfyz4bI=
-----END CERTIFICATE-----
Generated at Wed Mar 4 19:22:24 2026 by rpki-client