
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/82aa7469-b46a-3167-8e78-9245178a8cee.roa
File: 82aa7469-b46a-3167-8e78-9245178a8cee.roa (raw, json)
Hash identifier: UstI8P/8sqG7qc9+MtRxNXV3fOs7Mgb1Z9pinyRoogE=
Subject key identifier: 6E:AB:85:C1:96:EC:5F:21:60:4E:5F:D3:9D:13:28:7B:FA:EE:C2:D5
Certificate issuer: /CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae
Certificate serial: 010D0C9F4328584D19B4DCE9CA1DD940BA79B860
Authority key identifier: 5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/82aa7469-b46a-3167-8e78-9245178a8cee.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 400202
IP address blocks: 170.39.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:dc:e9:ca:1d:d9:40:ba:79:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=712f4b6a-625e-4a78-a189-00d89ef3467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:39:34:81:ad:e2:a1:b4:84:68:26:69:0e:53:
03:96:ee:ad:e6:77:97:8e:ce:1b:ee:d6:71:a2:a6:
22:d7:cd:2c:be:10:d7:c3:4e:57:e4:fd:52:31:42:
e5:df:ef:01:ff:c0:4c:c0:bb:68:ad:1b:61:09:fb:
36:a8:2e:f4:20:25:d1:a2:c9:56:d6:12:31:9b:db:
55:26:81:a4:0f:c2:ac:11:e3:fd:ae:36:46:59:ef:
97:bc:11:35:fa:fd:df:b3:bd:89:a1:97:d0:6a:d2:
0e:45:ab:92:90:56:ea:1f:fb:f9:43:37:d2:08:35:
1b:8f:3b:0f:27:b8:01:5a:b9:ec:86:2c:36:ed:11:
73:c1:9a:9d:4a:51:c1:ef:c7:c1:34:ee:ce:3e:cb:
e0:ec:c6:16:8e:fe:50:8c:d3:ca:7c:bb:34:5a:2b:
55:8a:ba:b8:12:de:57:9d:51:65:f5:ed:ae:d0:5b:
67:12:68:ba:74:76:c2:e8:ae:e5:e4:83:aa:a9:af:
b3:0f:33:b1:ff:72:32:ee:98:b1:db:49:54:30:e8:
62:7e:49:ad:e9:ef:6d:1c:dd:30:7e:75:d6:7f:40:
fb:6a:0f:3d:dc:79:4e:2d:df:54:8d:ab:7c:a1:c8:
57:24:7d:30:6f:1f:94:cf:ed:3d:86:27:8b:d0:8f:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AB:85:C1:96:EC:5F:21:60:4E:5F:D3:9D:13:28:7B:FA:EE:C2:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/82aa7469-b46a-3167-8e78-9245178a8cee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl
X509v3 Authority Key Identifier:
keyid:5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:29:da:d7:56:15:9d:15:ca:aa:41:0d:16:4b:bd:ba:19:42:
67:4f:aa:7a:4e:a4:1e:97:ec:34:7b:60:18:5e:44:b3:fe:be:
06:7b:23:43:62:5a:97:2a:98:23:6a:55:75:72:bc:56:d0:97:
ad:92:22:3d:cf:c6:0e:74:fc:65:85:9c:fd:d5:60:59:6c:37:
70:7e:d5:7c:e9:22:ed:1b:60:8d:56:19:d9:52:d0:5e:ad:d8:
8a:e7:76:4a:2f:83:3e:28:11:e2:ed:aa:2a:e0:8a:92:7f:b0:
ec:c2:d5:d7:f3:1f:91:25:20:bd:1f:32:78:03:c4:9b:23:bc:
07:35:36:7b:f1:18:dc:33:e0:10:5e:c9:53:5a:da:02:65:54:
da:12:c8:d9:16:e4:0b:f8:86:7c:52:c8:6b:40:15:c3:c7:53:
b2:73:cd:28:51:db:8a:02:48:fe:d0:64:b8:08:0e:5b:fb:49:
79:eb:57:4e:cc:04:bf:67:d4:d5:7b:b5:8f:f8:8b:b1:f0:4a:
ab:bb:29:bf:43:9a:f7:bc:e2:db:a6:31:54:07:d8:b0:30:4c:
bc:67:34:52:22:41:4d:48:be:8f:16:7a:b4:8d:e4:97:43:40:
4f:4c:1c:32:61:6f:9d:fb:0f:e2:78:50:29:54:b4:0c:d2:57:
93:c0:03:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNzpyh3ZQLp5uGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjZDFjYzUtZWQzZS00ZjllLTgxMjktOWQ0ODgzYzBh
N2FlMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
NzEyZjRiNmEtNjI1ZS00YTc4LWExODktMDBkODllZjM0NjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjk0ga3iobSEaCZpDlMDlu6t5neXjs4b7tZx
oqYi180svhDXw05X5P1SMULl3+8B/8BMwLtorRthCfs2qC70ICXRoslW1hIxm9tV
JoGkD8KsEeP9rjZGWe+XvBE1+v3fs72JoZfQatIORauSkFbqH/v5QzfSCDUbjzsP
J7gBWrnshiw27RFzwZqdSlHB78fBNO7OPsvg7MYWjv5QjNPKfLs0WitVirq4Et5X
nVFl9e2u0FtnEmi6dHbC6K7l5IOqqa+zDzOx/3Iy7pix20lUMOhifkmt6e9tHN0w
fnXWf0D7ag893HlOLd9Ujat8ochXJH0wbx+Uz+09hieL0I845wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6rhcGW7F8hYE5f050TKHv67sLVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNk
MWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4ODNjMGE3YWUvODJhYTc0NjktYjQ2YS0z
MTY3LThlNzgtOTI0NTE3OGE4Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWFjZDFjYzUtZWQzZS00ZjllLTgx
MjktOWQ0ODgzYzBhN2FlL2FhY2QxY2M1LWVkM2UtNGY5ZS04MTI5LTlkNDg4M2Mw
YTdhZS5jcmwwHwYDVR0jBBgwFoAUXy5MbZ2JsVhvEqmOhYq6stgeakkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNkMWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4
ODNjMGE3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqifuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIp2tdWFZ0VyqpBDRZLvboZQmdPqnpOpB6X7DR7YBheRLP+vgZ7I0Ni
WpcqmCNqVXVyvFbQl62SIj3Pxg50/GWFnP3VYFlsN3B+1XzpIu0bYI1WGdlS0F6t
2Irndkovgz4oEeLtqirgipJ/sOzC1dfzH5ElIL0fMngDxJsjvAc1NnvxGNwz4BBe
yVNa2gJlVNoSyNkW5Av4hnxSyGtAFcPHU7JzzShR24oCSP7QZLgIDlv7SXnrV07M
BL9n1NV7tY/4i7HwSqu7Kb9Dmve84tumMVQH2LAwTLxnNFIiQU1Ivo8WerSN5JdD
QE9MHDJhb537D+J4UClUtAzSV5PAA4k=
-----END CERTIFICATE-----
Generated at Sat Mar 14 13:50:39 2026 by rpki-client