
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
File: ed98aa57-d32e-3a51-850b-fcb85c818c67.roa (raw, json)
Hash identifier: 4iiFGN+rZtTCWzsLDK/3UwC0p1+qEYUMCGhp2mUxK80=
Subject key identifier: D9:27:61:7B:1B:24:5A:6A:DA:A8:3D:0F:41:2C:1F:A7:C1:CA:4D:98
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F4328584D3E001EC63DF918AE9A362E00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 21928
IP address blocks: 72.250.0.0/17 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:1e:c6:3d:f9:18:ae:9a:36:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=70431c2b-a05b-44cc-ae9e-f234aa1c997c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:93:c7:d9:e8:47:06:be:e7:3c:29:4d:15:
b1:55:a6:97:65:a6:a9:e8:30:d0:26:20:20:cf:37:
86:7d:36:07:b3:c2:a1:c0:c2:30:a9:3b:c2:33:97:
51:06:74:f3:70:ae:51:20:d3:00:b8:77:7a:ef:e8:
74:73:ea:83:69:f2:d5:af:d7:45:3d:ab:70:15:07:
94:bf:cb:a1:c4:f6:ff:d1:51:5d:49:82:50:98:b2:
d0:90:b1:7a:87:59:0f:db:19:c2:4e:53:c2:f8:69:
df:06:ce:58:60:52:b1:a1:0a:13:f5:cc:50:63:d8:
03:ce:b4:36:35:1b:02:e1:1c:48:78:ba:91:09:ce:
68:93:32:2c:49:df:3e:68:25:e6:3b:b9:e4:06:7d:
f4:df:93:52:d6:69:83:a0:04:66:d5:00:02:92:8d:
d9:dd:65:7f:d9:33:ac:d1:48:b9:ad:d3:3b:1a:d8:
a6:52:89:96:22:e0:56:b2:94:10:88:b6:cf:74:cd:
fc:e4:2e:cb:f8:6a:d2:23:34:1a:57:5b:fa:3d:3e:
07:d2:31:16:bc:d3:81:ef:7d:a6:13:4f:1d:6a:fe:
25:5e:98:1c:87:42:ff:da:6f:c4:dd:cc:58:c9:29:
13:d3:04:07:52:bb:61:70:03:06:65:9c:46:6c:b8:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:27:61:7B:1B:24:5A:6A:DA:A8:3D:0F:41:2C:1F:A7:C1:CA:4D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:f1:09:dd:6b:0e:a0:de:d9:00:ee:c7:fd:59:7a:89:3b:fe:
ad:ca:fb:ff:26:aa:5f:bf:9d:41:c6:f6:7f:7f:31:9a:7e:b9:
38:2c:94:0f:c2:3f:62:9a:e6:57:c9:6f:a3:aa:e6:48:2e:13:
70:75:c2:05:fe:15:26:22:cd:80:b7:25:3c:fb:35:b6:9f:d0:
be:2e:11:e8:a8:ed:ce:d8:f4:13:1d:03:1c:36:c1:70:98:cf:
bb:8d:43:ff:0f:54:f8:85:96:2d:89:8f:1f:dd:f4:39:67:09:
00:28:14:b2:7b:cf:16:8a:83:5a:7f:54:05:a5:37:d6:a6:51:
bc:48:83:82:bc:2a:d2:73:4a:b1:b8:f2:69:59:3a:39:19:83:
bc:5f:23:c4:15:89:93:96:67:87:53:02:1e:a9:b0:1b:23:df:
77:75:23:2e:d8:10:11:f6:c4:77:d8:8d:4d:d6:8d:b3:01:b0:
07:a5:e2:66:4c:45:d7:65:00:2e:a8:32:c5:d2:b1:d4:05:ac:
d8:f2:d7:13:19:91:8d:9e:34:1f:6b:53:77:7f:2e:12:1a:ea:
dd:bf:8e:43:ac:30:59:29:bc:4b:9a:f9:77:43:33:18:15:f3:
c3:2f:1f:22:0e:dc:44:6a:1d:1e:74:8c:a0:83:29:1d:98:d6:
4c:af:df:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AB7GPfkYrpo2LgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NzA0MzFjMmItYTA1Yi00NGNjLWFlOWUtZjIzNGFhMWM5OTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bSTx9noRwa+5zwpTRWxVaaXZaap6DDQJiAg
zzeGfTYHs8KhwMIwqTvCM5dRBnTzcK5RINMAuHd67+h0c+qDafLVr9dFPatwFQeU
v8uhxPb/0VFdSYJQmLLQkLF6h1kP2xnCTlPC+GnfBs5YYFKxoQoT9cxQY9gDzrQ2
NRsC4RxIeLqRCc5okzIsSd8+aCXmO7nkBn3035NS1mmDoARm1QACko3Z3WV/2TOs
0Ui5rdM7GtimUomWIuBWspQQiLbPdM385C7L+GrSIzQaV1v6PT4H0jEWvNOB732m
E08dav4lXpgch0L/2m/E3cxYySkT0wQHUrthcAMGZZxGbLiokQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNknYXsbJFpq2qg9D0EsH6fByk2YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZWQ5OGFhNTctZDMyZS0z
YTUxLTg1MGItZmNiODVjODE4YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSPoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/xCd1rDqDe2QDux/1Zeok7/q3K+/8mql+/nUHG9n9/MZp+uTgslA/C
P2Ka5lfJb6Oq5kguE3B1wgX+FSYizYC3JTz7Nbaf0L4uEeio7c7Y9BMdAxw2wXCY
z7uNQ/8PVPiFli2Jjx/d9DlnCQAoFLJ7zxaKg1p/VAWlN9amUbxIg4K8KtJzSrG4
8mlZOjkZg7xfI8QViZOWZ4dTAh6psBsj33d1Iy7YEBH2xHfYjU3WjbMBsAel4mZM
RddlAC6oMsXSsdQFrNjy1xMZkY2eNB9rU3d/LhIa6t2/jkOsMFkpvEua+XdDMxgV
88MvHyIO3ERqHR50jKCDKR2Y1kyv33g=
-----END CERTIFICATE-----
Generated at Sat Mar 21 17:59:49 2026 by rpki-client