
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
File: 9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa (raw, json)
Hash identifier: uqlSYoohwYyFeTxN6HSqcTwKZnFil927tHggancb2Rw=
Subject key identifier: 85:13:96:41:8D:FC:2C:C3:36:3B:EE:81:01:A1:D0:43:48:6D:DC:8D
Certificate issuer: /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial: 010D0C9F4328584D8EF5676EBA248441C84CDCC0
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 36289
IP address blocks: 209.209.24.0/24 maxlen: 24
2602:fcb8::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:67:6e:ba:24:84:41:c8:4c:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=21eb1066-4260-4c32-9b94-340ff9b135e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:d3:45:4e:fd:19:5b:96:4d:5d:8b:53:f6:
16:bc:d0:0f:b0:48:d3:58:9f:a1:0d:2a:81:8f:37:
81:fa:62:04:4b:61:7f:6f:0e:69:25:07:3b:2f:5a:
44:b4:df:6b:e6:6b:39:cd:cb:34:dd:0f:dd:ed:d5:
68:11:0c:b5:4f:d5:0d:3b:a5:d7:a2:24:c1:f7:9f:
7b:a4:d9:d9:77:57:b4:42:f6:19:f5:4d:3f:6f:39:
67:78:e6:76:ca:5b:87:3c:22:4f:81:e3:97:19:f7:
08:60:75:c0:1a:0e:4f:5e:2d:1e:24:13:fd:3f:43:
7e:fb:0d:92:ea:92:02:1e:83:cb:1d:ff:e3:93:ac:
81:87:ed:a9:6c:75:4d:9a:2a:0d:72:7d:78:26:a5:
74:7e:b4:1c:3f:89:67:3b:d7:cc:e1:b5:8f:5f:35:
99:48:28:70:c5:7a:41:b4:a2:81:6c:1f:dc:63:17:
5a:b3:2f:9d:38:b1:87:5f:06:07:d8:87:a6:d2:85:
42:f7:26:63:4f:82:5a:c1:1e:30:17:f7:89:63:32:
a0:82:99:58:b2:74:27:46:b0:64:3b:f7:16:9e:47:
20:42:68:49:d6:23:17:80:78:95:56:3c:3c:ca:98:
79:e3:9d:f8:39:2b:e8:d9:9a:55:d2:d1:0c:e5:4f:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:96:41:8D:FC:2C:C3:36:3B:EE:81:01:A1:D0:43:48:6D:DC:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
X509v3 Authority Key Identifier:
keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.24.0/24
IPv6:
2602:fcb8::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ae:b9:94:a1:d1:22:3a:b4:01:63:41:cf:40:a9:d4:09:b9:
d2:80:48:b3:f0:c9:d1:48:7b:8f:f3:34:10:4a:ab:02:91:a2:
82:60:f2:df:aa:8d:43:63:bf:04:f7:6e:56:fc:f9:bd:0b:0d:
eb:46:66:30:32:95:d6:90:86:92:c9:17:85:12:63:e6:d9:3d:
e6:be:e9:7e:0a:2c:50:f0:e9:f4:63:8b:33:ae:23:f7:4f:2b:
84:d8:39:eb:30:11:39:b1:cf:9c:91:32:54:94:29:33:48:f5:
b9:50:2c:c5:dc:1e:5d:1e:0c:de:aa:74:05:42:ec:d7:3c:73:
35:e7:53:90:cf:bb:0b:eb:93:d7:43:f0:39:0a:46:23:86:e9:
0c:c8:6e:73:71:b5:2e:c4:15:61:2d:9f:76:0d:e0:f1:2d:75:
07:48:e6:0e:e6:2a:eb:63:20:56:4b:60:e8:15:88:29:43:5b:
17:cf:01:bf:90:16:66:d9:9f:ef:03:3b:7f:f1:c7:d1:28:d1:
7c:94:15:83:a3:8f:d4:91:71:53:8d:62:06:18:eb:4f:08:2c:
e6:08:2c:80:7b:21:42:2d:6b:50:01:6d:2e:72:66:f1:31:0d:
6b:a1:c0:7f:bc:2e:be:38:cd:57:df:2a:52:ef:8b:04:00:bf:
ed:d1:29:18
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2O9WduuiSEQchM3MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAwNjkwYTctMTk1Ny00NWUyLTg3NDQtZWU5NzM1YjA3
MzE5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MjFlYjEwNjYtNDI2MC00YzMyLTliOTQtMzQwZmY5YjEzNWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMHTRU79GVuWTV2LU/YWvNAPsEjTWJ+hDSqB
jzeB+mIES2F/bw5pJQc7L1pEtN9r5ms5zcs03Q/d7dVoEQy1T9UNO6XXoiTB9597
pNnZd1e0QvYZ9U0/bzlneOZ2yluHPCJPgeOXGfcIYHXAGg5PXi0eJBP9P0N++w2S
6pICHoPLHf/jk6yBh+2pbHVNmioNcn14JqV0frQcP4lnO9fM4bWPXzWZSChwxXpB
tKKBbB/cYxdasy+dOLGHXwYH2Iem0oVC9yZjT4JawR4wF/eJYzKggplYsnQnRrBk
O/cWnkcgQmhJ1iMXgHiVVjw8yph54534OSvo2ZpV0tEM5U8wLQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFIUTlkGN/CzDNjvugQGh0ENIbdyNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2
OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3MzViMDczMTkvOWE3ZTVkMDUtMTFjMi0z
ODUxLWIwMzgtMmJjYzRlNWNkYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwNjkwYTctMTk1Ny00NWUyLTg3
NDQtZWU5NzM1YjA3MzE5LzcwMDY5MGE3LTE5NTctNDVlMi04NzQ0LWVlOTczNWIw
NzMxOS5jcmwwHwYDVR0jBBgwFoAUIamavUUq0vNcIiwf8NmYuXDa2n0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3
MzViMDczMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0dEYMA4E
AgACMAgDBgQmAvy4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJrrmUodEiOrQBY0HPQKnUCbnSgEiz8MnR
SHuP8zQQSqsCkaKCYPLfqo1DY78E925W/Pm9Cw3rRmYwMpXWkIaSyReFEmPm2T3m
vul+CixQ8On0Y4szriP3TyuE2DnrMBE5sc+ckTJUlCkzSPW5UCzF3B5dHgzeqnQF
QuzXPHM151OQz7sL65PXQ/A5CkYjhukMyG5zcbUuxBVhLZ92DeDxLXUHSOYO5irr
YyBWS2DoFYgpQ1sXzwG/kBZm2Z/vAzt/8cfRKNF8lBWDo4/UkXFTjWIGGOtPCCzm
CCyAeyFCLWtQAW0ucmbxMQ1rocB/vC6+OM1X3ypS74sEAL/t0SkY
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:20:05 2026 by rpki-client