
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa
File: 8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json)
Hash identifier: hx/h1ae3U7hlZ9zBerMXGfjhoxlozHhd24RzKBdkQ2c=
Subject key identifier: 9B:34:41:A6:26:54:CF:09:81:8E:B9:CA:40:A3:77:17:0A:87:4B:17
Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial: 010D0C9F4328584D2644C6AA2955D1837990BF20
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 64123
IP address blocks: 128.254.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:c6:aa:29:55:d1:83:79:90:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=fc68101b-dc41-4cd5-b584-1a245eecaebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:be:a9:2f:03:78:e4:d3:49:96:a9:0f:6f:
6c:e0:0f:cc:52:a3:22:f3:74:87:15:52:4f:29:27:
04:29:c4:14:ea:92:3a:51:e5:a2:e0:35:94:df:eb:
5d:d5:5b:ba:2b:50:c1:69:d6:36:03:be:56:50:65:
6d:b5:50:f1:dc:71:d7:c3:29:25:95:6b:1d:f1:fa:
26:63:5f:9f:08:1c:34:7e:d4:b7:7b:96:66:10:05:
61:4b:03:5c:8d:41:23:ae:07:b5:76:a3:d0:12:b5:
db:16:63:a4:40:ac:4c:13:04:24:83:1d:17:77:13:
66:f8:0d:e6:9f:7a:ba:da:b1:a1:4f:fa:61:6a:11:
e4:14:20:05:29:bf:87:94:8c:07:04:d9:36:f3:5e:
21:95:74:12:b8:00:39:00:73:bf:30:d1:6a:be:93:
cb:2c:10:f9:b6:a4:e3:a9:b1:38:c7:cc:29:a2:4d:
56:db:18:90:d7:ae:b2:4a:77:31:63:70:9a:52:6e:
e2:ac:12:fc:ff:3e:2f:a1:9c:9e:62:7a:a4:63:5b:
87:a2:66:c8:09:1c:18:06:34:4f:b8:7d:df:d5:d8:
62:11:a8:cf:6a:a2:08:08:90:ac:8d:10:45:0f:93:
c1:11:01:87:1b:56:93:f9:fc:54:83:c8:a8:f9:d7:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:41:A6:26:54:CF:09:81:8E:B9:CA:40:A3:77:17:0A:87:4B:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
X509v3 Authority Key Identifier:
keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:69:d3:89:80:2a:5a:a1:ad:56:4b:e6:59:fd:65:2a:1d:76:
48:10:93:0b:d4:13:5a:0c:9b:67:80:ad:31:00:fb:34:9d:85:
e6:9b:df:ee:85:81:bc:d8:ba:5c:e8:96:2b:e8:1c:21:98:02:
48:b1:b9:38:13:77:50:8c:56:4b:7c:ed:a4:ed:e6:4b:74:10:
3f:c6:6c:32:ae:09:97:94:8a:62:2e:c1:4a:4a:4f:ce:00:db:
84:65:2b:55:98:f2:fd:37:b4:b4:09:6c:ab:1e:61:43:16:e6:
d1:9b:f1:64:20:2a:7f:3c:8e:32:e4:de:05:f1:81:3d:01:8c:
6a:98:e2:3f:5e:18:a7:32:02:6a:84:69:47:2b:da:51:b0:3d:
a0:39:e1:0d:90:a2:95:16:4d:ba:5b:c3:60:c1:3f:d4:62:6c:
08:a9:58:ae:cc:6d:6b:af:70:d9:90:bf:43:19:5c:9d:79:cc:
52:53:cf:fe:a6:7c:3d:45:1a:2f:4f:6d:45:1a:eb:42:03:0e:
75:21:fb:77:83:4e:6f:db:99:d3:17:46:df:03:2b:8b:ca:89:
c7:ee:b4:e2:03:49:37:c7:79:6b:7a:4b:af:7b:aa:7e:1e:1b:
eb:88:0a:a9:d6:41:a1:28:a5:ed:18:e3:fd:ca:02:85:5f:26:
b4:3a:d3:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMaqKVXRg3mQvyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZmM2ODEwMWItZGM0MS00Y2Q1LWI1ODQtMWEyNDVlZWNhZWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIW+qS8DeOTTSZapD29s4A/MUqMi83SHFVJP
KScEKcQU6pI6UeWi4DWU3+td1Vu6K1DBadY2A75WUGVttVDx3HHXwykllWsd8fom
Y1+fCBw0ftS3e5ZmEAVhSwNcjUEjrge1dqPQErXbFmOkQKxMEwQkgx0XdxNm+A3m
n3q62rGhT/phahHkFCAFKb+HlIwHBNk2814hlXQSuAA5AHO/MNFqvpPLLBD5tqTj
qbE4x8wpok1W2xiQ166ySncxY3CaUm7irBL8/z4voZyeYnqkY1uHombICRwYBjRP
uH3f1dhiEajPaqIICJCsjRBFD5PBEQGHG1aT+fxUg8io+dfqfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJs0QaYmVM8JgY65ykCjdxcKh0sXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvOGI4M2M1ZDctZGY2OS0z
ZTRlLThkODctMDE5ZmZlNDE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZp04mAKlqhrVZL5ln9ZSoddkgQkwvUE1oMm2eArTEA+zSdheab3+6F
gbzYulzolivoHCGYAkixuTgTd1CMVkt87aTt5kt0ED/GbDKuCZeUimIuwUpKT84A
24RlK1WY8v03tLQJbKseYUMW5tGb8WQgKn88jjLk3gXxgT0BjGqY4j9eGKcyAmqE
aUcr2lGwPaA54Q2QopUWTbpbw2DBP9RibAipWK7MbWuvcNmQv0MZXJ15zFJTz/6m
fD1FGi9PbUUa60IDDnUh+3eDTm/bmdMXRt8DK4vKicfutOIDSTfHeWt6S697qn4e
G+uICqnWQaEope0Y4/3KAoVfJrQ60yw=
-----END CERTIFICATE-----
Generated at Sun Mar 15 10:31:33 2026 by rpki-client