
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/ac9a6b75-0944-32be-8141-4eace857ac0e.roa
File: ac9a6b75-0944-32be-8141-4eace857ac0e.roa (raw, json)
Hash identifier: pAUE7iZwTXD6CQUEbHFWBNgQsQ0Og55JysIe7Esgay4=
Subject key identifier: E3:0F:5D:E5:DA:AB:E4:CF:7C:73:95:FE:66:11:33:82:C1:10:FD:52
Certificate issuer: /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial: 010D0C9F4328584E55CF2870AB950AEF831F97C0
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/ac9a6b75-0944-32be-8141-4eace857ac0e.roa
Signing time: Mon 29 Jun 2026 18:29:37 +0000
ROA not before: Mon 29 Jun 2026 18:29:37 +0000
ROA not after: Sun 27 Sep 2026 18:29:37 +0000
asID: 812
IP address blocks: 66.209.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:55:cf:28:70:ab:95:0a:ef:83:1f:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Validity
Not Before: Jun 29 18:29:37 2026 GMT
Not After : Sep 27 18:29:37 2026 GMT
Subject: CN=9757afd8-b29b-43e3-b6c7-a3df4ddd6e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:8c:d4:58:77:85:b4:2a:da:c2:fc:5c:cf:
9e:af:94:5b:5f:c0:00:e0:ae:38:22:00:b2:36:4b:
10:c0:64:9d:0a:8f:ef:93:9d:70:9b:15:b3:90:70:
a7:8b:ff:3f:36:ca:c2:6d:d2:3a:62:db:d4:11:be:
00:35:66:d2:71:a2:33:2c:4a:fb:8f:56:4d:00:ae:
87:15:12:79:b8:ae:1c:28:58:4f:c4:af:1f:cb:e6:
a9:01:59:69:51:72:66:80:18:2b:70:dd:1e:1c:a1:
8f:22:08:80:11:a5:91:67:f7:1e:94:8b:b8:c5:fb:
75:59:e2:90:0b:c0:a6:6d:eb:08:98:df:27:30:71:
9e:2b:f9:3d:b6:ce:9a:df:11:5e:24:14:e1:4d:16:
fb:53:43:cb:e4:15:67:05:8a:ca:52:6c:20:c4:26:
6b:48:54:ea:37:59:c3:a8:37:b9:92:97:f0:ea:85:
b7:41:2b:6a:89:80:1c:aa:78:a3:ee:f0:1b:7d:a2:
65:f2:2a:94:86:da:96:b0:d1:d4:a8:a9:5e:7b:86:
90:cc:8c:f3:5f:a9:df:9a:69:21:2d:32:ca:42:a2:
22:3a:d8:73:d9:69:43:8b:69:a4:e3:0e:3a:6e:a3:
7f:61:3e:f8:46:66:66:28:80:e6:e8:22:f8:21:93:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:5D:E5:DA:AB:E4:CF:7C:73:95:FE:66:11:33:82:C1:10:FD:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/ac9a6b75-0944-32be-8141-4eace857ac0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
X509v3 Authority Key Identifier:
keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:09:77:2d:09:8a:07:82:32:09:95:d6:91:9c:f4:45:d3:74:
07:e6:fa:95:86:44:ae:da:3a:bf:fe:f1:2c:af:12:79:e1:52:
65:b9:45:7d:a4:10:99:05:62:31:29:d9:f1:57:8f:28:28:a7:
59:96:59:8f:fd:9a:c3:35:d4:ac:7e:3f:98:76:e9:1b:7d:c5:
42:3c:68:ec:b1:da:6b:60:ce:e0:8a:8f:3d:31:06:81:50:bc:
ff:ce:9a:77:b8:28:a3:5b:7e:73:6f:6e:a7:5c:f7:d1:7a:53:
42:ab:95:ae:17:a6:78:78:68:e2:96:cf:81:14:b0:59:34:18:
16:1c:3e:02:a5:c6:52:f2:d1:12:07:27:05:96:18:6c:8e:bb:
72:7a:c1:3b:b6:2a:03:b3:eb:ac:e4:a5:97:f1:7a:00:4d:fb:
06:23:0a:97:d8:77:74:fb:c0:d8:fb:97:0e:3d:d9:ad:c0:fd:
da:df:2b:9b:f3:c5:3e:47:90:a7:74:dd:34:55:e8:fa:c2:e7:
e7:fe:62:ff:29:75:99:32:4d:37:56:31:62:9e:c5:60:8f:4f:
54:50:02:47:c9:2c:27:71:a2:17:96:c7:5d:b6:78:77:e5:33:
ec:aa:aa:7a:c7:da:cf:b7:14:3c:80:b0:f7:af:20:12:e9:48:
dc:86:72:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Vzyhwq5UK74Mfl8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0
NzUxMB4XDTI2MDYyOTE4MjkzN1oXDTI2MDkyNzE4MjkzN1owLzEtMCsGA1UEAxMk
OTc1N2FmZDgtYjI5Yi00M2UzLWI2YzctYTNkZjRkZGQ2ZTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqmM1Fh3hbQq2sL8XM+er5RbX8AA4K44IgCy
NksQwGSdCo/vk51wmxWzkHCni/8/NsrCbdI6YtvUEb4ANWbScaIzLEr7j1ZNAK6H
FRJ5uK4cKFhPxK8fy+apAVlpUXJmgBgrcN0eHKGPIgiAEaWRZ/celIu4xft1WeKQ
C8CmbesImN8nMHGeK/k9ts6a3xFeJBThTRb7U0PL5BVnBYrKUmwgxCZrSFTqN1nD
qDe5kpfw6oW3QStqiYAcqnij7vAbfaJl8iqUhtqWsNHUqKlee4aQzIzzX6nfmmkh
LTLKQqIiOthz2WlDi2mk4w46bqN/YT74RmZmKIDm6CL4IZNEyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMPXeXaq+TPfHOV/mYRM4LBEP1SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdj
OTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvYWM5YTZiNzUtMDk0NC0z
MmJlLTgxNDEtNGVhY2U4NTdhYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY3YzkxYWUtMDI2Yy00NzlkLTlj
YjUtZDM4MzdlM2Q0NzUxLzFmN2M5MWFlLTAyNmMtNDc5ZC05Y2I1LWQzODM3ZTNk
NDc1MS5jcmwwHwYDVR0jBBgwFoAUtjEg3DBLGyb0H+RbK5J9YlJ+E8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgz
N2UzZDQ3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtE8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMJdy0JigeCMgmV1pGc9EXTdAfm+pWGRK7aOr/+8SyvEnnhUmW5RX2k
EJkFYjEp2fFXjygop1mWWY/9msM11Kx+P5h26Rt9xUI8aOyx2mtgzuCKjz0xBoFQ
vP/Omne4KKNbfnNvbqdc99F6U0Krla4Xpnh4aOKWz4EUsFk0GBYcPgKlxlLy0RIH
JwWWGGyOu3J6wTu2KgOz66zkpZfxegBN+wYjCpfYd3T7wNj7lw492a3A/drfK5vz
xT5HkKd03TRV6PrC5+f+Yv8pdZkyTTdWMWKexWCPT1RQAkfJLCdxoheWx122eHfl
M+yqqnrH2s+3FDyAsPevIBLpSNyGctE=
-----END CERTIFICATE-----
Generated at Sun Jul 19 15:00:44 2026 by rpki-client