
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa
File: 88f16770-79cb-31a3-a635-4b9256702cdb.roa (raw, json)
Hash identifier: 0z/9hb+Bn0QEUO9GnQxtYForg4+BKm8zALLV3q+Uo68=
Subject key identifier: 34:F2:50:91:AD:CF:08:31:13:CD:AA:57:D2:2D:3C:7F:D7:EE:CE:01
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F4328584DE41B2202297F39E53B42DE00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa
Signing time: Wed 20 May 2026 01:00:25 +0000
ROA not before: Wed 20 May 2026 01:00:25 +0000
ROA not after: Tue 18 Aug 2026 01:00:25 +0000
asID: 10794
IP address blocks: 171.162.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e4:1b:22:02:29:7f:39:e5:3b:42:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: May 20 01:00:25 2026 GMT
Not After : Aug 18 01:00:25 2026 GMT
Subject: CN=4acaece1-1916-44b8-adb6-3f09d8b239aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:fc:1b:f6:64:7b:40:86:99:48:b1:c2:05:
79:b3:41:93:66:93:46:26:94:33:6b:d1:d0:61:9d:
96:e5:23:7b:21:b0:5e:de:a5:97:05:f6:02:d3:40:
9e:79:66:89:9d:4a:4c:08:6c:1f:38:7d:b4:27:00:
df:85:48:ef:d0:15:a9:17:5e:af:3c:66:4c:30:fa:
2a:ae:2a:17:8c:a6:90:1b:1c:de:d1:14:ba:11:e9:
52:dd:73:0d:36:24:5e:e0:11:3c:4f:a5:20:54:27:
f5:63:7d:21:15:e4:61:30:6b:99:56:3d:e4:1f:a6:
e7:3e:6e:40:b2:e7:3a:90:48:9f:e4:a5:f2:6c:ae:
f6:6c:db:2e:5b:6f:ba:69:71:e8:f1:99:6c:39:75:
24:61:29:d5:1c:c5:87:67:f1:64:08:d0:ca:4a:c0:
0a:44:cb:e2:2e:94:b6:5a:e2:77:95:2c:33:d3:3a:
b1:79:bc:1d:18:6c:c1:f5:68:1f:d9:39:8d:32:ed:
b3:8c:0e:0a:ef:13:73:8f:5d:cb:12:89:26:da:b4:
e1:0b:a5:d3:07:51:35:d5:15:aa:81:b6:77:84:f9:
c3:82:20:bf:86:b4:59:39:be:60:7e:ad:f3:6c:5b:
ad:df:ae:92:d8:af:99:4b:43:25:6b:9e:98:78:90:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:50:91:AD:CF:08:31:13:CD:AA:57:D2:2D:3C:7F:D7:EE:CE:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.162.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:22:35:1a:79:9b:29:36:fa:87:31:d7:d3:5e:37:98:05:93:
a7:d7:d1:26:0b:a5:72:c3:cc:b9:59:3d:b1:b5:b6:0d:0e:ac:
be:99:7a:57:8c:1c:cc:1c:83:0e:1b:51:6b:52:c1:a7:b2:40:
10:d6:04:4f:47:d7:41:1d:01:98:b8:ea:17:df:7b:9d:7d:d0:
9b:69:95:1b:58:c6:0c:23:33:cc:b3:5f:17:5c:e7:ed:75:3c:
e6:a2:bb:b8:d6:d4:d2:7d:a9:11:6a:0f:6f:c5:fd:7a:7c:47:
e4:82:70:9c:73:cf:c1:cc:90:8d:42:d4:53:d1:6c:d6:c1:9b:
03:cc:36:19:8b:b3:9a:53:01:9c:0a:85:cc:ce:e5:71:ee:ca:
d2:42:25:bc:3f:dd:8d:6f:59:96:d2:fb:57:40:49:e3:e8:22:
db:cd:0e:f3:66:27:60:f0:04:9f:0d:56:fa:e2:38:d7:26:84:
d6:39:29:3d:ca:36:01:64:f7:67:0d:6a:d6:6a:6e:40:87:bb:
8b:0a:4a:a6:b8:ee:99:1a:15:e1:64:60:25:48:f1:a5:96:33:
de:33:20:41:03:2e:e9:ac:32:8e:d4:2e:59:51:0e:cb:18:24:
32:da:32:a4:6a:09:e8:61:00:fd:f5:24:62:8c:0f:7b:80:3b:
f3:c9:fa:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyICKX855TtC3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
NGFjYWVjZTEtMTkxNi00NGI4LWFkYjYtM2YwOWQ4YjIzOWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8f8G/Zke0CGmUixwgV5s0GTZpNGJpQza9HQ
YZ2W5SN7IbBe3qWXBfYC00CeeWaJnUpMCGwfOH20JwDfhUjv0BWpF16vPGZMMPoq
rioXjKaQGxze0RS6EelS3XMNNiRe4BE8T6UgVCf1Y30hFeRhMGuZVj3kH6bnPm5A
suc6kEif5KXybK72bNsuW2+6aXHo8ZlsOXUkYSnVHMWHZ/FkCNDKSsAKRMviLpS2
WuJ3lSwz0zqxebwdGGzB9Wgf2TmNMu2zjA4K7xNzj13LEokm2rThC6XTB1E11RWq
gbZ3hPnDgiC/hrRZOb5gfq3zbFut366S2K+ZS0Mla56YeJA9swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTyUJGtzwgxE82qV9ItPH/X7s4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvODhmMTY3NzAtNzljYi0z
MWEzLWE2MzUtNGI5MjU2NzAyY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwiNRp5myk2+ocx19NeN5gFk6fX0SYLpXLDzLlZPbG1tg0OrL6ZeleM
HMwcgw4bUWtSwaeyQBDWBE9H10EdAZi46hffe5190JtplRtYxgwjM8yzXxdc5+11
POaiu7jW1NJ9qRFqD2/F/Xp8R+SCcJxzz8HMkI1C1FPRbNbBmwPMNhmLs5pTAZwK
hczO5XHuytJCJbw/3Y1vWZbS+1dASePoItvNDvNmJ2DwBJ8NVvriONcmhNY5KT3K
NgFk92cNatZqbkCHu4sKSqa47pkaFeFkYCVI8aWWM94zIEEDLumsMo7ULllRDssY
JDLaMqRqCehhAP31JGKMD3uAO/PJ+ok=
-----END CERTIFICATE-----
Generated at Thu May 21 18:33:32 2026 by rpki-client