
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
File: b0219dec-4d15-370a-af72-f5dd0679b13a.roa (raw, json)
Hash identifier: rJ8/Yd6zvPAPXbJRrKHVoWy/fhikqVv07EDvrjRZpSg=
Subject key identifier: DF:88:0D:52:7F:21:6E:15:73:56:D2:6A:AE:27:E9:B3:E7:9B:5C:28
Certificate issuer: /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Certificate serial: 010D0C9F4328584D91C00F6E065DD444483E6C80
Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 20388
IP address blocks: 68.70.123.0/24 maxlen: 24
148.59.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 02 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:0f:6e:06:5d:d4:44:48:3e:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=6fd217fb-cac3-4d98-8358-f28f679b9981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:6b:51:df:9e:81:81:e9:df:12:18:17:05:
25:21:0e:9e:78:f8:a7:3d:02:67:3e:af:f7:64:65:
f1:4c:36:9b:8d:a7:6d:b5:c7:1c:24:a7:86:bc:2e:
07:bf:f2:36:55:b5:95:55:97:b9:7d:45:67:25:13:
78:62:41:d0:01:89:de:ca:77:00:a8:ec:ef:30:a6:
5d:8f:89:6d:a1:14:43:49:42:c1:1f:96:79:77:1e:
d5:e4:37:c8:54:0d:42:0a:86:99:e2:d2:85:a6:44:
f2:70:33:62:87:8d:57:e9:5d:e1:c9:2b:4c:69:30:
0a:4c:4b:b9:e5:e3:0e:c8:7d:1c:af:0a:f1:8e:2e:
2f:44:9a:70:61:7a:0b:20:5e:f7:b0:d4:93:68:9c:
ec:82:66:cb:1f:41:ec:b5:2c:97:af:f8:9d:06:5f:
2c:0f:e5:5a:60:22:33:2d:bb:66:91:ae:1a:57:fb:
f1:f1:9c:85:e0:71:53:cc:9d:10:9c:0c:c0:d9:38:
8c:fe:2b:91:24:37:c3:77:c1:4d:b6:e4:0d:7c:5a:
61:3f:3f:c1:a5:6a:fc:81:2d:cd:69:4a:bc:69:16:
18:25:59:85:6d:2f:a3:5d:8a:20:5b:04:c5:79:06:
7a:54:0d:d2:9d:9e:ec:ea:15:0f:c1:71:d9:c9:79:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:0D:52:7F:21:6E:15:73:56:D2:6A:AE:27:E9:B3:E7:9B:5C:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
X509v3 Authority Key Identifier:
keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.123.0/24
148.59.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:4e:34:47:fc:bc:23:f4:c6:ce:2d:bf:9e:69:04:37:6f:99:
96:21:26:df:ce:00:5f:90:48:83:2d:d9:3b:e7:0e:a0:70:44:
27:d9:b8:78:61:9d:42:ad:a4:13:14:32:7e:fd:31:b1:ee:d5:
98:3a:48:9d:3f:cc:9a:c3:28:da:0d:4a:9c:86:4d:21:5c:16:
95:f6:9c:4e:9a:60:bd:aa:24:fa:b4:69:d3:8f:4d:94:5a:df:
3a:c8:7a:1b:63:82:ce:d8:1b:a2:6c:5a:7e:34:60:be:13:c7:
bf:65:22:15:93:20:b7:cc:7d:82:a0:8f:02:46:bf:b3:76:67:
3f:b8:fa:26:f3:c9:ec:d3:12:a5:de:d0:af:50:5f:6c:71:75:
92:0b:33:65:e3:54:4b:81:51:4f:c0:bd:5c:4c:c4:76:9b:bf:
6a:5f:ba:03:bc:ca:e9:fa:d2:27:61:16:a6:fe:8a:21:22:a3:
8d:5c:0d:d0:c6:15:88:66:1d:61:51:9f:62:b6:92:bb:c7:98:
f6:fc:94:5d:68:e3:33:53:05:7a:66:92:2f:d2:1f:11:3a:40:
b3:3d:04:5d:25:80:58:76:7c:49:09:1c:0a:25:6e:8a:ec:60:
37:19:ae:43:45:31:d7:8e:d5:a7:39:20:b5:1e:f5:3b:02:8a:
2d:dd:2e:54
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2RwA9uBl3UREg+bIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4ZmI0YzQtMGJjZS00NDM5LWFjNzAtMTJiMWFiN2Mz
ZGQ3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
NmZkMjE3ZmItY2FjMy00ZDk4LTgzNTgtZjI4ZjY3OWI5OTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDNrUd+egYHp3xIYFwUlIQ6eePinPQJnPq/3
ZGXxTDabjadttcccJKeGvC4Hv/I2VbWVVZe5fUVnJRN4YkHQAYneyncAqOzvMKZd
j4ltoRRDSULBH5Z5dx7V5DfIVA1CCoaZ4tKFpkTycDNih41X6V3hyStMaTAKTEu5
5eMOyH0crwrxji4vRJpwYXoLIF73sNSTaJzsgmbLH0HstSyXr/idBl8sD+VaYCIz
Lbtmka4aV/vx8ZyF4HFTzJ0QnAzA2TiM/iuRJDfDd8FNtuQNfFphPz/BpWr8gS3N
aUq8aRYYJVmFbS+jXYogWwTFeQZ6VA3SnZ7s6hUPwXHZyXlP7wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFN+IDVJ/IW4Vc1bSaq4n6bPnm1woMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZThm
YjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIxYWI3YzNkZDcvYjAyMTlkZWMtNGQxNS0z
NzBhLWFmNzItZjVkZDA2NzliMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGU4ZmI0YzQtMGJjZS00NDM5LWFj
NzAtMTJiMWFiN2MzZGQ3L2RlOGZiNGM0LTBiY2UtNDQzOS1hYzcwLTEyYjFhYjdj
M2RkNy5jcmwwHwYDVR0jBBgwFoAUsFydYYfgTD3CaLN8uM5RmYyIqDMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZThmYjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIx
YWI3YzNkZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAREZ7AwQA
lDuUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJpONEf8vCP0xs4tv55pBDdvmZYhJt/OAF+QSIMt2TvnDqBw
RCfZuHhhnUKtpBMUMn79MbHu1Zg6SJ0/zJrDKNoNSpyGTSFcFpX2nE6aYL2qJPq0
adOPTZRa3zrIehtjgs7YG6JsWn40YL4Tx79lIhWTILfMfYKgjwJGv7N2Zz+4+ibz
yezTEqXe0K9QX2xxdZILM2XjVEuBUU/AvVxMxHabv2pfugO8yun60idhFqb+iiEi
o41cDdDGFYhmHWFRn2K2krvHmPb8lF1o4zNTBXpmki/SHxE6QLM9BF0lgFh2fEkJ
HAolborsYDcZrkNFMdeO1ac5ILUe9TsCii3dLlQ=
-----END CERTIFICATE-----
Generated at Fri May 1 17:01:31 2026 by rpki-client