
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
File: 5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa (raw, json)
Hash identifier: 3ti9PDWM+hm1JQhmmgZH65ipmbSfNgjrVT+7Mbf7I2A=
Subject key identifier: 70:11:1B:F9:5B:51:8E:32:D2:3C:CE:22:1E:B6:0F:87:5A:55:B0:7A
Certificate issuer: /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial: 010D0C9F4328584EA5AA69A501A2806B090CE780
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 14333
IP address blocks: 199.168.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:69:a5:01:a2:80:6b:09:0c:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=f770fcca-1976-419a-8d1d-f6f8eb6b1484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:1e:2c:af:5e:e8:ad:fe:9c:8a:3e:46:fc:
62:bf:69:0f:07:8a:97:4a:13:c0:dc:02:9d:fc:77:
11:bc:42:b0:b2:0d:e9:6c:91:c9:0a:d2:1c:7f:25:
f1:9f:68:2d:b6:2f:d7:0c:d7:24:16:31:bc:16:52:
e4:f2:34:66:f1:51:60:61:6a:af:42:00:60:b8:7a:
e6:1a:20:54:df:a7:37:35:95:12:4b:78:89:ca:cd:
32:e0:f0:97:5f:9f:77:6d:93:00:3c:5f:bb:4d:60:
f2:74:b8:d7:77:e3:79:22:10:7b:04:7e:27:41:29:
41:89:07:18:b6:53:ee:39:67:12:bf:94:da:9c:84:
7b:82:45:40:fc:35:f5:69:5a:15:45:7c:aa:88:4f:
51:6c:b4:ee:8f:c2:44:9e:75:00:d3:6a:fd:e5:8e:
59:05:4a:80:47:72:59:72:27:e0:6f:dd:7d:49:87:
c1:92:1c:90:4c:09:11:6c:56:8b:f1:df:13:2a:52:
24:17:3d:44:ed:54:7d:09:c4:45:36:80:52:3f:24:
77:d6:cb:41:71:9e:4e:46:d2:b0:b9:60:1a:7e:f1:
cf:fb:48:fa:f8:cb:cb:ec:cf:24:dc:48:62:fa:e5:
04:f0:e5:7c:60:ce:f4:75:c7:56:74:0d:78:8c:77:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:1B:F9:5B:51:8E:32:D2:3C:CE:22:1E:B6:0F:87:5A:55:B0:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
X509v3 Authority Key Identifier:
keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ae:c2:54:fe:d9:b3:8a:ec:51:a8:df:ca:12:bf:31:96:bc:
5e:65:e1:c1:a2:dc:ba:35:81:66:39:dc:f3:a8:97:64:15:91:
12:9c:11:d4:80:b8:66:a0:7b:a3:f8:df:b6:81:66:00:45:e6:
86:96:83:4a:e7:5c:f3:8d:a6:21:6d:b6:39:56:cc:6e:36:63:
34:91:96:6d:ac:81:5a:ae:73:0b:35:15:66:0f:c6:40:d2:e9:
fa:e3:b5:80:38:66:f2:c8:a8:79:be:69:e3:76:5b:81:38:d1:
07:5d:ae:3a:32:7a:b4:64:21:07:e1:a0:83:03:6e:87:40:f2:
0d:49:f4:b6:ce:c8:1f:0d:19:9b:d5:a6:21:fb:17:f8:39:c9:
5e:21:a0:75:77:89:f9:bc:61:75:a4:64:c7:ba:07:88:84:2a:
77:6b:93:11:1e:b4:c3:2c:26:9a:52:4f:93:d6:ba:80:f6:2b:
54:2d:39:5d:2d:07:97:11:f1:26:c5:b3:8f:a7:f8:9f:ce:f6:
75:ee:33:3f:e5:fe:7a:61:56:9b:ac:74:f3:77:91:f4:69:4e:
6e:ee:2f:69:b7:fc:26:84:29:e6:6d:6c:7f:7f:7a:bf:77:d6:
d3:3e:ec:e2:01:7b:f8:e4:8d:68:b6:db:d5:ea:5e:b4:2b:84:
7c:84:82:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmmlAaKAawkM54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYyN2M5MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0NjUz
MzRiMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
Zjc3MGZjY2EtMTk3Ni00MTlhLThkMWQtZjZmOGViNmIxNDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNoeLK9e6K3+nIo+Rvxiv2kPB4qXShPA3AKd
/HcRvEKwsg3pbJHJCtIcfyXxn2gtti/XDNckFjG8FlLk8jRm8VFgYWqvQgBguHrm
GiBU36c3NZUSS3iJys0y4PCXX593bZMAPF+7TWDydLjXd+N5IhB7BH4nQSlBiQcY
tlPuOWcSv5TanIR7gkVA/DX1aVoVRXyqiE9RbLTuj8JEnnUA02r95Y5ZBUqAR3JZ
cifgb919SYfBkhyQTAkRbFaL8d8TKlIkFz1E7VR9CcRFNoBSPyR31stBcZ5ORtKw
uWAafvHP+0j6+MvL7M8k3Ehi+uUE8OV8YM70dcdWdA14jHeWNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHARG/lbUY4y0jzOIh62D4daVbB6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3
YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNjYzQ2NTMzNGIvNWU5YTY0Y2EtZDljMi0z
YTQwLWIyMTgtNDQyZTJkZWQyMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5MzQtZWJjNi00NGE0LWJi
YTAtYTAzY2M0NjUzMzRiLzhmMjdjOTM0LWViYzYtNDRhNC1iYmEwLWEwM2NjNDY1
MzM0Yi5jcmwwHwYDVR0jBBgwFoAU4bkaPPumXs0F9g4Sq6n1oxOo8WkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNj
YzQ2NTMzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6iAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeuwlT+2bOK7FGo38oSvzGWvF5l4cGi3Lo1gWY53POol2QVkRKcEdSA
uGage6P437aBZgBF5oaWg0rnXPONpiFttjlWzG42YzSRlm2sgVqucws1FWYPxkDS
6frjtYA4ZvLIqHm+aeN2W4E40QddrjoyerRkIQfhoIMDbodA8g1J9LbOyB8NGZvV
piH7F/g5yV4hoHV3ifm8YXWkZMe6B4iEKndrkxEetMMsJppST5PWuoD2K1QtOV0t
B5cR8SbFs4+n+J/O9nXuMz/l/nphVpusdPN3kfRpTm7uL2m3/CaEKeZtbH9/er93
1tM+7OIBe/jkjWi229XqXrQrhHyEgqo=
-----END CERTIFICATE-----
Generated at Thu Aug 6 23:21:11 2026 by rpki-client