
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
File: 20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json)
Hash identifier: msp8EHE02si+YG2gSoo7mTMLxofGzc5s7z6i+u6Ai+0=
Subject key identifier: 5B:30:27:26:C5:EE:82:13:66:45:BA:E3:B1:B2:83:53:31:AA:2C:3B
Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial: 010D0C9F4328584C751C2165F689D01B772B6D80
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 396982
IP address blocks: 147.124.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1c:21:65:f6:89:d0:1b:77:2b:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=c39bfd72-ee14-4716-8de6-5306da22f053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:4c:f5:27:1f:82:35:3f:78:52:a0:5d:16:
8f:30:11:94:e1:fd:d7:8d:43:cd:bd:04:a5:3d:f5:
8b:6b:f9:0b:84:41:1d:dd:47:35:47:07:ef:84:f9:
60:eb:96:e1:a4:8f:36:9e:c4:33:5c:72:22:a0:6d:
05:79:ce:6c:78:4c:9c:f7:74:3a:b5:91:64:18:ce:
d6:ec:53:d8:dd:52:52:4b:40:4c:ba:85:e9:6a:cf:
c1:87:5d:b5:5c:c5:d4:81:85:38:de:2b:cb:b9:4e:
ef:10:32:33:c6:a9:9b:1b:83:21:7e:e1:00:68:91:
30:69:05:1e:a3:54:ac:e7:a6:3a:1c:25:56:8b:7f:
18:fc:f1:a5:c9:38:0b:c6:4d:c3:9b:fc:35:a7:54:
6b:98:95:ef:ce:a5:d8:e2:6c:f8:25:ff:cb:8a:46:
8e:c8:a7:9f:b1:8d:fe:56:95:4b:4f:c0:8e:b6:64:
67:f6:c6:1a:47:e8:d3:09:67:49:56:18:06:49:af:
ab:eb:48:e6:54:67:da:8a:f3:21:b1:a5:96:53:d7:
50:90:f9:20:4f:ad:d7:1b:15:68:c5:17:d2:bd:0e:
0f:50:78:39:a2:1f:77:9b:1f:db:4b:c0:4c:d4:b5:
07:b9:38:06:22:87:d7:36:9b:35:c6:b4:bb:e6:4c:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:27:26:C5:EE:82:13:66:45:BA:E3:B1:B2:83:53:31:AA:2C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
X509v3 Authority Key Identifier:
keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:8d:2a:f6:1d:59:52:c9:05:bd:49:0f:09:ba:93:13:9b:6d:
9a:fa:d0:18:57:be:57:d9:9c:fa:9d:d4:f7:00:90:af:1e:6d:
ae:c6:6c:74:9d:6f:91:46:76:0e:ee:97:21:5b:1c:31:f5:90:
ec:88:ec:54:1b:4e:10:6f:46:48:d5:c8:47:00:e6:a3:f6:78:
00:75:da:99:cb:ee:53:e8:c9:16:3e:5d:3e:6c:ad:83:f7:07:
18:7d:75:21:75:2b:61:e0:79:78:70:d6:71:6c:54:03:1a:ca:
d2:b3:80:01:2e:a2:20:49:a7:7a:33:81:ad:c0:cb:72:c8:19:
64:bd:a1:dc:5a:a5:ed:54:35:31:7b:b2:6e:37:a3:1b:43:c9:
fc:b1:db:9b:16:14:5f:df:00:95:fe:56:d7:ad:cd:10:dd:3f:
26:dd:6a:73:88:b7:27:2a:6e:f3:78:3d:62:18:5e:3d:64:5d:
dd:a7:8a:28:e7:24:c9:a8:7d:62:26:8b:61:1c:4c:bb:e3:88:
93:4b:93:aa:ae:c2:3a:28:83:2f:0b:f0:3a:0e:b9:01:d9:d4:
39:42:88:40:13:29:9f:5d:c9:66:e7:6c:e7:f8:e0:ce:c0:c9:
a8:e7:d2:c4:e1:d1:08:4c:48:28:74:9e:8d:8b:bf:ad:d6:fc:
b9:a8:f5:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HCFl9onQG3crbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk
ZjA2MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk
YzM5YmZkNzItZWUxNC00NzE2LThkZTYtNTMwNmRhMjJmMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF1M9ScfgjU/eFKgXRaPMBGU4f3XjUPNvQSl
PfWLa/kLhEEd3Uc1RwfvhPlg65bhpI82nsQzXHIioG0Fec5seEyc93Q6tZFkGM7W
7FPY3VJSS0BMuoXpas/Bh121XMXUgYU43ivLuU7vEDIzxqmbG4MhfuEAaJEwaQUe
o1Ss56Y6HCVWi38Y/PGlyTgLxk3Dm/w1p1RrmJXvzqXY4mz4Jf/LikaOyKefsY3+
VpVLT8COtmRn9sYaR+jTCWdJVhgGSa+r60jmVGfaivMhsaWWU9dQkPkgT63XGxVo
xRfSvQ4PUHg5oh93mx/bS8BM1LUHuTgGIofXNps1xrS75kxs2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFswJybF7oITZkW647Gyg1Mxqiw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm
ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z
OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj
MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2
ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4
NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaNKvYdWVLJBb1JDwm6kxObbZr60BhXvlfZnPqd1PcAkK8eba7GbHSd
b5FGdg7ulyFbHDH1kOyI7FQbThBvRkjVyEcA5qP2eAB12pnL7lPoyRY+XT5srYP3
Bxh9dSF1K2HgeXhw1nFsVAMaytKzgAEuoiBJp3ozga3Ay3LIGWS9odxape1UNTF7
sm43oxtDyfyx25sWFF/fAJX+VtetzRDdPybdanOItycqbvN4PWIYXj1kXd2niijn
JMmofWImi2EcTLvjiJNLk6quwjoogy8L8DoOuQHZ1DlCiEATKZ9dyWbnbOf44M7A
yajn0sTh0QhMSCh0no2Lv63W/Lmo9Zw=
-----END CERTIFICATE-----
Generated at Sun Feb 22 22:04:28 2026 by rpki-client