
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa
File: 4b577272-57d8-3c62-8756-461fd87cbaf9.roa (raw, json)
Hash identifier: bQLkpmdRsl7+1RqBzl1BTF8MvMyV+5X1SoJw9RtMuuc=
Subject key identifier: 94:29:5B:22:8A:17:FF:CE:A0:D3:AE:C5:6F:E8:CC:4B:05:DD:50:58
Certificate issuer: /CN=018f0304-387a-4819-8fa5-ca228a4ecf70
Certificate serial: 010D0C9F4328584D624A60030E644DF5EF0A1BC0
Authority key identifier: FF:A6:A3:E9:42:08:B9:1C:5C:AE:1B:B7:6E:BA:9A:2B:0A:41:57:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa
Signing time: Fri 03 Apr 2026 13:00:30 +0000
ROA not before: Fri 03 Apr 2026 13:00:30 +0000
ROA not after: Thu 02 Jul 2026 13:00:30 +0000
asID: 29838
IP address blocks: 142.248.239.0/24 maxlen: 24
2602:f78f::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:62:4a:60:03:0e:64:4d:f5:ef:0a:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018f0304-387a-4819-8fa5-ca228a4ecf70
Validity
Not Before: Apr 3 13:00:30 2026 GMT
Not After : Jul 2 13:00:30 2026 GMT
Subject: CN=8e59c880-328d-46ac-822e-b4ec01a425af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:8e:d2:ac:33:25:ab:21:9f:e9:12:a4:b6:
32:ec:49:5c:2c:6d:00:e6:d0:b2:c1:b5:a7:a3:ab:
23:2f:9d:6c:52:a7:8f:8d:99:a1:b0:b8:78:ff:60:
fe:e9:38:0f:17:d1:d4:5e:50:40:36:d9:ee:77:7f:
9a:8a:f4:7d:af:05:6a:0d:4a:a0:2c:0c:10:fa:db:
b9:39:9e:63:19:b5:5a:8f:9f:47:3c:b3:d6:de:f8:
35:cf:93:63:6d:f8:11:95:56:d4:26:08:a0:2e:6d:
58:cf:51:e9:75:ad:0a:49:b5:4e:d9:12:dc:9e:2e:
90:da:71:9e:72:0f:42:ef:83:56:c4:fa:06:76:8c:
ee:27:8c:09:12:be:d9:45:c8:e4:d9:c0:8a:ec:11:
24:4e:b6:91:07:5c:65:e9:52:2f:39:f4:49:8f:be:
d3:2f:d2:bf:19:7d:3d:7b:30:a1:ec:1b:4e:e5:bf:
13:7e:0d:d0:b8:52:87:f0:d4:fa:0d:ac:4a:7c:14:
f1:45:39:4d:97:dc:7b:99:20:9a:80:2f:f8:74:90:
db:44:80:28:bb:7c:98:75:00:0b:81:94:5a:66:a0:
76:ab:11:c1:87:96:8b:0f:db:55:13:cf:60:bc:b9:
8f:f8:0e:23:aa:74:9b:d2:5f:3f:8e:39:00:76:81:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:5B:22:8A:17:FF:CE:A0:D3:AE:C5:6F:E8:CC:4B:05:DD:50:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.crl
X509v3 Authority Key Identifier:
keyid:FF:A6:A3:E9:42:08:B9:1C:5C:AE:1B:B7:6E:BA:9A:2B:0A:41:57:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.239.0/24
IPv6:
2602:f78f::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:7c:96:c1:77:06:c1:3a:be:f1:61:c9:2a:0a:f7:fb:ba:3e:
e6:7e:c3:a2:0b:66:ae:09:f3:25:5a:9e:e0:0a:fb:95:a8:76:
2d:e8:fd:9a:58:9f:6f:d1:38:b2:0c:52:3b:7e:0f:96:ef:cd:
2d:33:40:e5:e0:f4:63:8f:e6:49:df:3a:f2:c4:2d:fd:5d:2e:
80:cd:42:68:1d:dc:32:19:32:41:8b:da:db:1c:cb:d6:c0:04:
ea:09:54:d0:42:54:06:37:28:04:98:30:e8:3c:a1:38:6e:07:
4a:75:9c:ba:67:58:8f:62:e1:cf:d9:28:67:c5:2d:2b:bb:72:
1f:c8:87:cb:d7:73:de:3b:f8:f8:82:79:4f:3e:2b:37:a5:3e:
43:fa:ad:ee:0b:93:f4:bb:d8:49:35:69:21:b6:ec:1c:62:53:
38:9a:96:88:d0:e1:7c:3c:28:73:4d:8d:96:11:e4:b0:eb:17:
68:b6:a0:d2:b5:bd:9e:a5:c2:2c:a6:68:02:4c:db:e1:12:6a:
66:bc:67:6c:3b:95:58:f1:0b:9a:d3:43:03:e2:75:3d:1d:79:
0e:f9:66:e6:93:41:5b:da:7e:11:e1:34:b4:b9:df:f5:f6:41:
bb:93:33:b7:4d:f0:0f:bd:0d:0f:d0:b2:96:6d:08:21:5d:d8:
16:73:0e:07
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1iSmADDmRN9e8KG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE4ZjAzMDQtMzg3YS00ODE5LThmYTUtY2EyMjhhNGVj
ZjcwMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk
OGU1OWM4ODAtMzI4ZC00NmFjLTgyMmUtYjRlYzAxYTQyNWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzauO0qwzJashn+kSpLYy7ElcLG0A5tCywbWn
o6sjL51sUqePjZmhsLh4/2D+6TgPF9HUXlBANtnud3+aivR9rwVqDUqgLAwQ+tu5
OZ5jGbVaj59HPLPW3vg1z5NjbfgRlVbUJgigLm1Yz1Hpda0KSbVO2RLcni6Q2nGe
cg9C74NWxPoGdozuJ4wJEr7ZRcjk2cCK7BEkTraRB1xl6VIvOfRJj77TL9K/GX09
ezCh7BtO5b8Tfg3QuFKH8NT6DaxKfBTxRTlNl9x7mSCagC/4dJDbRIAou3yYdQAL
gZRaZqB2qxHBh5aLD9tVE89gvLmP+A4jqnSb0l8/jjkAdoFyiwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFJQpWyKKF//OoNOuxW/ozEsF3VBYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMThm
MDMwNC0zODdhLTQ4MTktOGZhNS1jYTIyOGE0ZWNmNzAvNGI1NzcyNzItNTdkOC0z
YzYyLTg3NTYtNDYxZmQ4N2NiYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDE4ZjAzMDQtMzg3YS00ODE5LThm
YTUtY2EyMjhhNGVjZjcwLzAxOGYwMzA0LTM4N2EtNDgxOS04ZmE1LWNhMjI4YTRl
Y2Y3MC5jcmwwHwYDVR0jBBgwFoAU/6aj6UIIuRxcrhu3brqaKwpBV7EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMThmMDMwNC0zODdhLTQ4MTktOGZhNS1jYTIy
OGE0ZWNmNzAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAjvjvMA4E
AgACMAgDBgQmAvePADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCifJbBdwbBOr7xYckqCvf7uj7mfsOiC2au
CfMlWp7gCvuVqHYt6P2aWJ9v0TiyDFI7fg+W780tM0Dl4PRjj+ZJ3zryxC39XS6A
zUJoHdwyGTJBi9rbHMvWwATqCVTQQlQGNygEmDDoPKE4bgdKdZy6Z1iPYuHP2Shn
xS0ru3IfyIfL13PeO/j4gnlPPis3pT5D+q3uC5P0u9hJNWkhtuwcYlM4mpaI0OF8
PChzTY2WEeSw6xdotqDStb2epcIspmgCTNvhEmpmvGdsO5VY8Qua00MD4nU9HXkO
+Wbmk0Fb2n4R4TS0ud/19kG7kzO3TfAPvQ0P0LKWbQghXdgWcw4H
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:13 2026 by rpki-client