
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
File: 8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa (raw, json)
Hash identifier: FEzbOxvrJjnOOn93BHxsJmPQxBlc/SjrWsImBE3RG6E=
Subject key identifier: BB:FF:4A:7F:4A:DC:14:1A:49:51:63:3B:80:44:C6:66:4A:A4:F3:3A
Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial: 010D0C9F4328584D2A74BE45620E47157193FC80
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 683
IP address blocks: 192.5.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:be:45:62:0e:47:15:71:93:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=b5474626-d9e7-475e-8139-f42575db4c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:ac:85:69:e7:c5:18:ba:e6:9c:36:f7:f8:
cc:22:fd:ab:f3:99:80:c2:c8:36:ad:90:b1:d6:bd:
60:94:65:f0:20:cb:4c:dd:17:e9:fb:db:2a:60:9d:
aa:61:45:03:4e:7d:9d:de:39:1d:6e:b9:d4:d4:b9:
02:c5:45:26:fc:21:83:6d:f0:f6:94:28:03:01:e5:
59:84:a4:94:d6:b0:68:42:b1:88:b4:39:64:bf:b3:
bf:fe:b3:65:30:44:5d:0f:c9:c6:80:24:2b:ae:d9:
60:5a:a2:9a:e9:6a:1b:7e:a4:79:c6:5d:3b:b6:4f:
62:f0:5c:5b:f3:a4:8b:65:f7:dc:5d:5a:94:a3:2e:
a2:7b:a3:1d:31:cc:e0:79:ec:f5:68:7d:29:fc:98:
ab:b6:67:70:04:56:a7:b8:0c:de:14:69:73:72:c7:
c7:c0:3f:b3:d3:62:c0:69:51:35:c5:cd:b7:1f:92:
7c:04:ed:0b:cb:84:10:d4:23:5c:c5:b4:3b:84:15:
b5:c6:ba:32:b9:51:45:ea:3e:cb:b3:2c:e6:9a:9b:
d7:4e:e1:5c:c5:d5:2c:57:60:74:7a:73:aa:a3:50:
e7:71:86:df:b9:a6:18:2c:57:de:1e:ad:ec:1f:e5:
45:76:d7:1e:87:fa:74:4d:c6:a5:5e:89:f4:0b:82:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:4A:7F:4A:DC:14:1A:49:51:63:3B:80:44:C6:66:4A:A4:F3:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
X509v3 Authority Key Identifier:
keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:11:a9:3c:07:26:68:25:ac:61:95:a7:bd:95:28:4e:89:b7:
d1:3d:06:4d:6d:22:c5:a4:18:70:d2:e1:a7:12:f0:6c:96:3f:
2c:3c:bd:ec:68:c7:6e:ce:78:d0:7b:6b:d1:93:b3:77:c7:08:
e6:dc:60:54:61:74:c7:b2:80:90:85:23:22:bd:15:fe:b5:4c:
1b:e7:e4:82:93:0b:5d:7f:6c:83:a5:7e:e1:f9:ab:05:46:93:
b2:84:6a:17:58:c5:e6:be:fb:a1:37:36:fd:67:49:c5:68:bd:
ea:39:dd:0b:80:7d:84:8e:c9:6d:c9:9b:d2:80:96:d9:22:40:
01:d7:24:be:8b:dd:40:41:7a:1e:38:1f:9e:93:89:b4:4c:e7:
2b:89:51:cf:17:37:69:0f:65:0e:77:f7:92:43:bf:94:1c:10:
31:7f:7a:d4:54:6f:c0:41:0d:4f:19:35:f0:b4:5e:a2:d1:f1:
1b:93:31:91:20:d5:da:67:92:33:94:8a:ca:84:a4:cc:10:bc:
93:36:8b:e9:53:1a:a7:9c:08:86:f2:2a:51:99:48:37:6d:d4:
61:d7:05:81:25:d2:35:76:ed:ae:0d:8c:08:4e:14:c6:e5:11:
3b:94:7e:1c:08:c8:c5:8d:a7:f7:9b:41:9f:4d:64:12:63:da:
c2:2e:c3:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdL5FYg5HFXGT/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1
ZmY1MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
YjU0NzQ2MjYtZDllNy00NzVlLTgxMzktZjQyNTc1ZGI0YzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8WshWnnxRi65pw29/jMIv2r85mAwsg2rZCx
1r1glGXwIMtM3Rfp+9sqYJ2qYUUDTn2d3jkdbrnU1LkCxUUm/CGDbfD2lCgDAeVZ
hKSU1rBoQrGItDlkv7O//rNlMERdD8nGgCQrrtlgWqKa6WobfqR5xl07tk9i8Fxb
86SLZffcXVqUoy6ie6MdMczgeez1aH0p/JirtmdwBFanuAzeFGlzcsfHwD+z02LA
aVE1xc23H5J8BO0Ly4QQ1CNcxbQ7hBW1xroyuVFF6j7LsyzmmpvXTuFcxdUsV2B0
enOqo1DncYbfuaYYLFfeHq3sH+VFdtceh/p0TcalXon0C4KCpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLv/Sn9K3BQaSVFjO4BExmZKpPM6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz
ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvOGNkNmM0YmMtOThhZC0z
NzczLTk3NGQtY2E3YTFjMDMxZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2
ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2
NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5
ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAXJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIRqTwHJmglrGGVp72VKE6Jt9E9Bk1tIsWkGHDS4acS8GyWPyw8vexo
x27OeNB7a9GTs3fHCObcYFRhdMeygJCFIyK9Ff61TBvn5IKTC11/bIOlfuH5qwVG
k7KEahdYxea++6E3Nv1nScVoveo53QuAfYSOyW3Jm9KAltkiQAHXJL6L3UBBeh44
H56TibRM5yuJUc8XN2kPZQ5395JDv5QcEDF/etRUb8BBDU8ZNfC0XqLR8RuTMZEg
1dpnkjOUisqEpMwQvJM2i+lTGqecCIbyKlGZSDdt1GHXBYEl0jV27a4NjAhOFMbl
ETuUfhwIyMWNp/ebQZ9NZBJj2sIuw/4=
-----END CERTIFICATE-----
Generated at Wed Mar 25 03:37:01 2026 by rpki-client