
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa
File: caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa (raw, json)
Hash identifier: AfmBmIhnAiciu7PCFgL9nMM0IDLAnon+msQBcmP07zc=
Subject key identifier: 36:40:F3:FD:E0:FD:BE:E4:11:88:3A:28:55:08:BF:83:83:18:8D:3F
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584CF6ECD3C1A9ADE0D419697500
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa
Signing time: Tue 24 Feb 2026 02:00:31 +0000
ROA not before: Tue 24 Feb 2026 02:00:31 +0000
ROA not after: Mon 25 May 2026 01:00:31 +0000
asID: 26480
IP address blocks: 204.19.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:ec:d3:c1:a9:ad:e0:d4:19:69:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Feb 24 02:00:31 2026 GMT
Not After : May 25 01:00:31 2026 GMT
Subject: CN=3c48496b-aef7-44a5-9781-5bfa05c4e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:ad:05:fd:7a:e1:47:68:6a:71:69:15:2a:
ca:fe:ec:09:6c:c2:1a:6a:4b:46:59:2b:89:58:23:
58:e6:7f:c9:8f:ae:06:69:ff:18:97:21:48:d2:2d:
8d:f3:af:58:ed:be:70:aa:8c:60:ae:35:1f:8e:58:
fa:e0:0e:6b:4a:41:5e:e1:84:09:cf:d0:9a:b5:fa:
3c:18:0d:ee:68:61:69:5d:86:b8:5a:75:c7:3f:73:
7b:c7:af:3d:c8:d5:4e:78:f8:a2:59:72:c2:71:25:
ef:a7:6c:c8:bc:b8:7f:ab:b3:71:1b:df:77:84:db:
02:17:b0:55:61:6d:23:ed:20:11:72:9d:4a:a1:a2:
da:d3:f7:c1:42:e0:d0:c3:0c:01:69:1c:92:84:e6:
30:2b:7e:1a:23:78:d1:b2:99:c1:5e:0d:50:22:7c:
02:40:ed:b1:cb:10:a6:9d:0c:1b:bd:7b:93:b0:07:
ec:9a:fc:c7:c4:93:1d:1e:db:70:1c:d0:8e:8b:d7:
5d:52:a9:58:08:ce:01:7b:2d:0c:d5:83:ab:1c:76:
80:1a:3c:73:85:40:8c:5c:f2:85:5f:27:34:58:ba:
0b:07:19:36:3f:d7:d1:66:01:7b:f6:c1:18:e9:c9:
77:d5:5a:61:53:0a:24:ac:fc:86:38:db:63:e3:75:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:40:F3:FD:E0:FD:BE:E4:11:88:3A:28:55:08:BF:83:83:18:8D:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
204.19.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:23:f1:69:ac:e9:4c:5a:3a:68:1d:9d:70:04:d9:a3:d8:f4:
bc:69:f5:cc:28:83:ef:17:77:0a:d9:d1:99:64:d5:87:6b:fb:
a6:5b:25:06:7a:0a:16:26:f9:2c:46:2e:9e:b9:cb:4b:52:11:
6d:fa:d0:22:5c:a1:34:3e:22:91:9d:e0:ea:5b:12:51:ea:3a:
9f:4f:22:f8:11:5c:b0:e4:54:96:01:8e:58:e5:55:cf:76:de:
cf:6c:6f:8f:a9:50:1a:85:ad:8c:b3:bd:7e:4b:c4:8e:84:01:
49:26:38:a3:30:71:0d:75:42:31:70:b7:90:95:9a:d8:c3:e6:
6b:8a:ef:b6:02:a9:59:63:a9:27:21:6c:fe:cf:93:e6:22:75:
eb:78:05:83:43:50:11:ca:47:09:e3:16:c0:50:65:f2:33:d5:
e6:bc:c0:fc:eb:fd:83:3b:0e:1a:31:a2:dd:a7:be:d6:2c:27:
57:97:5b:14:21:aa:a7:b6:70:7a:ff:5e:64:b6:56:56:dc:f3:
0f:e9:ee:99:04:17:b7:0b:1b:b7:2c:86:3d:67:b8:44:12:33:
5f:4b:07:0b:f6:93:0e:42:d3:1b:9b:c9:9d:36:29:99:39:7c:
1b:a3:5e:0b:ea:65:b9:da:5b:f9:fe:4e:70:be:93:55:76:b8:
00:a7:48:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NPBqa3g1BlpdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
M2M0ODQ5NmItYWVmNy00NGE1LTk3ODEtNWJmYTA1YzRlMWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaWtBf164UdoanFpFSrK/uwJbMIaaktGWSuJ
WCNY5n/Jj64Gaf8YlyFI0i2N869Y7b5wqoxgrjUfjlj64A5rSkFe4YQJz9Catfo8
GA3uaGFpXYa4WnXHP3N7x689yNVOePiiWXLCcSXvp2zIvLh/q7NxG993hNsCF7BV
YW0j7SARcp1KoaLa0/fBQuDQwwwBaRyShOYwK34aI3jRspnBXg1QInwCQO2xyxCm
nQwbvXuTsAfsmvzHxJMdHttwHNCOi9ddUqlYCM4Bey0M1YOrHHaAGjxzhUCMXPKF
Xyc0WLoLBxk2P9fRZgF79sEY6cl31VphUwokrPyGONtj43XlpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZA8/3g/b7kEYg6KFUIv4ODGI0/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvY2FmOWY4YzYtOTA0My0z
Nzg0LThlYmEtNjNkY2VmNmU3ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzBMiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkj8Wms6UxaOmgdnXAE2aPY9Lxp9cwog+8XdwrZ0Zlk1Ydr+6ZbJQZ6
ChYm+SxGLp65y0tSEW360CJcoTQ+IpGd4OpbElHqOp9PIvgRXLDkVJYBjljlVc92
3s9sb4+pUBqFrYyzvX5LxI6EAUkmOKMwcQ11QjFwt5CVmtjD5muK77YCqVljqSch
bP7Pk+Yidet4BYNDUBHKRwnjFsBQZfIz1ea8wPzr/YM7Dhoxot2nvtYsJ1eXWxQh
qqe2cHr/XmS2Vlbc8w/p7pkEF7cLG7cshj1nuEQSM19LBwv2kw5C0xubyZ02KZk5
fBujXgvqZbnaW/n+TnC+k1V2uACnSK8=
-----END CERTIFICATE-----
Generated at Fri Feb 27 10:02:41 2026 by rpki-client