
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
File: f5c6de41-323b-3b99-9404-398b289b5319.roa (raw, json)
Hash identifier: bY/Sj1QvfShI8OthJGrjIgUQxlpGgFrMrsYld4ZKW6c=
Subject key identifier: 4C:D1:8A:83:27:5A:1B:36:F5:5D:36:A6:F8:8F:EC:5C:E0:5A:FE:DC
Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial: 010D0C9F4328584D20AF54511408CA7C5A1F4E00
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 397803
IP address blocks: 66.102.48.0/20 maxlen: 20
167.100.32.0/19 maxlen: 19
209.105.180.0/22 maxlen: 22
209.105.184.0/22 maxlen: 22
216.227.40.0/21 maxlen: 21
216.227.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:54:51:14:08:ca:7c:5a:1f:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=17dd5185-5511-4845-850d-455d53b849f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:fc:44:3a:9d:53:c6:4b:e8:95:96:52:d3:
63:8b:aa:f6:2e:63:02:9d:d5:e2:06:8c:ad:bb:eb:
52:77:86:ba:9d:66:75:a1:eb:42:c4:64:f5:d9:ff:
af:e3:62:e2:ac:25:fb:fd:e6:d7:c8:3c:39:1f:ec:
f5:dc:96:40:d5:bc:06:63:78:e6:b0:5f:73:e3:ae:
93:14:50:bf:7c:1c:33:aa:2e:15:e1:35:36:5b:0e:
41:51:ba:4b:28:85:86:65:d3:67:4d:b0:4d:17:f3:
3f:b0:3f:a7:70:88:bb:af:dd:94:46:7a:80:ab:30:
05:71:ac:df:6f:91:1b:5b:7a:bb:12:e4:1d:b0:f1:
a3:ae:3e:c0:65:80:11:97:46:74:ef:40:76:8d:30:
b9:b8:fe:39:53:0e:d0:5d:4c:5f:2c:78:b1:1f:ab:
f5:14:5d:10:95:a4:fb:a2:f4:d1:8d:5a:56:97:a8:
b2:87:0c:f8:42:20:4e:61:b3:a6:bc:26:23:a3:92:
a2:b4:78:6c:d7:71:b6:e8:59:87:04:cf:97:ef:2d:
14:7d:22:fc:90:d1:2b:95:d0:f6:75:c2:ea:e9:ca:
5a:f9:5f:1b:e3:ff:a3:60:09:24:4d:b8:19:38:9e:
ba:7a:23:84:d5:b3:96:57:7e:5f:24:0b:44:85:4a:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D1:8A:83:27:5A:1B:36:F5:5D:36:A6:F8:8F:EC:5C:E0:5A:FE:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
X509v3 Authority Key Identifier:
keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.48.0/20
167.100.32.0/19
209.105.180.0-209.105.187.255
216.227.40.0-216.227.51.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:97:ed:01:f2:02:65:d9:2c:d3:83:a2:1a:3d:e4:ab:98:62:
9a:2b:ec:5e:26:61:a8:d1:61:55:c8:7d:89:d5:d9:06:8f:60:
88:d7:9a:7b:6e:95:68:e6:da:5c:a4:36:96:1a:ef:d0:a3:7d:
35:98:32:19:2d:de:d3:89:cd:93:3d:e1:03:0c:70:85:cd:df:
bf:a5:67:83:e5:65:08:69:b3:80:4c:67:13:24:49:c0:ba:43:
ad:14:cd:ab:4b:8e:79:db:7b:c9:e4:96:d6:9f:14:e1:39:11:
98:88:30:1b:9b:ad:a6:af:b0:3d:aa:33:33:02:f0:a4:a5:10:
cc:e2:a1:dc:d6:f1:aa:a8:0f:3e:46:ee:ed:5d:49:14:78:8b:
3f:8e:89:a0:dc:a1:57:53:27:fb:77:b9:5e:61:12:8e:0f:b3:
b3:e4:b9:da:a4:cc:57:62:f0:6d:7e:48:20:1b:d8:15:f0:55:
80:d6:a5:d3:a3:74:e7:84:a7:5c:b6:ff:06:d8:a9:7b:b9:38:
45:87:00:41:55:cc:c7:aa:68:2e:5b:44:34:b7:59:df:56:26:
ac:a0:07:12:eb:99:76:21:ab:f6:18:39:f0:03:a3:2f:a2:b1:
b2:d4:ed:60:62:19:2d:d0:c2:a6:6e:f8:e7:0f:27:16:c4:8b:
a3:6d:c6:1c
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE0gr1RRFAjKfFofTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3
NzNhMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTdkZDUxODUtNTUxMS00ODQ1LTg1MGQtNDU1ZDUzYjg0OWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ78RDqdU8ZL6JWWUtNji6r2LmMCndXiBoyt
u+tSd4a6nWZ1oetCxGT12f+v42LirCX7/ebXyDw5H+z13JZA1bwGY3jmsF9z466T
FFC/fBwzqi4V4TU2Ww5BUbpLKIWGZdNnTbBNF/M/sD+ncIi7r92URnqAqzAFcazf
b5EbW3q7EuQdsPGjrj7AZYARl0Z070B2jTC5uP45Uw7QXUxfLHixH6v1FF0QlaT7
ovTRjVpWl6iyhwz4QiBOYbOmvCYjo5KitHhs13G26FmHBM+X7y0UfSL8kNErldD2
dcLq6cpa+V8b4/+jYAkkTbgZOJ66eiOE1bOWV35fJAtEhUoitQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFEzRioMnWhs29V02pviP7FzgWv7cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz
YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvZjVjNmRlNDEtMzIzYi0z
Yjk5LTk0MDQtMzk4YjI4OWI1MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx
ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5
NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4
ZTFmOTc3M2EuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQEQmYwAwQF
p2QgMAwDBALRabQDBALRabgwDAMEA9jjKAMEAtjjMDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDXl+0B8gJl
2SzTg6IaPeSrmGKaK+xeJmGo0WFVyH2J1dkGj2CI15p7bpVo5tpcpDaWGu/Qo301
mDIZLd7Tic2TPeEDDHCFzd+/pWeD5WUIabOATGcTJEnAukOtFM2rS45523vJ5JbW
nxThORGYiDAbm62mr7A9qjMzAvCkpRDM4qHc1vGqqA8+Ru7tXUkUeIs/jomg3KFX
Uyf7d7leYRKOD7Oz5LnapMxXYvBtfkggG9gV8FWA1qXTo3TnhKdctv8G2Kl7uThF
hwBBVczHqmguW0Q0t1nfViasoAcS65l2Iav2GDnwA6MvorGy1O1gYhkt0MKmbvjn
DycWxIujbcYc
-----END CERTIFICATE-----
Generated at Sun Mar 22 09:30:58 2026 by rpki-client