
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7872549-976a-3b2a-8609-9238488a140d.roa
File: b7872549-976a-3b2a-8609-9238488a140d.roa (raw, json)
Hash identifier: 6LiF94T0SDrNGZP+8CqRK6jlyDJ6UwID23TTWtmClQY=
Subject key identifier: 85:DF:98:D6:BA:2D:BB:7C:6E:E7:B8:18:48:94:0C:56:5E:2F:6A:64
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EF7B9F81BCFC3846493447100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7872549-976a-3b2a-8609-9238488a140d.roa
Signing time: Wed 26 Aug 2026 18:27:53 +0000
ROA not before: Wed 26 Aug 2026 18:27:53 +0000
ROA not after: Tue 24 Nov 2026 19:27:53 +0000
asID: 7029
IP address blocks: 216.175.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f7:b9:f8:1b:cf:c3:84:64:93:44:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 26 18:27:53 2026 GMT
Not After : Nov 24 19:27:53 2026 GMT
Subject: CN=1f038ba9-a5b6-4d39-8eef-e7c06eaf105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:28:4e:27:4f:a3:0f:1f:24:a4:47:91:07:
d1:5c:98:35:e5:9f:c8:18:08:ff:9d:05:cf:29:84:
f7:d9:e5:77:f7:a7:3d:51:25:15:0b:d1:76:01:80:
9b:71:64:47:70:71:5a:6c:63:8b:6a:5e:68:dc:e1:
c7:30:56:9a:91:ee:db:3f:22:97:eb:bd:68:09:88:
27:39:ab:74:25:94:b5:2f:95:a0:15:13:ce:fc:04:
11:ea:10:53:a3:61:09:41:db:91:ef:11:8a:22:ac:
de:0c:10:12:22:5a:8f:e2:e9:b2:65:d8:40:b3:a0:
d6:78:37:ca:bc:f6:56:a7:3a:1d:c1:24:24:7d:f0:
c1:da:7f:9e:35:30:f8:79:d4:3b:61:91:86:bf:02:
60:99:86:9d:e9:14:cc:9c:84:ee:91:8b:c3:07:06:
db:92:72:ab:06:45:49:18:f3:98:49:dd:d7:19:6f:
48:82:ba:06:bf:b8:01:67:0b:33:9f:ba:c9:76:a9:
a2:ea:f7:eb:cc:87:1f:af:ed:21:3d:df:10:f3:ae:
ab:e6:a8:ec:71:c2:fd:b8:69:35:03:ef:05:0a:05:
0f:e9:46:3b:42:08:b4:db:94:bb:69:ff:33:b5:b3:
5a:ad:43:1f:be:4d:29:0e:fe:06:91:0e:19:b4:a3:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DF:98:D6:BA:2D:BB:7C:6E:E7:B8:18:48:94:0C:56:5E:2F:6A:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7872549-976a-3b2a-8609-9238488a140d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.175.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c8:c1:d8:e5:fb:ef:ec:ec:be:04:17:df:d1:c0:7f:b8:9e:
32:18:e4:57:bc:75:52:f7:9e:a2:5b:02:14:9d:39:f5:44:32:
40:67:17:07:53:a0:3e:b8:d3:7d:5c:89:03:be:2b:98:59:62:
90:59:e0:c1:08:29:af:12:3e:e0:b6:60:8b:be:08:82:49:a5:
b0:5e:db:a0:c9:19:11:4d:47:a1:cc:98:c2:6a:e6:0d:45:1b:
16:f6:63:3e:e4:10:90:a3:27:47:b0:e8:59:02:68:27:0d:6f:
b1:2b:f1:32:75:fc:1a:91:cd:d3:42:ff:fb:b5:a0:3f:21:d0:
5a:18:fb:3e:96:11:29:f8:26:9d:17:f8:c7:6d:22:0a:67:c8:
e0:20:55:a4:f0:67:aa:27:46:cd:66:c4:38:65:63:18:84:ba:
7c:95:29:26:88:d6:a0:10:0c:a7:8c:cd:96:4d:1e:aa:b4:de:
13:48:b1:11:61:d7:ac:de:ca:b2:ab:cd:6a:13:c3:8c:3f:9e:
54:7a:9f:c3:2b:07:7b:77:92:a9:da:aa:15:61:af:3e:05:83:
b8:68:ed:e6:d9:7d:bf:4e:41:ee:e3:b7:9e:d8:81:3e:d8:ec:
dd:fd:76:29:f8:d2:49:9d:9c:fe:28:c2:11:44:d0:ac:a8:e8:
9c:2c:0e:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73ufgbz8OEZJNEcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgyNjE4Mjc1M1oXDTI2MTEyNDE5Mjc1M1owLzEtMCsGA1UEAxMk
MWYwMzhiYTktYTViNi00ZDM5LThlZWYtZTdjMDZlYWYxMDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApokoTidPow8fJKRHkQfRXJg15Z/IGAj/nQXP
KYT32eV396c9USUVC9F2AYCbcWRHcHFabGOLal5o3OHHMFaake7bPyKX671oCYgn
Oat0JZS1L5WgFRPO/AQR6hBTo2EJQduR7xGKIqzeDBASIlqP4umyZdhAs6DWeDfK
vPZWpzodwSQkffDB2n+eNTD4edQ7YZGGvwJgmYad6RTMnITukYvDBwbbknKrBkVJ
GPOYSd3XGW9IgroGv7gBZwszn7rJdqmi6vfrzIcfr+0hPd8Q866r5qjsccL9uGk1
A+8FCgUP6UY7Qgi025S7af8ztbNarUMfvk0pDv4GkQ4ZtKM4iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXfmNa6Lbt8bue4GEiUDFZeL2pkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjc4NzI1NDktOTc2YS0z
YjJhLTg2MDktOTIzODQ4OGExNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2K+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHIwdjl++/s7L4EF9/RwH+4njIY5Fe8dVL3nqJbAhSdOfVEMkBnFwdT
oD64031ciQO+K5hZYpBZ4MEIKa8SPuC2YIu+CIJJpbBe26DJGRFNR6HMmMJq5g1F
Gxb2Yz7kEJCjJ0ew6FkCaCcNb7Er8TJ1/BqRzdNC//u1oD8h0FoY+z6WESn4Jp0X
+MdtIgpnyOAgVaTwZ6onRs1mxDhlYxiEunyVKSaI1qAQDKeMzZZNHqq03hNIsRFh
16zeyrKrzWoTw4w/nlR6n8MrB3t3kqnaqhVhrz4Fg7ho7ebZfb9OQe7jt57YgT7Y
7N39din40kmdnP4owhFE0Kyo6JwsDpk=
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:41 2026 by rpki-client