
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
File: cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (raw, json)
Hash identifier: 3FvWIbmBBBsvy+wGQ6y4jA2XWZTDH7lnZFmbZ3M/el0=
Subject key identifier: BC:07:25:76:61:76:DA:6B:72:64:2C:5C:F5:96:EF:95:B8:14:F9:94
Certificate issuer: /CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Certificate serial: 010D0C9F4328584E2AD45A67BB651DC470725100
Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
Signing time: Sun 14 Jun 2026 09:00:11 +0000
ROA not before: Sun 14 Jun 2026 09:00:11 +0000
ROA not after: Sat 12 Sep 2026 09:00:11 +0000
asID: 14630
IP address blocks: 142.148.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 01 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:d4:5a:67:bb:65:1d:c4:70:72:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Validity
Not Before: Jun 14 09:00:11 2026 GMT
Not After : Sep 12 09:00:11 2026 GMT
Subject: CN=2a5ba99e-d557-4d9c-a964-e91c5071c8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:86:8f:d2:8e:ad:de:90:37:41:60:89:ce:
42:d8:21:ef:3b:c5:11:8e:48:67:3e:a6:f2:76:01:
88:b9:3f:74:da:b9:f3:4b:d5:a7:74:9a:19:0b:d2:
e0:cc:63:46:c0:ab:0a:52:c7:eb:e7:08:c7:50:24:
e2:f8:e9:ad:81:fa:ae:26:ea:c7:de:06:59:57:59:
4d:cd:8a:fd:c3:64:91:b2:73:e9:82:cb:47:10:80:
9f:9a:3d:fa:05:60:e7:99:fd:6d:95:29:63:51:6f:
92:59:40:66:c7:4a:22:0f:1d:2e:59:14:96:77:80:
bb:6a:40:f8:b3:42:19:2f:05:08:5e:b3:b3:b1:19:
f4:0d:4c:07:e1:0b:4b:b3:c5:d5:77:f4:85:ec:d4:
1b:8f:d8:0c:1c:b4:a9:a5:29:1a:fc:a3:f9:ed:6b:
4e:05:04:f9:cf:5b:85:12:0e:cb:2c:ca:fc:d1:e3:
a4:f6:a2:41:f5:24:0c:3e:dd:ce:77:bb:96:c3:af:
d8:87:16:ff:d1:8d:c7:ff:1a:61:5a:c2:b7:c0:d2:
7e:11:81:34:42:84:52:2c:27:1b:ba:e6:3e:14:df:
c7:89:a1:97:fc:10:b8:2f:bd:f5:01:9b:59:1c:df:
fd:b7:94:6c:7e:d0:60:7b:87:40:d6:2a:1a:55:95:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:25:76:61:76:DA:6B:72:64:2C:5C:F5:96:EF:95:B8:14:F9:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl
X509v3 Authority Key Identifier:
keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
sbgp-ipAddrBlock: critical
IPv4:
142.148.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ce:83:b5:ce:96:08:06:1e:e3:c6:a7:4e:45:0f:5c:c5:1c:
75:16:68:d1:db:07:e2:f2:6b:55:88:12:ec:0e:a8:56:82:2e:
ca:ea:a5:ef:c2:d8:45:e3:84:86:9d:7f:a2:11:60:fb:74:58:
e6:6d:f8:bf:4c:f4:3d:b4:f6:b5:65:d8:af:a6:bd:7d:3d:39:
b8:bb:a4:60:34:0f:2e:49:dd:f5:ce:07:ed:99:69:c2:27:5e:
97:58:04:b7:ef:51:c3:d8:01:7e:5f:35:50:d0:0f:c1:5b:56:
9b:0b:6f:30:25:4f:69:18:5f:09:4f:f1:4a:11:b9:20:20:39:
66:88:83:1c:a3:ba:a9:b3:bb:63:d5:6e:e0:d5:61:a5:24:b6:
39:82:e1:e1:67:9f:0e:55:bc:35:4a:25:8b:bb:98:f8:2d:38:
78:03:66:60:87:f1:ec:78:47:fa:5d:14:a6:61:9d:a3:9c:96:
1f:8f:07:96:d1:62:81:58:87:22:0d:89:83:73:63:cf:47:20:
64:a9:ee:67:82:46:f4:14:81:8d:15:7b:a9:6b:17:86:08:bb:
a9:7d:bb:29:4b:a9:5d:ef:e1:12:40:49:09:2b:f7:5c:f7:81:
31:b8:e4:7a:77:45:e5:c1:e0:b0:41:96:47:a6:03:6c:63:b1:
df:c3:c4:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1Fpnu2UdxHByUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE5ZDVmMjAtMjM2Ny00NTdiLTk3MGItN2YxYzFhNjBm
Y2FlMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
MmE1YmE5OWUtZDU1Ny00ZDljLWE5NjQtZTkxYzUwNzFjOGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhWGj9KOrd6QN0Fgic5C2CHvO8URjkhnPqby
dgGIuT902rnzS9WndJoZC9LgzGNGwKsKUsfr5wjHUCTi+OmtgfquJurH3gZZV1lN
zYr9w2SRsnPpgstHEICfmj36BWDnmf1tlSljUW+SWUBmx0oiDx0uWRSWd4C7akD4
s0IZLwUIXrOzsRn0DUwH4QtLs8XVd/SF7NQbj9gMHLSppSka/KP57WtOBQT5z1uF
Eg7LLMr80eOk9qJB9SQMPt3Od7uWw6/Yhxb/0Y3H/xphWsK3wNJ+EYE0QoRSLCcb
uuY+FN/HiaGX/BC4L731AZtZHN/9t5RsftBge4dA1ioaVZVb+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwHJXZhdtprcmQsXPWW75W4FPmUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlk
NWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFjMWE2MGZjYWUvY2FjMTJmMjctZTNhZi0z
ODAzLWE2OWMtZTFkYjVjYmM0ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzE5ZDVmMjAtMjM2Ny00NTdiLTk3
MGItN2YxYzFhNjBmY2FlLzMxOWQ1ZjIwLTIzNjctNDU3Yi05NzBiLTdmMWMxYTYw
ZmNhZS5jcmwwHwYDVR0jBBgwFoAUnFErFXqHY+TuXE7m8ya3OGcc4kswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlkNWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFj
MWE2MGZjYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjpSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnOg7XOlggGHuPGp05FD1zFHHUWaNHbB+Lya1WIEuwOqFaCLsrqpe/C
2EXjhIadf6IRYPt0WOZt+L9M9D209rVl2K+mvX09Obi7pGA0Dy5J3fXOB+2ZacIn
XpdYBLfvUcPYAX5fNVDQD8FbVpsLbzAlT2kYXwlP8UoRuSAgOWaIgxyjuqmzu2PV
buDVYaUktjmC4eFnnw5VvDVKJYu7mPgtOHgDZmCH8ex4R/pdFKZhnaOclh+PB5bR
YoFYhyINiYNzY89HIGSp7meCRvQUgY0Ve6lrF4YIu6l9uylLqV3v4RJASQkr91z3
gTG45Hp3ReXB4LBBlkemA2xjsd/DxGE=
-----END CERTIFICATE-----
Generated at Tue Jun 30 21:39:07 2026 by rpki-client