
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa
File: ab708923-0613-3a2c-b170-cadae0fe2f49.roa (raw, json)
Hash identifier: NxGgUpCtzV4U/ODkANd4GaObEcO5YxbWv1Wx6Bn2Aq8=
Subject key identifier: 41:6B:FC:29:22:0A:B4:A0:12:E3:04:2B:40:3A:86:C9:2C:F9:58:0E
Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5
Certificate serial: 010D0C9F4328584E2AD4541C91BD9DFE3C6E3E78
Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa
Signing time: Sun 14 Jun 2026 09:00:11 +0000
ROA not before: Sun 14 Jun 2026 09:00:11 +0000
ROA not after: Sat 12 Sep 2026 09:00:11 +0000
asID: 16509
IP address blocks: 199.87.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:d4:54:1c:91:bd:9d:fe:3c:6e:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5
Validity
Not Before: Jun 14 09:00:11 2026 GMT
Not After : Sep 12 09:00:11 2026 GMT
Subject: CN=48aa23ae-9fb1-4d6f-a3b2-f3f9291a48d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f7:0f:86:d1:32:a6:a5:63:f2:84:20:21:60:
13:ff:af:76:ff:a3:62:7e:99:23:af:83:f8:f7:a8:
59:f4:23:4a:df:ee:c4:45:f8:78:6e:2b:1c:43:0d:
d9:c5:93:d8:6c:61:3f:f3:08:29:20:33:df:f0:70:
fa:d0:5d:04:2a:b3:ec:41:fc:20:03:e4:72:bc:4d:
84:06:37:18:74:9c:f1:b9:06:c0:31:b9:1a:38:86:
2a:7f:13:da:d5:f3:42:11:62:85:db:25:3e:cc:aa:
e4:9b:f4:6a:17:53:1b:3e:66:44:80:52:62:b8:5d:
9a:dd:b6:09:34:3d:68:2f:46:8d:30:4c:12:68:e1:
5d:ba:4c:19:25:fe:c1:d2:4e:61:ee:85:2e:8a:32:
f5:ed:fa:6b:94:84:b4:aa:93:0b:49:d0:10:cf:a4:
52:a3:9d:d8:0a:1d:57:35:16:89:4a:6a:d9:b4:36:
39:d8:43:86:50:d2:5f:48:eb:af:4a:38:90:35:90:
c0:00:d2:b1:35:8e:3b:83:dd:bb:d3:b5:f4:07:84:
64:63:ae:26:54:80:f0:3a:d2:9c:cc:74:50:c5:d7:
47:74:26:e3:ba:a3:1e:f8:3c:3d:59:1b:5c:2f:be:
00:64:ed:02:1b:77:57:62:62:9b:15:ae:1a:90:0b:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:FC:29:22:0A:B4:A0:12:E3:04:2B:40:3A:86:C9:2C:F9:58:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
X509v3 Authority Key Identifier:
keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:34:d8:ff:1c:f8:87:5e:21:90:f7:d2:0e:61:53:34:ed:03:
9f:e2:ce:ca:02:43:4a:fa:db:10:8b:f6:02:a8:a6:39:17:2d:
e2:fd:20:73:67:00:92:f6:fe:90:22:39:3c:93:ec:c7:5f:9d:
71:53:a2:17:21:10:03:3d:cf:9f:98:02:e5:e1:53:32:fe:15:
84:a4:52:25:23:54:03:8f:18:44:de:7d:92:a5:fa:4e:06:ac:
24:95:50:3f:11:58:43:26:56:2d:db:9d:d9:39:6b:4b:06:21:
d5:a0:27:45:06:6b:e6:91:e4:70:14:15:eb:61:db:25:74:9d:
19:2b:c1:2d:9f:16:23:2a:47:bb:27:7f:12:7e:ff:65:ce:6f:
30:a1:8a:1a:8e:5f:62:21:c7:90:0e:d4:7c:bd:bb:1d:8a:7e:
da:93:77:20:7f:e8:da:3b:9f:f0:60:79:62:2a:db:26:ad:22:
52:de:48:df:04:18:d6:6f:c7:91:96:2d:da:17:c5:ee:8e:b6:
72:a0:ec:28:20:c0:8a:4f:13:7c:8f:fa:d6:46:a5:83:f0:0f:
b7:81:46:39:32:db:92:95:48:d0:8d:24:1f:48:a0:bb:0b:13:
ab:86:59:45:81:15:1c:a2:4e:35:18:06:c0:a9:3f:a3:d2:73:
75:fe:22:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FQckb2d/jxuPngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3
OWI1MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
NDhhYTIzYWUtOWZiMS00ZDZmLWEzYjItZjNmOTI5MWE0OGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vcPhtEypqVj8oQgIWAT/692/6Nifpkjr4P4
96hZ9CNK3+7ERfh4biscQw3ZxZPYbGE/8wgpIDPf8HD60F0EKrPsQfwgA+RyvE2E
BjcYdJzxuQbAMbkaOIYqfxPa1fNCEWKF2yU+zKrkm/RqF1MbPmZEgFJiuF2a3bYJ
ND1oL0aNMEwSaOFdukwZJf7B0k5h7oUuijL17fprlIS0qpMLSdAQz6RSo53YCh1X
NRaJSmrZtDY52EOGUNJfSOuvSjiQNZDAANKxNY47g92707X0B4RkY64mVIDwOtKc
zHRQxddHdCbjuqMe+Dw9WRtcL74AZO0CG3dXYmKbFa4akAtkhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFr/CkiCrSgEuMEK0A6hsks+VgOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4
OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvYWI3MDg5MjMtMDYxMy0z
YTJjLWIxNzAtY2FkYWUwZmUyZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTFjODk0ZDYtYjk5MS00OTY2LWJl
YzQtN2M1OGRhYzc3OWI1LzkxYzg5NGQ2LWI5OTEtNDk2Ni1iZWM0LTdjNThkYWM3
NzliNS5jcmwwHwYDVR0jBBgwFoAUE7IsKHlapcq7wHm/dsPWi2cje8IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4
ZGFjNzc5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1eQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ02P8c+IdeIZD30g5hUzTtA5/izsoCQ0r62xCL9gKopjkXLeL9IHNn
AJL2/pAiOTyT7MdfnXFTohchEAM9z5+YAuXhUzL+FYSkUiUjVAOPGETefZKl+k4G
rCSVUD8RWEMmVi3bndk5a0sGIdWgJ0UGa+aR5HAUFeth2yV0nRkrwS2fFiMqR7sn
fxJ+/2XObzChihqOX2Ihx5AO1Hy9ux2KftqTdyB/6No7n/BgeWIq2yatIlLeSN8E
GNZvx5GWLdoXxe6OtnKg7CggwIpPE3yP+tZGpYPwD7eBRjky25KVSNCNJB9IoLsL
E6uGWUWBFRyiTjUYBsCpP6PSc3X+Iic=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:29 2026 by rpki-client