
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
File: c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa (raw, json)
Hash identifier: rrqXpZI9gZYQoieP8uyeUkqN6Cp6AmhmzpmpNDn5Tj4=
Subject key identifier: 42:8D:71:11:A0:B7:DD:17:4C:42:8F:FA:D3:52:F9:B8:C3:B5:DE:49
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584CEFF249A013971481E1C92100
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
Signing time: Sat 21 Feb 2026 14:00:41 +0000
ROA not before: Sat 21 Feb 2026 14:00:41 +0000
ROA not after: Fri 22 May 2026 13:00:41 +0000
asID: 31898
IP address blocks: 67.217.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ef:f2:49:a0:13:97:14:81:e1:c9:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Feb 21 14:00:41 2026 GMT
Not After : May 22 13:00:41 2026 GMT
Subject: CN=7c76f929-b7f8-4538-a97d-af53642a25b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:37:8c:8e:95:50:3f:ce:62:2e:e2:b6:9e:
a7:fb:08:b8:26:62:ea:00:8a:c5:d6:33:8e:10:58:
c6:53:ac:ba:a8:5a:fd:d0:71:a7:0c:49:57:2d:20:
e5:a3:a3:04:b2:37:66:45:94:eb:8f:46:08:89:c5:
0c:3d:ce:8b:c2:11:b0:21:3d:b5:3d:3a:fa:d4:eb:
27:cf:49:13:89:0c:02:0d:33:a5:07:0d:fa:d3:2a:
bb:78:5a:e0:f3:e0:c5:50:aa:19:35:3a:e3:a8:7a:
1d:a2:ee:05:5b:60:b9:de:45:49:b2:c9:9f:d8:9c:
0b:d8:17:e5:c8:83:9a:cd:19:7d:11:72:0d:bb:fb:
df:77:25:8b:4c:97:c2:1b:5e:3c:73:bc:8a:b8:47:
7b:5f:72:d9:40:11:7e:2f:7b:ec:e9:2a:1e:1e:2c:
6a:bb:e0:20:f8:6b:9b:1d:4b:98:7a:47:6f:f4:34:
8a:e9:0e:e8:b3:b1:f5:60:43:de:97:fe:7e:3b:33:
15:b3:bb:47:d9:d2:c8:8f:19:c8:89:48:5b:b8:7d:
b4:9a:f7:b4:c9:0a:4e:48:06:74:2c:45:44:43:64:
1d:74:d8:a7:cf:43:36:f0:be:67:aa:58:dd:11:ca:
4d:d7:5a:db:ba:ba:a6:df:d0:34:dd:e6:38:51:b8:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:71:11:A0:B7:DD:17:4C:42:8F:FA:D3:52:F9:B8:C3:B5:DE:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e7:35:6c:3b:8e:5b:e0:ca:8e:60:94:df:2b:4a:8e:7e:3d:58:
3b:2d:d8:0e:b6:34:ee:fd:cc:9e:54:82:9f:02:ae:84:2b:9f:
08:bd:3f:b3:4c:18:dc:3c:32:be:87:e3:d5:85:45:60:48:bd:
fd:0a:97:5a:db:6a:d8:a3:b2:ee:a4:d5:bd:66:96:a0:ad:c6:
77:81:d8:8f:00:2d:50:a5:10:3d:01:80:e6:13:8d:88:14:25:
46:a2:64:da:71:ec:03:56:43:36:86:04:d7:96:67:80:aa:13:
d0:01:42:e9:59:61:de:8a:b7:df:4b:a1:af:e5:e5:81:35:bd:
c1:f0:99:2b:44:5f:09:02:82:a9:c4:58:47:a5:72:a7:a0:b9:
a1:57:ef:b7:de:f8:ec:03:c5:60:b3:5f:7d:76:6c:a7:91:cc:
05:d9:b1:66:86:f1:dd:e3:b8:aa:2c:3f:5f:1d:40:b1:2e:34:
34:2a:04:e1:cd:be:1f:4a:00:67:91:c9:81:c7:03:c5:75:9e:
04:d5:10:02:d8:67:a1:46:bd:32:2e:3b:a6:df:88:1c:10:43:
67:c6:8a:5c:a7:d3:e7:ec:75:59:ae:8f:9c:62:d0:c2:aa:e8:
63:99:69:14:c2:cd:ca:25:ca:9c:c2:5e:67:2d:50:0b:ec:5e:
31:1d:13:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8kmgE5cUgeHJIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
N2M3NmY5MjktYjdmOC00NTM4LWE5N2QtYWY1MzY0MmEyNWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nc3jI6VUD/OYi7itp6n+wi4JmLqAIrF1jOO
EFjGU6y6qFr90HGnDElXLSDlo6MEsjdmRZTrj0YIicUMPc6LwhGwIT21PTr61Osn
z0kTiQwCDTOlBw360yq7eFrg8+DFUKoZNTrjqHodou4FW2C53kVJssmf2JwL2Bfl
yIOazRl9EXINu/vfdyWLTJfCG148c7yKuEd7X3LZQBF+L3vs6SoeHixqu+Ag+Gub
HUuYekdv9DSK6Q7os7H1YEPel/5+OzMVs7tH2dLIjxnIiUhbuH20mve0yQpOSAZ0
LEVEQ2QddNinz0M28L5nqljdEcpN11rburqm39A03eY4UbiQ/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKNcRGgt90XTEKP+tNS+bjDtd5JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYzdkNWE4NmYtNGE2YS0z
MGNmLWEzYmEtOWNkNWQ5YjVhMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOc1bDuOW+DKjmCU3ytKjn49WDst2A62NO79zJ5Ugp8CroQrnwi9P7NM
GNw8Mr6H49WFRWBIvf0Kl1rbatijsu6k1b1mlqCtxneB2I8ALVClED0BgOYTjYgU
JUaiZNpx7ANWQzaGBNeWZ4CqE9ABQulZYd6Kt99Loa/l5YE1vcHwmStEXwkCgqnE
WEelcqeguaFX77fe+OwDxWCzX312bKeRzAXZsWaG8d3juKosP18dQLEuNDQqBOHN
vh9KAGeRyYHHA8V1ngTVEALYZ6FGvTIuO6bfiBwQQ2fGilyn0+fsdVmuj5xi0MKq
6GOZaRTCzcolypzCXmctUAvsXjEdE4I=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:36 2026 by rpki-client