
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa
File: 435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa (raw, json)
Hash identifier: EauUHN+tcl9ikaMXUaaGEZVKZk3hZB/JJe00J2aaxuQ=
Subject key identifier: B5:88:35:7B:D3:FD:7B:9A:70:31:B7:22:76:3E:1E:FA:79:3F:93:13
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F4328584D2A74C71C1D5694C87B6CEA80
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 5645
IP address blocks: 209.161.192.0/18 maxlen: 18
209.161.192.0/20 maxlen: 20
209.161.208.0/20 maxlen: 20
209.161.224.0/20 maxlen: 20
209.161.240.0/21 maxlen: 21
209.161.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:c7:1c:1d:56:94:c8:7b:6c:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=bcb5f049-465f-4c30-a49a-70b2019c62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:45:ea:10:ae:f8:dc:79:93:6b:eb:11:c4:
fe:2b:32:f6:42:6f:d5:09:09:b2:6e:d5:9a:e4:36:
e9:54:6e:68:b6:62:53:c7:f9:b0:7b:0d:8a:33:72:
25:48:a1:17:b8:27:77:c6:4c:27:f5:6f:4e:59:4d:
96:8b:50:2f:aa:18:8f:6a:de:a8:2d:7b:a8:56:79:
92:cf:7a:8c:bf:15:63:56:af:c7:4e:48:e1:52:7a:
d3:7f:7b:8a:e2:b4:e7:ce:ed:95:10:ae:58:7c:a9:
f1:c5:f2:38:7d:70:a0:e8:53:c9:f1:ea:ff:3a:85:
ba:9e:06:51:d8:3e:25:b2:8c:49:88:88:c8:7f:f3:
88:fb:8e:d7:90:ce:b0:04:4f:60:e9:06:c7:89:f9:
df:45:cd:72:40:49:a6:03:0f:6d:8d:07:84:7e:1f:
d1:9c:cf:b8:42:8f:22:b5:35:ca:30:70:32:90:fa:
53:e7:47:10:e8:e5:89:1e:35:bc:9b:73:cc:f3:32:
e8:76:e5:3b:d7:03:60:dd:28:5d:d2:4b:e6:b9:91:
6f:88:9e:af:02:b8:9c:d2:58:4d:c4:07:8d:1c:b3:
31:d7:25:67:3d:7b:e8:b6:b7:ed:b1:c1:70:d7:44:
fe:7f:c0:95:3b:c1:94:df:33:d0:f6:24:b3:cf:6f:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:35:7B:D3:FD:7B:9A:70:31:B7:22:76:3E:1E:FA:79:3F:93:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.161.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:50:5d:bf:a9:68:56:7b:3d:c5:3d:24:29:2d:51:93:e9:fe:
0a:2c:ca:33:9c:08:e1:ab:56:64:05:45:98:c2:08:9d:37:fb:
10:d3:21:45:77:74:95:5f:5e:52:92:db:ef:85:ae:dd:90:dd:
b6:ed:0a:4d:db:fc:d9:ba:46:b4:66:93:da:58:0a:0b:fe:f0:
05:e0:38:ff:1d:75:17:79:27:62:12:68:12:0a:03:63:46:33:
f3:97:32:10:ce:7b:de:c5:62:14:fb:60:f1:c5:de:94:c2:08:
46:c7:b0:88:e2:1b:66:4a:c1:52:e4:83:ee:4a:f9:8b:96:2d:
d0:e8:fc:a4:04:9d:85:10:9d:09:2e:ea:ef:f9:49:a4:30:38:
db:4c:54:71:7c:44:53:78:bd:f6:c4:b9:11:f5:cb:85:ac:6e:
10:57:9e:dd:f5:17:0d:83:95:85:b3:ba:52:ab:37:07:6d:11:
56:26:cb:08:b0:3f:56:ac:ca:9e:02:67:67:c0:ae:1b:06:75:
d2:dc:ad:3e:bb:9c:d4:5e:f1:a7:e6:ac:d8:09:ee:03:3f:f4:
11:a7:1d:db:01:65:fd:a5:0e:b9:8f:3e:64:47:2d:4a:b5:15:
7b:ba:85:05:d4:d4:55:9e:44:a4:9a:46:59:9e:40:85:73:28:
61:e4:d3:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMccHVaUyHts6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi
MWNjMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
YmNiNWYwNDktNDY1Zi00YzMwLWE0OWEtNzBiMjAxOWM2MmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVxF6hCu+Nx5k2vrEcT+KzL2Qm/VCQmybtWa
5DbpVG5otmJTx/mwew2KM3IlSKEXuCd3xkwn9W9OWU2Wi1AvqhiPat6oLXuoVnmS
z3qMvxVjVq/HTkjhUnrTf3uK4rTnzu2VEK5YfKnxxfI4fXCg6FPJ8er/OoW6ngZR
2D4lsoxJiIjIf/OI+47XkM6wBE9g6QbHifnfRc1yQEmmAw9tjQeEfh/RnM+4Qo8i
tTXKMHAykPpT50cQ6OWJHjW8m3PM8zLoduU71wNg3Shd0kvmuZFviJ6vAric0lhN
xAeNHLMx1yVnPXvotrftscFw10T+f8CVO8GU3zPQ9iSzz2+ktQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWINXvT/XuacDG3InY+Hvp5P5MTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl
NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNDM1ZWU0YzctOTg3Yy0z
ZTA3LTg1ODktMGQzOWIzYzhlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3
NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm
YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh
ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0aHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRQXb+paFZ7PcU9JCktUZPp/gosyjOcCOGrVmQFRZjCCJ03+xDTIUV3
dJVfXlKS2++Frt2Q3bbtCk3b/Nm6RrRmk9pYCgv+8AXgOP8ddRd5J2ISaBIKA2NG
M/OXMhDOe97FYhT7YPHF3pTCCEbHsIjiG2ZKwVLkg+5K+YuWLdDo/KQEnYUQnQku
6u/5SaQwONtMVHF8RFN4vfbEuRH1y4WsbhBXnt31Fw2DlYWzulKrNwdtEVYmywiw
P1asyp4CZ2fArhsGddLcrT67nNRe8afmrNgJ7gM/9BGnHdsBZf2lDrmPPmRHLUq1
FXu6hQXU1FWeRKSaRlmeQIVzKGHk03g=
-----END CERTIFICATE-----
Generated at Wed Mar 25 18:18:45 2026 by rpki-client