
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5fd301a7-3fa3-3db8-86fd-2366cec59320.roa
File: 5fd301a7-3fa3-3db8-86fd-2366cec59320.roa (raw, json)
Hash identifier: 3l62DTuyCAqk/bSCbqwY04dh2A8TX+eATkAxumixiTo=
Subject key identifier: F0:7E:89:0A:E8:A3:93:C1:CD:6C:B0:A4:CE:E1:4B:4D:75:DD:1D:73
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584CAE5EBFA8C5631EA47D4B4480
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5fd301a7-3fa3-3db8-86fd-2366cec59320.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 144.25.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:bf:a8:c5:63:1e:a4:7d:4b:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=6bb821e0-657a-43cd-a88a-7c5130daf1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:e9:61:ec:53:70:63:2d:74:01:c3:9c:31:
6c:c7:94:84:4c:91:47:66:aa:3a:e0:d3:40:1a:bb:
b5:e0:1f:bd:84:98:bf:64:db:f9:83:ca:fe:6f:76:
71:75:a4:44:3a:d8:59:8f:4f:2b:0e:08:34:71:1d:
4c:8b:27:76:2c:6c:18:ff:02:5a:60:ae:2d:bc:33:
6a:0b:22:a9:dc:20:89:3d:b1:1d:00:ee:bd:0a:a1:
4b:06:98:9a:73:0f:66:bb:a0:71:c6:2a:b0:cb:0e:
99:e8:1c:6c:a8:53:4d:1b:7b:82:e1:94:e0:1b:61:
b6:20:34:25:75:51:86:91:d5:8d:7e:7c:33:6c:49:
f0:b5:69:e0:b3:1e:f1:bd:15:11:b4:e7:77:e9:9b:
67:df:7c:92:59:87:a2:74:cd:2b:bb:c9:29:92:45:
1a:e8:94:6b:26:5a:e7:7b:35:85:5b:e5:98:c8:07:
f3:ba:7d:65:ec:f6:8b:d9:ee:35:44:6f:37:9b:fc:
ed:c2:4c:39:12:39:38:80:78:7b:43:bf:a7:22:d8:
ef:45:76:2f:6e:92:6a:ec:8b:dc:68:fc:e0:ca:42:
59:05:8f:02:ac:39:22:84:3c:fd:53:49:a2:6b:db:
8f:9d:20:4a:5c:cc:59:8f:ee:0c:04:0c:3d:f9:bd:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:89:0A:E8:A3:93:C1:CD:6C:B0:A4:CE:E1:4B:4D:75:DD:1D:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5fd301a7-3fa3-3db8-86fd-2366cec59320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
144.25.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:24:93:9e:4d:f7:65:fb:1d:57:4d:b2:ec:e3:1e:0b:9b:82:
d1:ee:a0:23:47:ba:33:fc:26:2e:81:de:51:78:84:15:da:56:
e2:25:ea:b6:0b:58:11:d2:ef:6b:52:e1:79:d9:ea:7b:75:9e:
67:43:e6:3f:67:0f:92:e7:49:dd:6f:7c:00:11:39:aa:70:43:
18:19:a4:18:2e:76:8a:57:da:ef:d3:22:5a:56:8d:03:33:48:
2f:13:a2:43:34:99:a3:bc:ad:8c:a2:54:c3:b2:9b:af:17:ef:
d0:7c:a5:c3:31:ac:be:c6:b8:a1:75:ab:58:39:0c:a2:d5:51:
cd:de:8f:30:0c:4e:a5:c1:dd:36:80:f8:74:f5:fa:02:55:ba:
93:0d:fe:8e:a8:a9:da:cf:b1:89:39:bb:b4:5d:b6:c3:db:85:
60:d4:c4:4d:c4:f4:93:3a:2e:9c:8d:4f:d9:87:8f:6b:c8:fc:
b2:af:7c:5b:90:c4:7f:26:a2:6f:74:f8:f2:53:74:16:63:52:
76:79:c1:41:2a:25:9c:e4:8d:b8:ba:13:13:05:73:72:ef:81:
e0:2d:00:26:48:cb:7f:52:99:b1:83:6b:68:4a:80:cb:ca:15:
f4:89:b2:9e:95:9f:04:34:28:5e:e6:1b:a4:4d:c6:45:e1:4a:
22:e2:c0:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXr+oxWMepH1LRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NmJiODIxZTAtNjU3YS00M2NkLWE4OGEtN2M1MTMwZGFmMWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+LpYexTcGMtdAHDnDFsx5SETJFHZqo64NNA
Gru14B+9hJi/ZNv5g8r+b3ZxdaREOthZj08rDgg0cR1Miyd2LGwY/wJaYK4tvDNq
CyKp3CCJPbEdAO69CqFLBpiacw9mu6Bxxiqwyw6Z6BxsqFNNG3uC4ZTgG2G2IDQl
dVGGkdWNfnwzbEnwtWngsx7xvRURtOd36Ztn33ySWYeidM0ru8kpkkUa6JRrJlrn
ezWFW+WYyAfzun1l7PaL2e41RG83m/ztwkw5Ejk4gHh7Q7+nItjvRXYvbpJq7Ivc
aPzgykJZBY8CrDkihDz9U0mia9uPnSBKXMxZj+4MBAw9+b3voQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPB+iQroo5PBzWywpM7hS0113R1zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNWZkMzAxYTctM2ZhMy0z
ZGI4LTg2ZmQtMjM2NmNlYzU5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBlMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQkk55N92X7HVdNsuzjHgubgtHuoCNHujP8Ji6B3lF4hBXaVuIl6rYL
WBHS72tS4XnZ6nt1nmdD5j9nD5LnSd1vfAAROapwQxgZpBgudopX2u/TIlpWjQMz
SC8TokM0maO8rYyiVMOym68X79B8pcMxrL7GuKF1q1g5DKLVUc3ejzAMTqXB3TaA
+HT1+gJVupMN/o6oqdrPsYk5u7RdtsPbhWDUxE3E9JM6LpyNT9mHj2vI/LKvfFuQ
xH8mom90+PJTdBZjUnZ5wUEqJZzkjbi6ExMFc3LvgeAtACZIy39SmbGDa2hKgMvK
FfSJsp6VnwQ0KF7mG6RNxkXhSiLiwGc=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:39 2026 by rpki-client