
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa
File: 4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa (raw, json)
Hash identifier: JzWI98m4rIIYY/2ikF+IT6HHwxyiKVg1u9G1i4JAddk=
Subject key identifier: 41:27:97:A4:38:3D:F3:30:B0:82:5C:E3:E2:FE:DE:FD:18:F4:14:B0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAFBC817D647C3B38F4FCE200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa
Signing time: Thu 29 Jan 2026 14:00:40 +0000
ROA not before: Thu 29 Jan 2026 14:00:40 +0000
ROA not after: Wed 29 Apr 2026 13:00:40 +0000
asID: 31898
IP address blocks: 159.54.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:bc:81:7d:64:7c:3b:38:f4:fc:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 14:00:40 2026 GMT
Not After : Apr 29 13:00:40 2026 GMT
Subject: CN=59384d26-7ac2-47f3-81c6-1c8d1109504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:f6:e2:03:99:d7:6f:77:32:23:fa:14:20:
52:38:31:90:b9:2a:6d:c7:3b:ca:21:b9:eb:d8:36:
d8:6c:1c:a1:41:93:4b:5e:ec:e7:d7:17:8c:7c:23:
45:15:69:eb:f1:22:75:0c:d1:4e:33:fa:50:a8:95:
f8:70:34:dd:ec:8d:9d:79:78:5f:7a:e2:57:a5:67:
70:87:7e:95:35:64:a3:de:56:ec:8a:d1:92:f1:09:
f2:d0:3d:23:60:60:9f:da:72:90:81:f7:51:2b:ec:
19:17:a7:87:e0:05:cf:62:42:bc:ad:6d:fc:b9:26:
5c:60:e1:6f:e7:61:69:2a:ea:55:5a:f3:75:fa:2f:
7d:2b:3d:72:b6:57:23:7c:89:d2:64:d2:0d:73:20:
a3:bd:b9:58:23:46:c5:93:71:0a:b6:0c:18:0e:da:
8c:f6:45:d6:80:3b:6f:fc:9f:41:10:ab:cd:b0:33:
c6:5f:ab:97:4b:75:d5:36:64:a6:e2:76:85:dd:e9:
bb:b5:71:69:ab:2b:d9:15:cb:7f:26:11:a6:a3:00:
a3:65:e8:ef:27:76:57:79:fc:dd:a5:08:d5:cc:1e:
f7:25:0a:59:c4:94:49:e3:57:fe:aa:05:3a:94:20:
5f:cf:75:49:49:96:40:54:8c:58:18:e7:49:b4:7a:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:97:A4:38:3D:F3:30:B0:82:5C:E3:E2:FE:DE:FD:18:F4:14:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
159.54.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:18:79:9d:0b:ef:03:f1:07:1f:50:d7:17:3a:7a:9a:b4:d8:
b5:e9:fc:d4:df:6f:38:80:0b:07:e3:3b:1a:b7:7c:30:78:1a:
0e:f1:ce:0e:11:de:60:d5:38:ad:b8:0e:7c:2e:98:63:0f:4b:
30:94:38:ac:f5:ef:b3:c0:fb:a9:24:a4:65:95:51:da:38:db:
0f:6e:3b:47:d6:f8:51:c3:53:6c:cf:a6:8c:41:13:47:22:31:
e3:dc:5f:ba:ad:29:29:61:ee:f4:c7:21:95:c9:0f:04:a6:75:
cc:f5:90:35:cb:2d:9d:e9:42:b7:cb:57:a3:01:5f:79:d9:3d:
c2:bb:38:61:62:e6:01:3f:c9:09:2d:77:02:ce:93:74:a4:0a:
44:5f:cd:12:4d:a9:d5:a1:8f:f5:e3:49:8b:c3:57:a0:5e:4f:
e6:23:a3:96:d3:17:f3:25:dc:66:f3:9a:03:54:0e:9b:1d:4a:
6a:e3:5c:43:6f:22:c1:92:06:99:11:a5:32:de:d6:82:6f:b6:
eb:1b:19:c1:eb:64:8c:a6:1e:d2:f7:8f:62:ef:ca:a7:83:22:
ed:40:4d:f6:59:d8:d9:ba:7b:9c:4a:56:33:7f:03:8e:77:1a:
7b:57:2d:98:69:86:22:93:4f:bf:10:f4:ad:54:13:41:af:15:
f5:94:ec:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIF9ZHw7OPT84gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk
NTkzODRkMjYtN2FjMi00N2YzLTgxYzYtMWM4ZDExMDk1MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s/24gOZ1293MiP6FCBSODGQuSptxzvKIbnr
2DbYbByhQZNLXuzn1xeMfCNFFWnr8SJ1DNFOM/pQqJX4cDTd7I2deXhfeuJXpWdw
h36VNWSj3lbsitGS8Qny0D0jYGCf2nKQgfdRK+wZF6eH4AXPYkK8rW38uSZcYOFv
52FpKupVWvN1+i99Kz1ytlcjfInSZNINcyCjvblYI0bFk3EKtgwYDtqM9kXWgDtv
/J9BEKvNsDPGX6uXS3XVNmSm4naF3em7tXFpqyvZFct/JhGmowCjZejvJ3ZXefzd
pQjVzB73JQpZxJRJ41f+qgU6lCBfz3VJSZZAVIxYGOdJtHqJAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEnl6Q4PfMwsIJc4+L+3v0Y9BSwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZlYTkyYzItYWI4ZC0z
MTg1LThmMGMtNzA2NmJhZThjZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnzZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEYeZ0L7wPxBx9Q1xc6epq02LXp/NTfbziACwfjOxq3fDB4Gg7xzg4R
3mDVOK24DnwumGMPSzCUOKz177PA+6kkpGWVUdo42w9uO0fW+FHDU2zPpoxBE0ci
MePcX7qtKSlh7vTHIZXJDwSmdcz1kDXLLZ3pQrfLV6MBX3nZPcK7OGFi5gE/yQkt
dwLOk3SkCkRfzRJNqdWhj/XjSYvDV6BeT+Yjo5bTF/Ml3GbzmgNUDpsdSmrjXENv
IsGSBpkRpTLe1oJvtusbGcHrZIymHtL3j2LvyqeDIu1ATfZZ2Nm6e5xKVjN/A453
GntXLZhphiKTT78Q9K1UE0GvFfWU7Kg=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:21 2026 by rpki-client