
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
File: a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa (raw, json)
Hash identifier: hET0FEpT4Ui3g3mM9qpq/DJ7zZgp1awzWmlvk2cA248=
Subject key identifier: 3B:55:FE:CC:60:13:F8:A9:1B:F8:F9:C0:EC:B5:A8:08:1F:49:83:F2
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F4328584CBF1728D8182EF2EAEDA1BB40
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
Signing time: Wed 04 Feb 2026 02:00:31 +0000
ROA not before: Wed 04 Feb 2026 02:00:31 +0000
ROA not after: Tue 05 May 2026 01:00:31 +0000
asID: 393529
IP address blocks: 160.129.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bf:17:28:d8:18:2e:f2:ea:ed:a1:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: Feb 4 02:00:31 2026 GMT
Not After : May 5 01:00:31 2026 GMT
Subject: CN=fcf1de71-e3e8-4ab4-b101-31eac581b7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:5e:fa:33:0f:59:ea:96:31:75:93:fd:3f:
a6:3d:a6:f9:3f:ab:23:8c:55:33:2c:d2:37:1a:e3:
fa:28:b1:a9:57:2e:5d:10:07:b1:fe:3d:d5:38:d7:
c4:74:53:f7:17:30:12:6c:a5:dd:e1:84:5c:83:c1:
e8:21:f7:cc:f1:a9:e0:c5:59:2d:6f:f3:04:7e:40:
15:45:27:b2:59:dd:c0:2b:65:6d:02:21:84:67:a9:
7e:4d:12:7e:e0:02:10:60:72:26:54:b9:42:27:9c:
3f:dd:08:24:14:ac:52:8a:b5:c4:78:20:d7:e9:04:
99:a0:b9:77:46:e9:5e:0a:97:7e:94:d3:5b:f9:57:
d1:46:6f:b0:44:b4:89:34:62:4d:b4:2c:ed:f2:c4:
ef:3d:80:2f:42:58:6d:b5:8b:f3:d8:da:17:02:3d:
1b:52:da:89:1d:a2:88:66:7e:7c:59:7d:1e:fb:d8:
5e:2b:2e:78:76:fd:a1:46:14:2e:37:ff:e3:e0:10:
f0:2b:ad:bf:38:3f:a8:03:63:79:99:b9:23:20:0f:
0e:53:ef:28:67:2f:93:84:0c:98:3d:5f:ac:9b:bd:
d0:6d:7d:af:95:c0:9a:f6:aa:0d:5a:77:cf:b5:15:
94:2a:2a:93:cc:8c:ac:95:f1:e8:8f:0f:30:dc:49:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:FE:CC:60:13:F8:A9:1B:F8:F9:C0:EC:B5:A8:08:1F:49:83:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:60:5f:71:44:b6:7b:92:55:d7:26:61:89:1e:2a:6f:63:3e:
cf:b1:b5:ed:e2:3a:4b:25:50:af:1a:cc:c4:75:be:92:59:9a:
26:6b:b8:9e:8e:e4:8e:77:48:07:81:6e:9e:02:57:cf:b2:d4:
f6:8d:0a:10:f6:c8:6a:4d:58:e1:bc:ea:42:ef:34:01:ba:28:
75:9e:8e:ac:80:b1:39:71:be:0f:af:63:fc:ef:8f:3d:33:1e:
70:52:14:16:bf:33:b1:70:bf:ec:90:ca:6b:f9:6b:52:f9:94:
80:ab:7d:88:2d:ff:3c:e9:b4:ce:e9:80:d9:e2:1f:0e:aa:59:
c1:ef:db:e5:51:da:d0:6f:92:67:0d:0b:b5:1a:50:9d:19:91:
2e:b2:5e:20:0d:1e:c2:4c:3e:70:5f:c8:fa:20:c8:8c:f1:de:
bc:4c:ec:23:04:ce:65:17:db:1d:a9:b8:42:27:34:43:2f:c7:
8a:64:5e:88:63:60:e2:f7:ae:52:11:dd:06:c5:ff:f9:91:53:
5a:7b:e8:8f:9c:71:ce:3f:55:8e:78:f8:ea:cb:90:d9:36:b4:
0b:a9:a0:e8:23:39:a1:6f:43:3a:39:e3:e2:69:54:ad:c6:35:
9b:07:47:98:2e:ce:09:d0:67:0f:55:d7:33:ab:fd:7f:ce:fc:
7b:6e:2b:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEy/FyjYGC7y6u2hu0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh
MDFlMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZmNmMWRlNzEtZTNlOC00YWI0LWIxMDEtMzFlYWM1ODFiN2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Je+jMPWeqWMXWT/T+mPab5P6sjjFUzLNI3
GuP6KLGpVy5dEAex/j3VONfEdFP3FzASbKXd4YRcg8HoIffM8angxVktb/MEfkAV
RSeyWd3AK2VtAiGEZ6l+TRJ+4AIQYHImVLlCJ5w/3QgkFKxSirXEeCDX6QSZoLl3
RuleCpd+lNNb+VfRRm+wRLSJNGJNtCzt8sTvPYAvQlhttYvz2NoXAj0bUtqJHaKI
Zn58WX0e+9heKy54dv2hRhQuN//j4BDwK62/OD+oA2N5mbkjIA8OU+8oZy+ThAyY
PV+sm73QbX2vlcCa9qoNWnfPtRWUKiqTzIyslfHojw8w3Ek8twIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDtV/sxgE/ipG/j5wOy1qAgfSYPyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm
Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvYTBhYzhjNWItNGJjNC0z
NDcwLTgyZWYtNjc5MmI0NGFiOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk
NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi
YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2
YzQ3YmEwMWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAemBfcUS2e5JV1yZhiR4qb2M+z7G17eI6SyVQrxrMxHW+klmaJmu4no7k
jndIB4FungJXz7LU9o0KEPbIak1Y4bzqQu80AboodZ6OrICxOXG+D69j/O+PPTMe
cFIUFr8zsXC/7JDKa/lrUvmUgKt9iC3/POm0zumA2eIfDqpZwe/b5VHa0G+SZw0L
tRpQnRmRLrJeIA0ewkw+cF/I+iDIjPHevEzsIwTOZRfbHam4Qic0Qy/HimReiGNg
4veuUhHdBsX/+ZFTWnvoj5xxzj9Vjnj46suQ2Ta0C6mg6CM5oW9DOjnj4mlUrcY1
mwdHmC7OCdBnD1XXM6v9f878e24rCw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:41 2026 by rpki-client