
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/75e76a6f-aef5-38ce-a923-082d64217867.roa
File: 75e76a6f-aef5-38ce-a923-082d64217867.roa (raw, json)
Hash identifier: FzLMzHJdtCVFPkl0ASSnxlIUA1K97OEcl/U3RKjAT/8=
Subject key identifier: CA:CC:6B:6F:91:1C:45:02:77:02:1C:08:05:5D:43:26:F6:7A:26:9D
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584D5B4F8F69FABA61DCD45A1580
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/75e76a6f-aef5-38ce-a923-082d64217867.roa
Signing time: Wed 01 Apr 2026 01:00:23 +0000
ROA not before: Wed 01 Apr 2026 01:00:23 +0000
ROA not after: Tue 30 Jun 2026 01:00:23 +0000
asID: 22616
IP address blocks: 170.85.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5b:4f:8f:69:fa:ba:61:dc:d4:5a:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Apr 1 01:00:23 2026 GMT
Not After : Jun 30 01:00:23 2026 GMT
Subject: CN=e3602a90-89ea-4048-bcb4-de8934d1a20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:c0:af:19:0b:4a:9d:71:3a:ff:7c:48:16:
e0:ae:4e:25:d2:32:b6:32:cc:0c:eb:86:8a:30:95:
c0:27:74:40:2b:6f:bf:de:4f:c8:05:e2:f1:d5:4d:
b4:e1:78:48:a7:a8:ce:3d:54:15:ec:3b:47:7a:5d:
c9:e3:84:3d:9a:ba:51:bf:a9:15:64:d7:9c:a4:f0:
43:1d:e7:68:a4:f9:d9:82:16:cc:34:b0:9f:10:21:
2c:6b:9d:38:43:1f:8b:fe:c4:68:0d:c2:e5:8d:ce:
cd:bf:44:6e:ff:f8:25:98:3f:f3:3b:8c:8d:46:23:
84:ff:d9:e4:1f:61:e4:13:3b:25:b5:dc:68:61:ab:
b8:c0:96:5a:bd:b7:90:1a:a3:29:21:bc:0b:cf:7c:
96:b3:70:a2:90:fa:40:68:3b:22:c3:a3:04:32:75:
df:a6:e0:ac:14:f0:66:68:1b:f2:f1:0f:bc:7d:5b:
f7:5e:94:70:f0:fb:cd:12:e2:d8:c6:25:c8:a9:57:
ef:0c:58:36:f2:fc:17:09:09:5f:05:c1:ce:13:48:
16:27:78:03:9e:63:69:b6:7f:a0:49:64:d1:ab:8c:
2e:8f:f5:36:26:93:83:67:8f:e8:45:44:cf:e5:7a:
b8:c0:3f:7a:d5:52:0a:2d:49:94:5e:3e:d6:59:da:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:6B:6F:91:1C:45:02:77:02:1C:08:05:5D:43:26:F6:7A:26:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/75e76a6f-aef5-38ce-a923-082d64217867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:37:ab:72:46:e5:c4:a2:53:2d:b4:c9:f1:5b:18:58:31:96:
25:74:9f:df:e4:54:ee:ea:92:05:34:0d:3e:46:da:6e:ea:c7:
02:39:7c:bd:6e:57:f0:2a:e9:80:11:5a:13:83:b0:59:25:1c:
7a:4b:06:c7:26:5d:50:5f:b6:c7:87:bc:d4:b8:86:45:a7:c8:
1c:5a:3c:7c:b2:7d:1d:15:2a:54:c9:70:31:6c:b0:b7:29:64:
b5:30:42:4d:6b:c0:46:91:d3:cb:6c:44:f8:d3:4f:35:ff:15:
47:2a:5c:91:92:3d:72:6d:84:ad:de:6e:da:f4:50:31:24:9e:
a3:ff:d2:a5:da:3a:33:da:be:72:e3:25:b1:ef:87:ca:24:47:
ae:e5:9e:16:6e:b2:8f:46:52:83:9a:c1:89:a3:7c:59:28:7f:
f3:ea:8d:39:1d:d6:85:b2:f1:7f:2d:00:4a:83:aa:a1:5f:b1:
77:42:52:fe:db:d7:2b:64:e3:94:42:a0:4f:7f:10:c6:5b:f5:
00:50:c6:dd:c9:1b:5c:c3:a4:da:af:28:ab:2e:60:99:10:ce:
f9:93:f8:ba:e4:56:07:52:f7:7c:45:2d:f7:bb:13:5d:8d:75:
5a:a7:97:44:8e:ad:1d:80:42:84:93:81:fc:12:93:3f:7f:77:
bc:2c:83:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT49p+rph3NRaFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk
ZTM2MDJhOTAtODllYS00MDQ4LWJjYjQtZGU4OTM0ZDFhMjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSbArxkLSp1xOv98SBbgrk4l0jK2MswM64aK
MJXAJ3RAK2+/3k/IBeLx1U204XhIp6jOPVQV7DtHel3J44Q9mrpRv6kVZNecpPBD
HedopPnZghbMNLCfECEsa504Qx+L/sRoDcLljc7Nv0Ru//glmD/zO4yNRiOE/9nk
H2HkEzsltdxoYau4wJZavbeQGqMpIbwLz3yWs3CikPpAaDsiw6MEMnXfpuCsFPBm
aBvy8Q+8fVv3XpRw8PvNEuLYxiXIqVfvDFg28vwXCQlfBcHOE0gWJ3gDnmNptn+g
SWTRq4wuj/U2JpODZ4/oRUTP5Xq4wD961VIKLUmUXj7WWdoHxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrMa2+RHEUCdwIcCAVdQyb2eiadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNzVlNzZhNmYtYWVmNS0z
OGNlLWE5MjMtMDgyZDY0MjE3ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAI3q3JG5cSiUy20yfFbGFgxliV0n9/kVO7qkgU0DT5G2m7qxwI5fL1u
V/Aq6YARWhODsFklHHpLBscmXVBftseHvNS4hkWnyBxaPHyyfR0VKlTJcDFssLcp
ZLUwQk1rwEaR08tsRPjTTzX/FUcqXJGSPXJthK3ebtr0UDEknqP/0qXaOjPavnLj
JbHvh8okR67lnhZuso9GUoOawYmjfFkof/PqjTkd1oWy8X8tAEqDqqFfsXdCUv7b
1ytk45RCoE9/EMZb9QBQxt3JG1zDpNqvKKsuYJkQzvmT+LrkVgdS93xFLfe7E12N
dVqnl0SOrR2AQoSTgfwSkz9/d7wsg+s=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:37 2026 by rpki-client