
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
File: 29d5e091-9446-3719-ad71-bce2ae8ab71c.roa (raw, json)
Hash identifier: vonAcrLDOJrFnzt1Vznj2ZB/dFFPisyI1vLg6RnHNlE=
Subject key identifier: 9F:1C:A3:CE:8E:0C:E8:EE:A9:EF:68:5A:B3:B7:E4:12:2F:54:84:9E
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584D8695430E5CA7609BA31F4D00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 14061
IP address blocks: 107.170.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:43:0e:5c:a7:60:9b:a3:1f:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=39b0c494-d2a0-4942-8f15-3c1e9d90e6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:ed:77:86:e0:26:ea:a6:bf:89:c4:15:02:
de:76:ef:32:03:29:70:4c:c7:c0:19:08:f8:2b:f9:
b4:18:2e:b9:1a:61:a9:cc:42:56:38:97:e8:17:66:
bb:e0:22:db:30:3d:3e:6c:76:93:e9:d1:75:2f:41:
83:40:f2:e3:2c:05:61:25:50:66:aa:87:05:fe:34:
9b:14:c9:7e:54:81:d9:f6:c3:71:38:9f:45:29:fb:
aa:bd:63:3f:9f:0b:be:80:2c:e8:f6:2c:83:6a:1e:
ae:ee:2a:84:31:89:a5:c0:28:30:a9:e1:fa:07:f9:
67:12:54:a7:92:9e:4e:13:89:5a:13:1b:ee:09:80:
9a:d8:19:52:93:fb:0d:98:6e:83:8e:f6:fb:37:7c:
fe:e7:60:fa:35:33:82:e1:82:48:81:f7:08:4c:b3:
0d:00:a3:c8:9f:13:a7:c6:6e:46:ef:51:9c:df:5e:
c3:c3:77:77:8c:64:c9:e4:46:c9:96:f9:a1:b0:c3:
b9:2b:f1:56:a1:64:6a:10:4b:84:ab:9a:af:ab:87:
9b:08:6e:9c:a0:93:09:18:b9:14:32:fe:a0:6d:eb:
c8:3c:34:f9:85:d2:42:8e:2e:f7:93:8e:14:72:5e:
f5:08:c5:67:89:19:b9:b0:60:cf:09:8f:21:65:cf:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1C:A3:CE:8E:0C:E8:EE:A9:EF:68:5A:B3:B7:E4:12:2F:54:84:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
107.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:d8:7d:82:f6:52:71:82:d1:78:75:62:bb:c1:55:b7:cc:9b:
87:39:b4:77:03:25:e9:f6:75:21:7b:b2:5c:a6:5e:e0:9e:cb:
eb:79:f0:b7:86:c2:82:2a:82:18:44:29:c4:53:9d:a4:87:af:
d2:84:ac:09:f4:ee:1d:26:38:4f:0b:ac:6d:bf:bc:da:58:17:
55:8b:46:3b:82:c3:06:04:00:20:7d:6a:6d:42:59:f0:c9:07:
f3:f6:b9:92:bc:bd:76:6f:f5:6f:30:10:c4:66:24:67:1e:a6:
66:49:de:53:30:34:a3:35:f3:c2:1d:ae:4c:d1:46:08:b0:0e:
5c:ad:ef:0c:cd:a7:dc:38:57:f5:d0:1c:88:78:86:84:e8:1f:
b5:98:a0:19:40:eb:cc:e4:47:f6:23:a1:d9:d0:18:84:41:c9:
a3:31:1e:9f:de:6a:82:a0:f2:16:b5:e1:f1:b1:78:01:34:ac:
ed:a5:5a:ec:da:3d:58:c4:0b:c8:2d:97:18:51:03:da:ec:9a:
58:9a:45:6f:3d:1e:89:5f:76:e0:8c:d8:6e:c7:ae:b9:49:a9:
bd:b8:26:98:8c:b0:6b:1f:90:65:d0:37:1a:29:76:b0:f2:7e:
6c:53:de:d9:7a:6b:28:4e:f6:77:9d:f7:bf:20:69:a8:36:a7:
47:1d:97:ab
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2GlUMOXKdgm6MfTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
MzliMGM0OTQtZDJhMC00OTQyLThmMTUtM2MxZTlkOTBlNmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxobtd4bgJuqmv4nEFQLedu8yAylwTMfAGQj4
K/m0GC65GmGpzEJWOJfoF2a74CLbMD0+bHaT6dF1L0GDQPLjLAVhJVBmqocF/jSb
FMl+VIHZ9sNxOJ9FKfuqvWM/nwu+gCzo9iyDah6u7iqEMYmlwCgwqeH6B/lnElSn
kp5OE4laExvuCYCa2BlSk/sNmG6Djvb7N3z+52D6NTOC4YJIgfcITLMNAKPInxOn
xm5G71Gc317Dw3d3jGTJ5EbJlvmhsMO5K/FWoWRqEEuEq5qvq4ebCG6coJMJGLkU
Mv6gbevIPDT5hdJCji73k44Ucl71CMVniRm5sGDPCY8hZc+w8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ8co86ODOjuqe9oWrO35BIvVISeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjlkNWUwOTEtOTQ0Ni0z
NzE5LWFkNzEtYmNlMmFlOGFiNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAa6owVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAu9h9gvZScYLReHViu8FVt8ybhzm0dwMl6fZ1IXuyXKZe4J7L63nwt4bC
giqCGEQpxFOdpIev0oSsCfTuHSY4Twusbb+82lgXVYtGO4LDBgQAIH1qbUJZ8MkH
8/a5kry9dm/1bzAQxGYkZx6mZkneUzA0ozXzwh2uTNFGCLAOXK3vDM2n3DhX9dAc
iHiGhOgftZigGUDrzORH9iOh2dAYhEHJozEen95qgqDyFrXh8bF4ATSs7aVa7No9
WMQLyC2XGFED2uyaWJpFbz0eiV924IzYbseuuUmpvbgmmIywax+QZdA3Gil2sPJ+
bFPe2XprKE72d533vyBpqDanRx2Xqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:51 2026 by rpki-client