
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d314650-8aec-32e9-89e6-0de754edf867.roa
File: 7d314650-8aec-32e9-89e6-0de754edf867.roa (raw, json)
Hash identifier: Dav5J5o2pmjFW9QX6J8CuRCTJEXt6SP9RMN9Q8Phrig=
Subject key identifier: 6A:29:92:CB:88:E3:00:D1:48:5C:BD:94:E0:6A:FC:03:0F:51:35:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA9D7EC2CC5C0B07CD5E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d314650-8aec-32e9-89e6-0de754edf867.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 67.189.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:9d:7e:c2:cc:5c:0b:07:cd:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=7f57dd63-c904-433b-a3fc-2713e53201b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:a4:4d:92:96:2a:cb:e8:eb:a1:c0:f5:b9:
1f:fa:94:a7:ca:7e:b8:e1:81:8c:8e:cb:8b:9a:48:
56:63:3a:5c:d1:5f:7b:6a:d2:fe:c7:9c:3d:d5:ba:
67:c4:5b:b3:d5:b6:dc:b2:8b:ff:c9:c1:b5:7c:f5:
0f:da:5c:e2:cc:2f:de:c0:c9:e3:a3:f5:7a:cb:f3:
b5:00:01:a4:43:71:49:7f:f4:a9:dc:bb:86:a2:51:
04:10:85:f1:de:f1:b4:8c:49:88:11:51:a7:54:c8:
58:d5:6e:c1:7d:db:a9:b8:82:43:c6:ba:6b:3f:aa:
f6:ba:8c:e3:49:9d:47:07:bd:fa:92:03:6e:d1:d3:
e8:9a:a2:dd:e6:d9:64:ab:21:fb:13:b0:db:bb:fd:
86:61:4d:89:5f:9b:1f:1e:71:e1:2e:5f:67:e5:3f:
26:d5:85:7e:ab:83:7b:ab:6c:43:33:33:36:ca:d2:
e3:bb:df:1e:b8:42:dd:50:5d:75:dd:74:86:82:28:
02:87:5e:b3:80:5f:ed:b3:23:a4:62:a4:60:02:fa:
fb:d7:09:cd:a3:c4:fa:da:01:27:9a:62:a5:98:1b:
b7:9f:34:86:6d:f4:43:51:ef:61:d6:70:b2:0a:6b:
d4:24:3c:f5:ca:32:0c:c5:0b:d4:ef:53:5f:9a:6e:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:92:CB:88:E3:00:D1:48:5C:BD:94:E0:6A:FC:03:0F:51:35:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d314650-8aec-32e9-89e6-0de754edf867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:95:13:f3:5c:fa:23:06:89:7a:c1:04:d6:99:a1:48:5f:70:
0d:3d:9c:bf:e5:f5:5f:03:d6:2b:93:12:1c:b3:4e:ac:e7:a2:
ea:7c:14:29:fa:53:5b:20:fb:50:95:be:3c:7e:d2:aa:aa:0a:
af:35:d1:4f:a4:bc:73:96:8e:d2:c1:27:fe:24:13:fd:d6:43:
a9:ee:fa:98:60:fc:ab:59:51:5b:00:3d:80:93:96:5c:2f:23:
a2:97:08:22:e7:c1:1f:5e:70:7c:71:1e:8e:17:5d:7e:f3:c2:
68:c9:df:39:87:59:97:c1:0b:cd:3e:bb:b2:69:f9:60:77:67:
44:81:b4:3a:3c:75:39:0f:32:7d:fb:16:30:2d:b8:bf:29:72:
7c:1e:66:52:31:8a:48:44:c5:0a:fc:f2:47:61:df:91:a8:20:
2b:4d:24:64:75:7e:73:71:84:f5:4c:e2:4a:46:58:67:03:14:
a7:57:14:66:60:cb:b7:c7:72:9f:11:c2:b5:35:5b:6c:09:2b:
9a:4f:bd:2d:ec:57:18:67:87:03:e4:f4:4b:2e:43:41:7b:f6:
76:ac:bb:81:56:2f:ca:1f:de:7d:61:34:06:4c:67:37:00:c2:
35:7e:54:b4:5d:12:f0:cd:4b:70:9e:5e:35:ae:b8:30:15:4f:
0c:e4:8b:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vup1+wsxcCwfNXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
N2Y1N2RkNjMtYzkwNC00MzNiLWEzZmMtMjcxM2U1MzIwMWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhKkTZKWKsvo66HA9bkf+pSnyn644YGMjsuL
mkhWYzpc0V97atL+x5w91bpnxFuz1bbcsov/ycG1fPUP2lzizC/ewMnjo/V6y/O1
AAGkQ3FJf/Sp3LuGolEEEIXx3vG0jEmIEVGnVMhY1W7BfdupuIJDxrprP6r2uozj
SZ1HB736kgNu0dPomqLd5tlkqyH7E7Dbu/2GYU2JX5sfHnHhLl9n5T8m1YV+q4N7
q2xDMzM2ytLju98euELdUF113XSGgigCh16zgF/tsyOkYqRgAvr71wnNo8T62gEn
mmKlmBu3nzSGbfRDUe9h1nCyCmvUJDz1yjIMxQvU71Nfmm7O5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGopksuI4wDRSFy9lOBq/AMPUTW8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2QzMTQ2NTAtOGFlYy0z
MmU5LTg5ZTYtMGRlNzU0ZWRmODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ720MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALKVE/Nc+iMGiXrBBNaZoUhfcA09nL/l9V8D1iuTEhyzTqznoup8FCn6
U1sg+1CVvjx+0qqqCq810U+kvHOWjtLBJ/4kE/3WQ6nu+phg/KtZUVsAPYCTllwv
I6KXCCLnwR9ecHxxHo4XXX7zwmjJ3zmHWZfBC80+u7Jp+WB3Z0SBtDo8dTkPMn37
FjAtuL8pcnweZlIxikhExQr88kdh35GoICtNJGR1fnNxhPVM4kpGWGcDFKdXFGZg
y7fHcp8RwrU1W2wJK5pPvS3sVxhnhwPk9EsuQ0F79nasu4FWL8of3n1hNAZMZzcA
wjV+VLRdEvDNS3CeXjWuuDAVTwzki1k=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:56 2026 by rpki-client