
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa
File: 8c35d617-cec2-3448-87cf-b812bd3bee7f.roa (raw, json)
Hash identifier: U5lUvf1Lw+yobuZGAgQ2IdiYVaesRU/e8Toz1dxnAiY=
Subject key identifier: 30:13:99:10:D1:59:19:A6:A3:71:7B:86:DF:52:80:F3:FF:85:19:A4
Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial: 010D0C9F4328584CF8524095FBBCE7B7C551F700
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa
Signing time: Tue 24 Feb 2026 14:00:41 +0000
ROA not before: Tue 24 Feb 2026 14:00:41 +0000
ROA not after: Mon 25 May 2026 13:00:41 +0000
asID: 19381
IP address blocks: 64.119.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:52:40:95:fb:bc:e7:b7:c5:51:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Validity
Not Before: Feb 24 14:00:41 2026 GMT
Not After : May 25 13:00:41 2026 GMT
Subject: CN=8e8ca49f-d14d-4f4b-b4fc-74b95576cf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:39:ab:97:ef:51:42:e9:86:56:f5:d5:4f:
cd:2f:a3:96:d1:16:6c:0e:49:16:af:ea:47:44:9e:
02:ea:3d:78:fa:f2:c4:ae:4f:ad:a0:dd:1f:f4:60:
f2:d9:c5:cd:da:3c:a5:83:65:14:35:eb:d3:43:0e:
2c:c2:73:82:5c:61:02:93:a3:e2:d7:3b:f9:91:19:
af:2a:ff:a4:0a:fd:50:9d:f4:17:fc:3b:12:0c:bd:
86:a6:69:ca:a5:53:3e:2d:04:3d:ca:09:21:13:2f:
e7:08:fc:06:ea:ce:43:48:2d:33:95:d7:0c:a6:d1:
dc:57:30:79:c4:9b:5b:66:bb:9a:4b:7c:f2:e7:d1:
bc:be:e3:8a:3f:69:5f:b6:a6:ca:cf:dc:b7:db:99:
25:fc:45:54:87:5f:b7:5a:9d:21:4b:00:86:7c:0b:
7b:dc:b3:91:04:39:47:30:89:b1:90:c6:48:94:e9:
d6:49:38:49:47:65:d9:92:c7:e7:19:20:de:cf:1a:
f7:a0:31:b5:5c:d3:86:14:4c:f0:ef:af:d9:fe:f5:
a0:46:91:91:9f:0c:3c:bf:30:5d:f0:cc:4c:5e:17:
4a:e0:98:26:18:f2:58:94:78:4a:5b:ac:5f:04:44:
36:ad:98:ad:7f:aa:fd:9a:59:ce:87:7a:7f:54:c7:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:99:10:D1:59:19:A6:A3:71:7B:86:DF:52:80:F3:FF:85:19:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
X509v3 Authority Key Identifier:
keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
sbgp-ipAddrBlock: critical
IPv4:
64.119.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:82:fe:58:1f:0d:d9:8f:7c:12:72:22:39:69:9a:d0:f5:21:
63:33:a9:c7:91:7e:9e:2a:6f:37:3c:c5:e4:ec:03:be:00:c2:
71:b0:4b:28:44:0c:a9:72:ba:03:ce:59:b7:20:a8:82:a4:17:
9e:0b:65:e6:17:c2:8a:1f:da:8f:01:69:f2:0e:3d:65:4f:00:
e9:17:e5:1a:46:47:84:8d:fa:47:51:58:cd:46:03:e3:f7:00:
53:37:71:cd:e6:49:92:e7:0a:10:48:d7:cc:2b:a6:cb:10:83:
dc:de:ea:b8:e3:1b:6a:90:48:df:b8:41:ce:47:21:e4:2b:ea:
83:48:6d:e6:4a:57:67:8a:85:dc:94:b5:ac:13:f2:06:35:05:
af:a3:9c:82:0b:35:dc:fd:d6:07:c6:02:a7:7a:68:86:04:04:
30:b2:10:93:a7:0b:4a:73:e6:75:4b:37:22:31:e9:9d:08:d3:
9b:ee:70:f1:0f:5e:ea:5b:2f:29:3b:c6:64:c9:fc:68:d7:60:
c8:47:41:a9:5c:07:05:c1:dc:a2:59:ed:5a:65:5d:3f:9e:0e:
d0:72:1e:bb:4c:90:b2:b8:ef:61:9d:d0:f8:07:71:e5:72:22:
d0:20:3b:12:ac:4f:55:f8:4f:4b:9b:b6:78:bc:b2:b9:61:36:
83:8e:34:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkCV+7znt8VR9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl
Njc0MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk
OGU4Y2E0OWYtZDE0ZC00ZjRiLWI0ZmMtNzRiOTU1NzZjZjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMU5q5fvUULphlb11U/NL6OW0RZsDkkWr+pH
RJ4C6j14+vLErk+toN0f9GDy2cXN2jylg2UUNevTQw4swnOCXGECk6Pi1zv5kRmv
Kv+kCv1QnfQX/DsSDL2GpmnKpVM+LQQ9ygkhEy/nCPwG6s5DSC0zldcMptHcVzB5
xJtbZruaS3zy59G8vuOKP2lftqbKz9y325kl/EVUh1+3Wp0hSwCGfAt73LORBDlH
MImxkMZIlOnWSThJR2XZksfnGSDezxr3oDG1XNOGFEzw76/Z/vWgRpGRnww8vzBd
8MxMXhdK4JgmGPJYlHhKW6xfBEQ2rZitf6r9mlnOh3p/VMfXrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDATmRDRWRmmo3F7ht9SgPP/hRmkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy
MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvOGMzNWQ2MTctY2VjMi0z
NDQ4LTg3Y2YtYjgxMmJkM2JlZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl
YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2
ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1
NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+C/lgfDdmPfBJyIjlpmtD1IWMzqceRfp4qbzc8xeTsA74AwnGwSyhE
DKlyugPOWbcgqIKkF54LZeYXwoof2o8BafIOPWVPAOkX5RpGR4SN+kdRWM1GA+P3
AFM3cc3mSZLnChBI18wrpssQg9ze6rjjG2qQSN+4Qc5HIeQr6oNIbeZKV2eKhdyU
tawT8gY1Ba+jnIILNdz91gfGAqd6aIYEBDCyEJOnC0pz5nVLNyIx6Z0I05vucPEP
XupbLyk7xmTJ/GjXYMhHQalcBwXB3KJZ7VplXT+eDtByHrtMkLK472Gd0PgHceVy
ItAgOxKsT1X4T0ubtni8srlhNoOONJc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:47 2026 by rpki-client