
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa
File: 962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa (raw, json)
Hash identifier: 4heO7SUy43QL4MpIW9hDQw/FWPxYUPm21LtMBnLPfjI=
Subject key identifier: EF:C0:89:EF:A2:57:46:6D:6A:1D:B7:69:3B:95:23:DD:3B:D4:78:D6
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584D65152E565FE4DC5E2D11D970
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 16696
IP address blocks: 170.199.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:2e:56:5f:e4:dc:5e:2d:11:d9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=4a99172f-7f66-4042-a207-4e8b2822ead5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:ae:1f:62:6e:5c:e6:09:69:12:5a:54:8e:
0c:4c:5c:ba:47:84:ee:f9:6a:09:3f:14:58:42:93:
e2:25:ba:7a:b4:8e:dc:4e:7d:bb:bc:ad:36:e5:9a:
fe:46:6d:b9:0d:4b:60:f1:6f:6d:2b:e5:64:3a:29:
58:8d:fd:5e:fb:14:f6:08:47:4b:55:8b:bc:9a:02:
af:c6:6e:e1:e4:5d:5b:82:09:34:b2:c0:f4:d2:4f:
b1:0a:a6:a0:aa:86:50:27:cb:13:16:ff:a6:1e:68:
b9:78:b8:32:35:9b:42:95:a1:99:5a:4f:ed:3c:90:
1b:42:f9:35:91:17:be:7c:98:ab:b7:9d:80:08:22:
92:89:1b:4f:2a:78:e6:01:07:3c:05:d2:cf:46:85:
79:01:26:b0:0c:6c:08:0a:18:f4:c2:73:e5:4e:6a:
f4:83:07:d3:0d:5b:a8:6b:c5:fd:f2:df:17:16:1b:
ef:82:51:d1:9b:a1:7b:e2:1c:17:4b:e3:8c:29:9e:
d0:be:94:21:b6:2c:c5:3b:45:3d:1d:82:eb:6e:88:
73:32:9a:5c:9b:ec:9a:1a:70:ae:45:e3:ea:d5:85:
6b:6e:6b:45:9a:d1:fc:33:a0:81:10:42:0f:70:3e:
85:e8:c0:fd:ed:0b:ba:a7:39:25:a9:3b:78:9c:49:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C0:89:EF:A2:57:46:6D:6A:1D:B7:69:3B:95:23:DD:3B:D4:78:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:24:48:48:d3:ce:0f:f9:00:8c:3d:a5:0a:e2:31:f6:48:ea:
f2:90:db:c8:10:5e:96:2c:ce:a9:af:01:29:e8:01:0e:57:fe:
ae:9f:ce:30:e9:95:08:13:27:61:92:37:55:55:38:e0:19:8d:
ed:e2:5a:ff:4d:57:7f:ca:e8:8e:bd:74:12:9f:0d:33:05:64:
9b:4a:af:f3:2d:34:dc:cf:c6:60:08:9a:5e:1a:0e:f1:a7:31:
0d:b1:62:89:17:30:1a:04:f4:58:ce:da:fd:6c:8e:11:7e:97:
3e:23:aa:43:62:ef:7c:26:79:d3:65:6c:e2:fc:32:2e:c5:a2:
ae:8a:5b:d7:0d:2f:83:56:95:4d:19:d5:20:b0:7e:8d:6c:6b:
93:d0:82:53:24:6b:c0:41:38:0f:6c:1b:4a:bd:46:22:bb:ad:
1b:d7:08:d1:67:27:7d:45:74:23:e6:ce:b3:ab:81:a7:75:c5:
68:d4:85:c1:a6:a2:e8:e3:aa:ee:3b:bd:3a:29:cf:ec:47:98:
39:b5:2b:2b:2d:51:5f:14:2a:30:08:ee:8f:41:b9:39:2c:0b:
32:84:3a:48:71:aa:f0:e2:60:84:44:dd:dc:9a:81:c3:77:a9:
cc:54:58:38:30:62:49:ff:bb:c0:c8:33:0b:57:ca:77:6e:df:
05:b7:40:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFS5WX+TcXi0R2XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
NGE5OTE3MmYtN2Y2Ni00MDQyLWEyMDctNGU4YjI4MjJlYWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOeuH2JuXOYJaRJaVI4MTFy6R4Tu+WoJPxRY
QpPiJbp6tI7cTn27vK025Zr+Rm25DUtg8W9tK+VkOilYjf1e+xT2CEdLVYu8mgKv
xm7h5F1bggk0ssD00k+xCqagqoZQJ8sTFv+mHmi5eLgyNZtClaGZWk/tPJAbQvk1
kRe+fJirt52ACCKSiRtPKnjmAQc8BdLPRoV5ASawDGwIChj0wnPlTmr0gwfTDVuo
a8X98t8XFhvvglHRm6F74hwXS+OMKZ7QvpQhtizFO0U9HYLrbohzMppcm+yaGnCu
RePq1YVrbmtFmtH8M6CBEEIPcD6F6MD97Qu6pzklqTt4nEl8EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/Aie+iV0Ztah23aTuVI9071HjWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOTYyYTI0YzUtMWNhOS0z
OGU0LWJjNzMtYWEyY2QzZmRjZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMkSEjTzg/5AIw9pQriMfZI6vKQ28gQXpYszqmvASnoAQ5X/q6fzjDp
lQgTJ2GSN1VVOOAZje3iWv9NV3/K6I69dBKfDTMFZJtKr/MtNNzPxmAIml4aDvGn
MQ2xYokXMBoE9FjO2v1sjhF+lz4jqkNi73wmedNlbOL8Mi7Foq6KW9cNL4NWlU0Z
1SCwfo1sa5PQglMka8BBOA9sG0q9RiK7rRvXCNFnJ31FdCPmzrOrgad1xWjUhcGm
oujjqu47vTopz+xHmDm1KystUV8UKjAI7o9BuTksCzKEOkhxqvDiYIRE3dyagcN3
qcxUWDgwYkn/u8DIMwtXyndu3wW3QKo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:44 2026 by rpki-client