
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
File: 7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa (raw, json)
Hash identifier: IAXSqDI/BcrEFWGv5KDZJa/F0hktYwV6I5A2+EyX9DM=
Subject key identifier: A3:D1:23:EA:B7:31:1F:E5:29:48:20:1A:AD:D4:9A:7A:96:DD:84:D9
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584D0217A7C312481C59EF717E80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 13768
IP address blocks: 65.39.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:a7:c3:12:48:1c:59:ef:71:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=f7ab0eaf-6e20-4089-aeab-1e51d961a108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:fa:cd:41:b1:4d:f3:ae:28:1b:78:37:b0:
d2:1c:ff:25:a7:ff:9e:d5:25:85:70:6e:3b:86:9b:
d8:0e:ed:c5:22:cd:e0:05:55:46:77:51:7e:2d:d4:
d0:c0:4d:aa:52:3b:4a:28:bc:fc:99:33:6c:d5:7b:
01:33:5e:e3:04:ea:ea:56:25:4a:ab:1e:c8:31:59:
f0:9c:6c:91:a6:98:56:0c:bf:a1:bc:0e:ea:bf:05:
da:89:32:77:6c:85:1f:b9:2b:4a:a9:40:86:75:cf:
23:68:8a:c8:8a:83:0d:52:54:47:ef:1c:2e:2f:67:
c9:b5:eb:5a:10:c3:a8:a3:81:1f:7b:5b:e1:05:e4:
e2:7f:fd:e9:dc:2e:0d:0f:a5:3f:5f:29:93:e7:21:
83:1b:11:84:e5:3d:67:f9:65:c1:de:b0:f1:fb:34:
ff:8f:bb:ec:87:a0:96:de:6f:72:dd:60:30:f4:63:
dc:dc:c0:ab:de:60:c1:48:a1:0d:92:46:47:2d:20:
ad:53:d2:3e:17:fd:b8:00:c6:1e:9e:c4:f2:b1:f2:
02:77:b2:6b:bd:0a:9c:f2:3d:49:9e:66:eb:ad:57:
6d:a2:2b:6a:d7:3b:cc:07:bf:00:69:96:59:3d:99:
e1:a3:f7:a4:bd:57:45:2a:aa:a7:c2:97:a7:53:af:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:23:EA:B7:31:1F:E5:29:48:20:1A:AD:D4:9A:7A:96:DD:84:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:30:9b:9c:23:3d:80:e8:9a:0e:8d:96:bf:6b:b0:fe:8a:52:
21:a0:3c:7c:63:91:2d:ac:0f:91:49:c3:54:11:d5:90:9b:fe:
c3:e6:5d:13:f2:b1:9b:d9:48:a1:7f:9b:c9:fb:c6:8f:44:67:
f1:4e:12:7c:11:d1:32:b1:07:fb:06:1b:2c:c7:28:35:64:f4:
b0:26:2f:fd:75:c9:98:33:a5:2f:7d:ba:98:92:6e:e7:4a:72:
a5:1c:2c:8d:fc:f1:9c:a4:41:91:cf:36:27:d9:35:d3:62:89:
2c:d5:cf:0e:a3:f8:9c:59:21:1d:68:d5:c9:6c:08:25:e5:79:
f1:18:2b:58:89:3b:0e:4e:6b:1f:f4:89:d6:3b:f8:30:13:00:
63:26:68:d2:d2:44:48:d4:fc:65:40:07:a5:33:45:cb:6b:36:
20:4d:55:2c:23:e5:7b:e3:23:87:26:7c:d0:a0:32:ce:cb:73:
72:37:8b:d2:43:8b:86:59:d4:e4:2f:98:c8:81:ef:d2:3a:b1:
53:9c:f7:f3:17:13:1f:1a:30:03:0b:02:43:64:3a:22:13:bc:
db:07:8a:bc:45:90:8b:bc:60:8a:7b:53:88:dd:d9:e5:54:23:
83:3f:c8:c3:5f:eb:0e:d3:12:32:2a:2c:d2:82:8b:c0:65:97:
58:e6:8d:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6fDEkgcWe9xfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZjdhYjBlYWYtNmUyMC00MDg5LWFlYWItMWU1MWQ5NjFhMTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjr6zUGxTfOuKBt4N7DSHP8lp/+e1SWFcG47
hpvYDu3FIs3gBVVGd1F+LdTQwE2qUjtKKLz8mTNs1XsBM17jBOrqViVKqx7IMVnw
nGyRpphWDL+hvA7qvwXaiTJ3bIUfuStKqUCGdc8jaIrIioMNUlRH7xwuL2fJteta
EMOoo4Efe1vhBeTif/3p3C4ND6U/XymT5yGDGxGE5T1n+WXB3rDx+zT/j7vsh6CW
3m9y3WAw9GPc3MCr3mDBSKENkkZHLSCtU9I+F/24AMYensTysfICd7JrvQqc8j1J
nmbrrVdtoitq1zvMB78AaZZZPZnho/ekvVdFKqqnwpenU6+/fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPRI+q3MR/lKUggGq3UmnqW3YTZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvN2YyYjNmNDYtMmRkNS0z
ODFlLWIxMjItZDdjMmFkNjYwMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAwm5wjPYDomg6Nlr9rsP6KUiGgPHxjkS2sD5FJw1QR1ZCb/sPmXRPy
sZvZSKF/m8n7xo9EZ/FOEnwR0TKxB/sGGyzHKDVk9LAmL/11yZgzpS99upiSbudK
cqUcLI388ZykQZHPNifZNdNiiSzVzw6j+JxZIR1o1clsCCXlefEYK1iJOw5Oax/0
idY7+DATAGMmaNLSREjU/GVAB6UzRctrNiBNVSwj5XvjI4cmfNCgMs7Lc3I3i9JD
i4ZZ1OQvmMiB79I6sVOc9/MXEx8aMAMLAkNkOiITvNsHirxFkIu8YIp7U4jd2eVU
I4M/yMNf6w7TEjIqLNKCi8Bll1jmjSU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:55 2026 by rpki-client