
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/430f915f-5d2b-3b81-b5dc-15b9fb53dc03.roa
File: 430f915f-5d2b-3b81-b5dc-15b9fb53dc03.roa (raw, json)
Hash identifier: hARFZgaosvFhzQIQ+MUbFlk27k9XhCZqX8KLmwHyHE0=
Subject key identifier: AB:3A:CB:EC:D1:28:1A:96:45:F9:0E:79:D5:3E:64:35:AA:CA:DC:99
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D571FC315BA7C992E7E6F4400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/430f915f-5d2b-3b81-b5dc-15b9fb53dc03.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 132372
IP address blocks: 172.111.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:c3:15:ba:7c:99:2e:7e:6f:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=8d2970f7-7b91-4b94-8364-869cce658414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:4f:ed:31:07:e6:ac:bc:63:0b:70:ff:94:
25:a1:25:87:1a:0e:9d:8e:91:a6:72:d3:43:bb:ad:
a2:5e:f3:67:cd:35:f8:34:2a:9a:40:42:b4:6b:1b:
83:c8:d2:95:61:0f:2f:66:45:ac:2d:d7:71:61:79:
8f:64:8f:d5:ad:47:27:78:4f:85:fd:a5:36:bb:a9:
1e:65:a6:e9:d4:f1:ba:4c:61:8e:2c:c3:d7:7f:93:
f6:09:d2:8a:59:a4:5a:28:83:fe:72:5b:5f:c5:22:
1c:31:fe:23:92:0e:7b:f7:53:af:d9:ea:28:a5:23:
b6:67:97:22:3f:19:7c:51:c8:c9:13:11:19:94:77:
ad:f9:fe:f0:d1:ae:0d:cd:9c:63:6f:a5:5d:22:9d:
e2:35:0a:b4:ac:d5:ff:99:55:ca:4f:cf:c4:5e:65:
14:92:7d:05:cc:c7:b6:4a:92:90:1e:57:01:11:75:
a2:bc:72:f7:65:69:18:b4:cc:99:75:6d:d2:00:61:
37:1c:d8:65:eb:f2:18:14:dc:50:5e:ac:65:f9:69:
5e:43:94:88:a1:f8:80:29:4d:31:f6:16:f7:c9:05:
80:25:db:1d:c2:f7:3c:74:41:b9:33:c3:d1:86:d2:
c2:9e:80:76:9e:c4:2d:12:ac:7b:61:09:27:da:32:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3A:CB:EC:D1:28:1A:96:45:F9:0E:79:D5:3E:64:35:AA:CA:DC:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/430f915f-5d2b-3b81-b5dc-15b9fb53dc03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:bd:fd:68:94:2f:91:f7:c0:12:fe:00:6c:50:e0:8a:c6:1b:
3f:0e:6b:80:81:54:f5:f4:5e:2f:49:47:bb:20:fc:4a:4b:8f:
28:25:58:d3:b9:64:b3:d1:ff:6a:61:2a:62:34:e3:a7:e6:02:
6b:15:12:e8:bb:9c:34:86:21:a5:6e:dd:a4:c5:11:38:88:1c:
ef:df:66:13:08:b5:37:31:d9:3d:2a:98:7a:e0:98:6f:f8:a8:
c4:25:6b:a5:8c:10:71:c7:54:9e:33:f7:f5:96:a6:ad:9b:39:
d1:9b:f5:7d:9f:97:1c:b1:f0:19:e6:71:68:1e:f3:b5:63:03:
3b:53:d6:1b:17:77:8c:93:cf:8b:cf:e6:89:38:7f:83:f3:0b:
79:23:29:7d:b7:e8:f1:13:4f:7e:87:fd:61:24:50:b9:3f:b6:
f6:78:c6:a3:87:e6:65:ab:4e:8b:62:bc:8d:11:29:b8:c5:2d:
06:b6:43:5f:f1:84:3f:07:c5:fd:de:8b:75:2b:e7:47:c4:2a:
f3:58:a6:f8:3d:04:19:a5:1e:91:61:0a:73:55:9a:5d:0d:a9:
34:7b:62:4d:a0:d1:ce:82:b4:96:cb:d8:c2:17:cc:77:fe:1b:
d8:f5:f2:a4:14:fc:c3:80:f2:78:c7:30:2a:b9:17:8b:78:cb:
a4:38:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:28 2026 by rpki-client