
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3921f03-5708-3b15-bf8b-ccffe95880ab.roa
File: f3921f03-5708-3b15-bf8b-ccffe95880ab.roa (raw, json)
Hash identifier: ++u2MkfZzFF0FOvxe9A2MJR43KXa5GjaPPTpABSxnrw=
Subject key identifier: 7B:DC:1E:5B:C5:E1:58:00:75:08:E3:D2:1B:F5:97:3A:D6:85:F0:AC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584CF42213B7552B2C80AA341A00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3921f03-5708-3b15-bf8b-ccffe95880ab.roa
Signing time: Mon 23 Feb 2026 02:00:31 +0000
ROA not before: Mon 23 Feb 2026 02:00:31 +0000
ROA not after: Sun 24 May 2026 01:00:31 +0000
asID: 834
IP address blocks: 172.111.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f4:22:13:b7:55:2b:2c:80:aa:34:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 23 02:00:31 2026 GMT
Not After : May 24 01:00:31 2026 GMT
Subject: CN=88df5da9-d3f7-40d0-8ca1-7fd74969f5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:db:05:d0:4a:a2:00:e0:8f:a4:4c:57:22:
cd:0d:33:8d:b1:d2:da:42:7e:83:c0:e8:16:c0:16:
b6:38:3e:28:51:49:f2:dd:f1:95:09:aa:38:31:44:
98:e6:c1:02:98:7a:17:c9:95:75:13:11:b9:80:01:
c7:ff:94:0c:4a:fe:d0:d8:bf:ad:c7:24:59:6a:6e:
97:ba:39:85:90:a4:c5:e9:cc:c9:1d:7e:ff:5f:6c:
92:a7:b0:41:ce:8a:d2:71:12:a9:86:87:61:a9:3c:
63:ae:d7:0f:29:3b:f0:1b:e1:08:2e:c4:36:8b:87:
9f:0e:e8:4a:71:cf:08:62:c5:5e:22:79:e6:90:a1:
5c:bf:a1:87:6c:65:58:61:d9:63:c8:0f:0c:55:cc:
2a:f9:31:dd:ae:02:a1:05:f7:a8:1f:db:93:c7:c4:
9e:ed:23:93:a3:46:c4:01:78:e2:96:a6:e8:60:e2:
81:70:1c:f1:24:98:3a:4c:77:36:4e:bf:a9:de:af:
f4:83:f0:37:80:3e:22:27:fe:48:3b:53:5f:61:cd:
0d:8e:4f:23:57:35:81:cf:63:64:4b:c3:44:82:bc:
e6:c1:bb:7f:66:91:27:d1:b5:00:a4:81:e9:04:ab:
88:97:96:e7:37:ae:72:1b:39:6b:b8:5d:c7:36:cd:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:1E:5B:C5:E1:58:00:75:08:E3:D2:1B:F5:97:3A:D6:85:F0:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3921f03-5708-3b15-bf8b-ccffe95880ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:6a:03:f8:7f:e7:7c:33:d1:1b:3f:94:6f:4d:47:0d:fd:b7:
b4:50:04:14:26:82:0c:be:41:32:ff:05:59:97:10:0f:7e:5b:
10:95:87:86:f8:21:86:a0:86:14:cc:52:5a:fa:f2:bb:56:e6:
12:54:99:ef:82:97:d4:f2:66:06:aa:c3:f2:b2:01:3e:79:29:
da:ca:6c:2c:0d:15:de:70:d7:e4:0a:70:a7:15:c8:4b:aa:86:
d7:d4:98:d1:16:e2:f8:58:d9:45:92:a7:15:b1:36:f0:0b:c7:
f6:94:f5:13:21:54:47:99:f0:df:7e:ad:a5:60:fa:59:a6:5d:
cf:b2:98:93:0f:75:02:7b:7b:03:8b:07:e7:6f:a2:27:eb:1e:
2f:26:18:ce:6b:51:06:33:fd:2a:2e:b9:aa:4b:db:7d:5e:e0:
e7:7b:9e:8e:fe:14:4e:9f:db:a4:c1:4a:e7:91:a9:79:42:db:
b0:2b:5f:93:c7:51:e6:2e:76:f0:5e:5c:63:6c:f4:f7:27:c3:
1f:f8:17:90:a1:e6:2f:31:0c:28:ff:b5:9a:a8:77:93:b6:60:
b9:dd:c9:14:78:28:4b:f4:fd:22:f2:66:6a:01:60:09:b4:2c:
75:70:4d:cf:0a:8b:b3:82:c3:f7:4f:c0:fd:46:26:c3:01:14:
7f:58:ff:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IhO3VSssgKo0GgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
ODhkZjVkYTktZDNmNy00MGQwLThjYTEtN2ZkNzQ5NjlmNWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGPbBdBKogDgj6RMVyLNDTONsdLaQn6DwOgW
wBa2OD4oUUny3fGVCao4MUSY5sECmHoXyZV1ExG5gAHH/5QMSv7Q2L+txyRZam6X
ujmFkKTF6czJHX7/X2ySp7BBzorScRKphodhqTxjrtcPKTvwG+EILsQ2i4efDuhK
cc8IYsVeInnmkKFcv6GHbGVYYdljyA8MVcwq+THdrgKhBfeoH9uTx8Se7SOTo0bE
AXjilqboYOKBcBzxJJg6THc2Tr+p3q/0g/A3gD4iJ/5IO1NfYc0Njk8jVzWBz2Nk
S8NEgrzmwbt/ZpEn0bUApIHpBKuIl5bnN65yGzlruF3HNs0cFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHvcHlvF4VgAdQjj0hv1lzrWhfCsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjM5MjFmMDMtNTcwOC0z
YjE1LWJmOGItY2NmZmU5NTg4MGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5qA/h/53wz0Rs/lG9NRw39t7RQBBQmggy+QTL/BVmXEA9+WxCVh4b4
IYaghhTMUlr68rtW5hJUme+Cl9TyZgaqw/KyAT55KdrKbCwNFd5w1+QKcKcVyEuq
htfUmNEW4vhY2UWSpxWxNvALx/aU9RMhVEeZ8N9+raVg+lmmXc+ymJMPdQJ7ewOL
B+dvoifrHi8mGM5rUQYz/SouuapL231e4Od7no7+FE6f26TBSueRqXlC27ArX5PH
UeYudvBeXGNs9Pcnwx/4F5Ch5i8xDCj/tZqod5O2YLndyRR4KEv0/SLyZmoBYAm0
LHVwTc8Ki7OCw/dPwP1GJsMBFH9Y/7E=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:45 2026 by rpki-client