
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa
File: 9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa (raw, json)
Hash identifier: h9T9rlFcq59J34J3NPalRY86EYLz5e16mkN7AbU9i0w=
Subject key identifier: 08:FB:84:6B:38:6D:98:D5:29:93:2C:3C:13:9F:83:67:25:B9:24:7A
Certificate issuer: /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial: 010D0C9F4328584D07ACE528F15ED9CDCD8A2000
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa
Signing time: Mon 02 Mar 2026 02:00:31 +0000
ROA not before: Mon 02 Mar 2026 02:00:31 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 394284
IP address blocks: 216.185.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:ac:e5:28:f1:5e:d9:cd:cd:8a:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=bdf9c7f2-576a-40bf-bb34-5443ed7708f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:ce:ba:c2:89:78:21:8a:fb:8d:cd:f0:3c:
be:6a:f4:29:fb:2b:93:32:ca:0c:73:5d:e0:1b:70:
0c:27:9c:ea:46:35:84:09:96:20:56:6e:84:36:29:
83:3b:de:f6:e1:ab:f3:fe:84:45:67:ed:82:62:6a:
de:61:c5:29:2c:8b:27:bd:7f:ca:1f:a5:48:d2:25:
6a:ba:59:f0:68:04:ab:22:44:14:c9:dc:00:9e:78:
38:d1:76:14:d4:33:81:b8:7d:a8:cf:02:f0:db:fe:
2a:d7:2b:84:b2:94:2c:d0:ba:d4:bc:48:4f:39:99:
87:e2:e2:67:2b:a4:28:8c:ed:64:29:bd:15:fa:21:
27:5f:c0:83:47:68:05:77:b5:41:ff:bf:a6:f2:90:
ca:63:64:aa:98:22:9d:eb:7d:c9:73:f5:c9:4a:ec:
18:d4:01:8b:82:3c:e3:e0:aa:a6:d0:e8:ea:1b:ef:
2f:1a:32:a3:88:4b:b3:e6:26:c3:46:43:a8:b7:02:
3b:98:5c:36:e3:44:98:d9:f0:50:8c:77:05:ef:ae:
e1:f2:6e:57:c7:7f:6c:6e:55:84:db:ce:c8:cc:c0:
d7:c9:53:19:56:80:26:03:19:ca:f6:d1:2f:09:a9:
50:38:dd:30:e9:0b:c2:da:31:5d:03:cf:b3:59:ce:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:84:6B:38:6D:98:D5:29:93:2C:3C:13:9F:83:67:25:B9:24:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
X509v3 Authority Key Identifier:
keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:3a:04:c8:70:c4:86:43:95:0b:f0:de:34:43:82:ad:48:29:
1d:aa:e5:a4:e1:cf:39:4e:bf:c6:e0:42:ac:df:6e:85:97:0b:
e3:cb:1c:a3:e2:0c:86:fc:fe:5b:18:59:68:7b:95:0b:af:2d:
18:59:44:e9:17:f7:fd:d4:37:99:e6:ac:30:68:91:f4:78:fd:
9a:54:70:1b:e9:06:27:b8:0c:1b:56:45:00:9d:9a:c9:38:81:
eb:95:d6:ec:b8:4a:e0:b3:6d:e8:a6:e8:4f:4b:d0:14:c0:17:
52:fa:bc:7b:71:20:de:bc:66:70:ce:9f:51:b0:4c:13:98:ba:
72:41:05:6e:2c:b3:fd:d9:84:1d:b1:a2:c2:d2:46:8d:5e:ea:
f8:b6:0e:f3:3d:de:11:08:9d:71:72:49:09:ee:fa:74:e0:25:
69:a3:2a:8f:b4:b5:45:ef:6e:8a:2c:4b:55:c9:30:b4:fd:83:
51:e2:33:1b:b9:ab:ee:67:f0:22:5b:f0:3f:2f:ed:c9:0c:8a:
85:f4:53:45:65:c9:cd:88:a6:e8:2f:f4:ac:73:a9:32:1e:98:
61:f5:6c:d1:a9:49:71:24:01:cc:72:08:c9:2f:7b:ab:b2:20:
8f:1b:b5:1f:2d:1b:d0:83:f0:b7:63:99:f6:c1:21:d3:80:64:
52:09:e6:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOUo8V7Zzc2KIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0
NzUxMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
YmRmOWM3ZjItNTc2YS00MGJmLWJiMzQtNTQ0M2VkNzcwOGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxDOusKJeCGK+43N8Dy+avQp+yuTMsoMc13g
G3AMJ5zqRjWECZYgVm6ENimDO9724avz/oRFZ+2CYmreYcUpLIsnvX/KH6VI0iVq
ulnwaASrIkQUydwAnng40XYU1DOBuH2ozwLw2/4q1yuEspQs0LrUvEhPOZmH4uJn
K6QojO1kKb0V+iEnX8CDR2gFd7VB/7+m8pDKY2SqmCKd633Jc/XJSuwY1AGLgjzj
4Kqm0OjqG+8vGjKjiEuz5ibDRkOotwI7mFw240SY2fBQjHcF767h8m5Xx39sblWE
287IzMDXyVMZVoAmAxnK9tEvCalQON0w6QvC2jFdA8+zWc6qEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAj7hGs4bZjVKZMsPBOfg2cluSR6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdj
OTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvOTU0M2UzYmEtYTZjYi0z
NWRkLWJkZWEtZWM5ZTNlM2QxYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY3YzkxYWUtMDI2Yy00NzlkLTlj
YjUtZDM4MzdlM2Q0NzUxLzFmN2M5MWFlLTAyNmMtNDc5ZC05Y2I1LWQzODM3ZTNk
NDc1MS5jcmwwHwYDVR0jBBgwFoAUtjEg3DBLGyb0H+RbK5J9YlJ+E8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgz
N2UzZDQ3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2LlYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQ6BMhwxIZDlQvw3jRDgq1IKR2q5aThzzlOv8bgQqzfboWXC+PLHKPi
DIb8/lsYWWh7lQuvLRhZROkX9/3UN5nmrDBokfR4/ZpUcBvpBie4DBtWRQCdmsk4
geuV1uy4SuCzbeim6E9L0BTAF1L6vHtxIN68ZnDOn1GwTBOYunJBBW4ss/3ZhB2x
osLSRo1e6vi2DvM93hEInXFySQnu+nTgJWmjKo+0tUXvboosS1XJMLT9g1HiMxu5
q+5n8CJb8D8v7ckMioX0U0Vlyc2Ipugv9KxzqTIemGH1bNGpSXEkAcxyCMkve6uy
II8btR8tG9CD8LdjmfbBIdOAZFIJ5h8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:32 2026 by rpki-client