
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa
File: 43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa (raw, json)
Hash identifier: yijIhh4FhFBL+r/xAQRWi7RqfPw+8JjuNgYvnH2shoY=
Subject key identifier: 60:B9:12:F5:C0:4C:F0:0F:37:AE:20:52:F3:71:8F:D8:55:DB:DB:2F
Certificate issuer: /CN=a91f81ff-5317-40f4-a544-5df2e3358a57
Certificate serial: 010D0C9F4328584E9BE51831E6B47A2E5986D640
Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 40628
IP address blocks: 204.62.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:18:31:e6:b4:7a:2e:59:86:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=f88a3778-8276-4dae-b7be-995fb36396f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:68:78:9e:d9:f3:45:8c:f3:35:59:d6:85:
4f:51:98:b1:f7:ef:d4:1b:98:6d:54:09:31:b5:3d:
44:28:44:66:ce:3e:0a:98:fd:10:b3:e2:c2:98:78:
f4:dc:1b:44:8f:f4:e5:2d:97:0f:c3:dc:42:48:18:
99:ec:1c:4b:8c:28:91:79:c2:7c:be:65:04:54:8e:
51:59:75:a9:c0:9b:c2:63:6c:c2:70:35:74:c0:bc:
fe:ad:43:d5:90:2e:64:a7:fa:9e:25:80:75:fb:57:
7d:8a:92:24:c4:ce:06:25:a4:fb:1a:5e:07:7c:ce:
28:84:cc:29:83:e1:08:e9:5e:1f:b6:27:2b:10:11:
cf:fa:c7:dc:55:e9:e1:d3:81:d3:e2:d0:0d:03:e4:
f9:ef:bd:f4:41:53:a3:6b:d2:6d:90:29:eb:26:26:
47:27:9b:97:87:ea:ea:89:98:b0:c4:1d:94:58:ea:
db:a6:92:14:ae:1a:7a:49:d1:f0:80:54:94:ad:3c:
83:d7:f5:25:bf:ef:a4:be:32:83:a7:e8:d5:40:36:
1a:7c:77:28:cd:8c:14:a7:1a:de:39:b6:c0:99:5c:
98:b8:1b:b4:f5:39:d3:08:12:86:d3:6d:dd:70:7b:
36:26:e0:9b:8d:c4:6e:fb:b9:8d:ad:a3:8d:21:0d:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:12:F5:C0:4C:F0:0F:37:AE:20:52:F3:71:8F:D8:55:DB:DB:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl
X509v3 Authority Key Identifier:
keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
sbgp-ipAddrBlock: critical
IPv4:
204.62.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:10:bd:0a:3c:a7:e2:39:a1:d3:f1:fd:5f:77:da:c6:fe:60:
e2:f5:d6:0e:0f:25:21:a3:71:66:9d:c7:80:5d:f1:76:0a:1e:
0a:29:99:52:b4:3a:13:1e:67:3b:0a:01:66:b2:c0:43:40:7f:
80:1d:39:6d:31:08:1d:cf:2a:74:47:f6:0c:5d:2d:43:31:cd:
ff:3c:64:8c:01:c2:db:34:12:32:53:c4:4e:6f:93:b2:63:00:
14:e3:51:76:02:46:b7:ca:a9:f3:0d:5d:db:33:5b:22:3d:c4:
1f:42:6c:87:13:df:69:2f:ad:2a:f8:81:1e:dc:a1:7b:75:02:
c7:28:0d:01:5a:5e:de:1d:48:4d:82:e7:d2:db:47:f6:cf:0a:
bf:7e:d7:69:cf:a5:70:3a:64:1c:5b:ba:d2:e0:04:cc:31:1d:
05:8d:90:09:c2:15:63:58:d3:b8:4a:f5:54:9c:49:92:d0:0c:
9c:01:42:c6:56:ed:83:ee:43:09:f0:f7:10:fd:4f:ca:10:3e:
27:ed:9b:d5:a5:c5:07:5e:c5:e8:72:83:96:cd:49:7f:7a:d1:
f0:19:58:5c:22:1c:0f:49:da:d3:8b:b7:b5:15:25:0c:47:bd:
dd:78:5c:ff:0e:64:40:98:8b:d6:12:83:3b:48:53:f4:17:35:
0d:8b:24:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Rgx5rR6LlmG1kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4
YTU3MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
Zjg4YTM3NzgtODI3Ni00ZGFlLWI3YmUtOTk1ZmIzNjM5NmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKdoeJ7Z80WM8zVZ1oVPUZix9+/UG5htVAkx
tT1EKERmzj4KmP0Qs+LCmHj03BtEj/TlLZcPw9xCSBiZ7BxLjCiRecJ8vmUEVI5R
WXWpwJvCY2zCcDV0wLz+rUPVkC5kp/qeJYB1+1d9ipIkxM4GJaT7Gl4HfM4ohMwp
g+EI6V4fticrEBHP+sfcVenh04HT4tANA+T57730QVOja9JtkCnrJiZHJ5uXh+rq
iZiwxB2UWOrbppIUrhp6SdHwgFSUrTyD1/Ulv++kvjKDp+jVQDYafHcozYwUpxre
ObbAmVyYuBu09TnTCBKG023dcHs2JuCbjcRu+7mNraONIQ02EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGC5EvXATPAPN64gUvNxj9hV29svMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFm
ODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvNDM5NDBkY2MtMmRkYy0z
OTZlLWI5ZWEtMTM0MWRjZmNkNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTkxZjgxZmYtNTMxNy00MGY0LWE1
NDQtNWRmMmUzMzU4YTU3L2E5MWY4MWZmLTUzMTctNDBmNC1hNTQ0LTVkZjJlMzM1
OGE1Ny5jcmwwHwYDVR0jBBgwFoAUNAcTZw8RHbNMsi51vbBuS9RfIl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYy
ZTMzNThhNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzD4YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4QvQo8p+I5odPx/V932sb+YOL11g4PJSGjcWadx4Bd8XYKHgopmVK0
OhMeZzsKAWaywENAf4AdOW0xCB3PKnRH9gxdLUMxzf88ZIwBwts0EjJTxE5vk7Jj
ABTjUXYCRrfKqfMNXdszWyI9xB9CbIcT32kvrSr4gR7coXt1AscoDQFaXt4dSE2C
59LbR/bPCr9+12nPpXA6ZBxbutLgBMwxHQWNkAnCFWNY07hK9VScSZLQDJwBQsZW
7YPuQwnw9xD9T8oQPiftm9WlxQdexehyg5bNSX960fAZWFwiHA9J2tOLt7UVJQxH
vd14XP8OZECYi9YSgztIU/QXNQ2LJLM=
-----END CERTIFICATE-----
Generated at Thu Jul 30 09:26:11 2026 by rpki-client