
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/8c676acb-c942-381b-ba43-78f9a557e6b2.roa
File: 8c676acb-c942-381b-ba43-78f9a557e6b2.roa (raw, json)
Hash identifier: wU/848qFPP20ZcIeNA5oxQasTDEb1/p0+0ZwZbV3yUs=
Subject key identifier: 4B:5F:50:5F:A1:E9:09:8C:CE:B1:5F:1C:75:6E:94:2D:32:35:2C:A2
Certificate issuer: /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial: 010D0C9F4328584CEE8CBD330DE2AFBDB700D300
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/8c676acb-c942-381b-ba43-78f9a557e6b2.roa
Signing time: Sat 21 Feb 2026 02:00:32 +0000
ROA not before: Sat 21 Feb 2026 02:00:32 +0000
ROA not after: Fri 22 May 2026 01:00:32 +0000
asID: 812
IP address blocks: 209.5.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ee:8c:bd:33:0d:e2:af:bd:b7:00:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Validity
Not Before: Feb 21 02:00:32 2026 GMT
Not After : May 22 01:00:32 2026 GMT
Subject: CN=724302ff-2752-46fc-8933-13220050dcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:ba:78:d5:25:85:fa:79:f5:be:7f:30:9d:
da:15:6d:fc:aa:d1:2a:70:8b:c9:d7:dc:a2:72:9b:
cd:94:5b:3c:0a:99:0c:8d:84:bd:c4:76:fe:ae:cc:
11:a7:d8:48:05:8f:d5:c3:b8:b8:1d:5b:c0:09:46:
16:d7:05:1c:29:06:68:c4:d2:fe:8b:b9:cb:b1:46:
4d:f0:ee:48:d9:6c:10:a6:8c:1c:36:09:a2:92:d4:
f9:c0:a4:72:dd:c3:42:d8:d5:69:eb:15:fc:a9:dc:
03:e2:27:9a:f8:de:0d:22:2f:71:13:78:4a:8d:81:
33:f9:b6:f4:fb:a0:25:44:c6:09:67:da:64:9f:ba:
9e:b9:ae:81:fc:f8:43:fb:64:3c:3f:08:3c:a7:4d:
e8:1d:70:65:3f:ff:76:64:3f:d4:8b:26:23:79:7a:
30:82:49:57:60:62:e4:3b:b1:5d:7c:8d:3e:c7:7c:
51:54:19:ee:ec:f4:cb:ba:c4:68:11:a1:40:1d:34:
03:94:b4:14:ca:4d:52:f4:30:fe:5a:c0:74:01:2d:
f6:a1:47:24:33:1d:fc:ad:f3:6d:de:1a:b2:67:97:
04:72:67:9f:ca:76:dc:d8:75:30:2c:95:96:b3:eb:
67:df:88:86:5c:07:b5:44:cf:12:b0:70:50:80:64:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:50:5F:A1:E9:09:8C:CE:B1:5F:1C:75:6E:94:2D:32:35:2C:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/8c676acb-c942-381b-ba43-78f9a557e6b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
X509v3 Authority Key Identifier:
keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.5.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:31:e2:46:c0:29:ac:b3:90:24:02:fc:ac:5b:e1:9b:cc:54:
c0:5b:4b:4d:f5:9b:b5:76:c8:fa:64:5d:02:52:4d:17:77:e0:
44:60:c9:cb:3a:9c:9a:c4:81:15:b3:91:d4:c5:5a:27:e2:9e:
5b:43:cc:64:7b:c7:bb:14:8b:0b:e2:86:07:9b:21:cf:19:2e:
a6:4e:28:de:40:97:1d:1b:17:0f:32:88:39:f4:f2:3d:1a:19:
bc:49:5c:42:78:e1:29:c8:81:1d:02:dd:d6:d7:dc:56:ec:ef:
ef:4e:37:0f:3c:4d:40:83:eb:f6:44:c8:fe:73:67:8c:9c:5e:
e0:c6:df:80:2d:1c:4c:25:6b:36:99:56:a3:a6:39:b5:90:b1:
48:51:8d:04:3e:83:c6:54:93:56:cc:35:e8:65:f3:85:67:0e:
3c:72:83:27:25:61:92:18:b3:dd:17:e7:c2:fe:af:5c:36:95:
2f:c2:8b:c1:03:4a:22:2c:b2:9c:ea:2d:7e:e0:a6:1a:94:bf:
c7:ff:aa:e6:cf:f2:97:9a:a1:eb:cf:80:95:a3:e1:0b:68:a9:
ae:d8:f3:c8:a1:4a:03:a4:64:ea:11:ff:44:ca:9c:c7:62:84:
7b:20:9f:2e:84:e2:22:49:1b:f5:ed:9b:1c:8f:dd:05:41:9e:
75:f0:cf:d6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzujL0zDeKvvbcA0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz
ZTJkMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk
NzI0MzAyZmYtMjc1Mi00NmZjLTg5MzMtMTMyMjAwNTBkY2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB+6eNUlhfp59b5/MJ3aFW38qtEqcIvJ19yi
cpvNlFs8CpkMjYS9xHb+rswRp9hIBY/Vw7i4HVvACUYW1wUcKQZoxNL+i7nLsUZN
8O5I2WwQpowcNgmiktT5wKRy3cNC2NVp6xX8qdwD4iea+N4NIi9xE3hKjYEz+bb0
+6AlRMYJZ9pkn7qeua6B/PhD+2Q8Pwg8p03oHXBlP/92ZD/UiyYjeXowgklXYGLk
O7FdfI0+x3xRVBnu7PTLusRoEaFAHTQDlLQUyk1S9DD+WsB0AS32oUckMx38rfNt
3hqyZ5cEcmefynbc2HUwLJWWs+tn34iGXAe1RM8SsHBQgGS5sQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEtfUF+h6QmMzrFfHHVulC0yNSyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi
Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvOGM2NzZhY2ItYzk0Mi0z
ODFiLWJhNDMtNzhmOWE1NTdlNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1
MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw
M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0
OTAzMDNlMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0QUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOTHiRsAprLOQJAL8rFvhm8xUwFtLTfWbtXbI+mRdAlJNF3fgRGDJyzqc
msSBFbOR1MVaJ+KeW0PMZHvHuxSLC+KGB5shzxkupk4o3kCXHRsXDzKIOfTyPRoZ
vElcQnjhKciBHQLd1tfcVuzv7043DzxNQIPr9kTI/nNnjJxe4MbfgC0cTCVrNplW
o6Y5tZCxSFGNBD6DxlSTVsw16GXzhWcOPHKDJyVhkhiz3Rfnwv6vXDaVL8KLwQNK
IiyynOotfuCmGpS/x/+q5s/yl5qh68+AlaPhC2iprtjzyKFKA6Rk6hH/RMqcx2KE
eyCfLoTiIkkb9e2bHI/dBUGedfDP1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:43 2026 by rpki-client