
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
File: fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa (raw, json)
Hash identifier: 8filqXl+XE4PL0vZvlXOA1+GRgcA/EBa0ItViFDvniM=
Subject key identifier: B0:F6:CF:E3:01:E7:EE:D0:0E:50:6D:00:D2:0A:C3:D9:2D:0B:00:1F
Certificate issuer: /CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
Certificate serial: 010D0C9F4328584D524359A934F475D33DCA5000
Authority key identifier: 02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 33137
IP address blocks: 192.189.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Apr 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:59:a9:34:f4:75:d3:3d:ca:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=7546f6bb-dfba-4739-953e-880d277168b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:41:d5:4f:32:b5:31:91:6c:25:3f:8e:64:
88:ae:23:76:e4:f5:f4:b2:99:b7:88:3e:c0:5c:ef:
33:9b:d0:c1:71:7c:c2:bc:c3:ea:24:2a:f8:b8:b5:
b8:df:f6:5e:91:f7:a5:d5:35:47:36:31:89:b4:c7:
69:52:d2:7f:f9:ab:37:80:33:5a:47:72:6d:9d:a0:
32:ef:56:1a:8f:a6:29:ee:01:6e:87:20:76:a2:fe:
d2:72:a4:33:46:7b:84:69:fc:0f:2d:de:f7:ef:34:
a3:f0:04:1a:db:ab:1c:cc:35:7b:e8:2d:c4:f1:f8:
48:34:15:97:92:49:a4:c8:0c:3b:4a:a0:f1:6f:74:
5a:a7:c3:75:4a:99:eb:97:a1:2a:4b:f9:ce:3e:57:
a1:62:34:4f:91:db:6e:93:e1:6d:15:fc:be:5d:c3:
38:bb:96:ee:63:82:14:61:de:af:67:ad:2d:df:6a:
2a:9b:bc:39:d5:cd:9f:db:db:e7:e0:57:cc:74:81:
be:31:99:f6:fe:6d:90:f1:0d:eb:f8:9e:e2:32:b5:
39:d6:bd:74:4e:e5:76:c0:86:fd:61:3c:06:76:20:
61:00:c8:1f:97:53:d1:b8:bc:ac:f5:20:b2:7d:27:
1f:bc:48:6f:07:ea:56:cf:87:8c:1b:5a:29:e3:43:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F6:CF:E3:01:E7:EE:D0:0E:50:6D:00:D2:0A:C3:D9:2D:0B:00:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.crl
X509v3 Authority Key Identifier:
keyid:02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:37:d6:4c:86:57:d6:fa:d6:5a:b0:66:72:61:1c:d1:5f:34:
61:2b:f0:d7:e0:c6:49:7e:3d:3f:56:35:31:86:d4:ea:0e:29:
13:51:38:2d:d7:15:ae:b9:27:00:53:c8:28:23:68:fe:e2:49:
49:ab:ce:31:7c:46:1b:00:67:50:cb:10:2d:f9:03:34:42:3a:
c2:31:9e:a4:fd:62:ef:aa:65:25:59:08:66:c1:6c:36:ab:2d:
b7:c1:a5:ea:6c:bb:a3:ee:91:af:15:cb:d6:b5:d5:54:86:b5:
e9:39:39:d5:fa:57:a7:51:1d:e3:7c:44:b8:72:36:db:36:95:
43:9e:f5:e4:c4:0f:3f:5c:aa:c5:d6:e8:51:7d:a5:c3:ab:9c:
88:61:6b:08:0f:11:54:fe:54:1d:db:72:75:87:44:1d:5a:8d:
da:74:6d:b0:ab:b5:05:4e:cf:de:68:e1:54:01:82:7a:b8:22:
ba:f5:6c:19:57:d2:4b:a1:81:40:68:7b:65:87:c5:2e:b8:e7:
7e:95:75:91:02:b8:fa:48:20:76:ab:f6:01:be:5b:5e:e0:e4:
6e:1d:80:1c:e1:4d:41:74:e1:c4:40:55:56:af:62:c5:29:00:
a6:22:a5:d6:20:89:0f:7e:50:86:f2:54:14:82:9d:e5:75:76:
4c:c6:44:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1mpNPR10z3KUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAwYTM0NTUtY2NjMC00YTM3LTk3NmQtNTRmZTIyZDdm
YjUyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
NzU0NmY2YmItZGZiYS00NzM5LTk1M2UtODgwZDI3NzE2OGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhctB1U8ytTGRbCU/jmSIriN25PX0spm3iD7A
XO8zm9DBcXzCvMPqJCr4uLW43/Zekfel1TVHNjGJtMdpUtJ/+as3gDNaR3JtnaAy
71Yaj6Yp7gFuhyB2ov7ScqQzRnuEafwPLd737zSj8AQa26sczDV76C3E8fhINBWX
kkmkyAw7SqDxb3Rap8N1Spnrl6EqS/nOPlehYjRPkdtuk+FtFfy+XcM4u5buY4IU
Yd6vZ60t32oqm7w51c2f29vn4FfMdIG+MZn2/m2Q8Q3r+J7iMrU51r10TuV2wIb9
YTwGdiBhAMgfl1PRuLys9SCyfScfvEhvB+pWz4eMG1op40PP9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLD2z+MB5+7QDlBtANIKw9ktCwAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MDBh
MzQ1NS1jY2MwLTRhMzctOTc2ZC01NGZlMjJkN2ZiNTIvZmE1YTJiOGEtN2UxNS0z
MTg2LTg1YWUtMDAzZjZlNDkyN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODAwYTM0NTUtY2NjMC00YTM3LTk3
NmQtNTRmZTIyZDdmYjUyLzgwMGEzNDU1LWNjYzAtNGEzNy05NzZkLTU0ZmUyMmQ3
ZmI1Mi5jcmwwHwYDVR0jBBgwFoAUArWgB8sdRoucoU+C+Pdmj10zStAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MDBhMzQ1NS1jY2MwLTRhMzctOTc2ZC01NGZl
MjJkN2ZiNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGg31kyGV9b61lqwZnJhHNFfNGEr8Nfgxkl+PT9WNTGG1OoOKRNROC3X
Fa65JwBTyCgjaP7iSUmrzjF8RhsAZ1DLEC35AzRCOsIxnqT9Yu+qZSVZCGbBbDar
LbfBpepsu6Puka8Vy9a11VSGtek5OdX6V6dRHeN8RLhyNts2lUOe9eTEDz9cqsXW
6FF9pcOrnIhhawgPEVT+VB3bcnWHRB1ajdp0bbCrtQVOz95o4VQBgnq4Irr1bBlX
0kuhgUBoe2WHxS64536VdZECuPpIIHar9gG+W17g5G4dgBzhTUF04cRAVVavYsUp
AKYipdYgiQ9+UIbyVBSCneV1dkzGRNs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:36 2026 by rpki-client