
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
File: 1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json)
Hash identifier: jgP6BOv7gnvLCanwwncIqQ4nLfNp+GFVokVkQkWQhCk=
Subject key identifier: 5F:AF:92:7E:B3:F8:36:01:F7:BC:49:66:9C:22:3C:5A:B3:42:83:16
Certificate issuer: /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Certificate serial: 010D0C9F4328584E15E46FC381E996DEEC810EA0
Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 36667
IP address blocks: 198.35.120.0/21 maxlen: 24
2620:c:8000::/48 maxlen: 48
2620:109:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:6f:c3:81:e9:96:de:ec:81:0e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=134edd41-a67f-45d4-b88b-3252cfe71c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:e0:40:72:6e:39:5b:a4:e6:b9:da:ba:7d:
0b:20:d3:bb:e6:4b:dc:83:2a:b2:53:fe:d1:b3:b7:
89:cd:3d:7f:c5:12:c4:19:8e:a2:ed:13:14:1c:d4:
44:1c:66:df:03:a1:a7:9a:30:a9:e3:b5:52:e5:cc:
95:54:53:af:f3:6b:da:ca:18:5f:02:c8:7a:38:4e:
82:bd:b7:c2:4e:da:64:fc:54:0f:99:ba:12:27:dd:
3a:e9:c9:e0:4e:d4:50:0b:80:b5:20:7b:93:96:1a:
2d:58:3e:fa:d0:c6:27:e1:45:0a:96:9f:ea:b2:75:
9a:89:6d:e0:24:dd:55:bd:07:a6:d2:9d:a6:90:76:
e9:10:96:37:36:0f:e8:8f:ff:be:e3:ff:4a:f0:7d:
ae:b6:4d:f7:5a:47:f3:2e:72:46:96:77:17:cf:6a:
05:5d:4f:ae:82:84:26:d9:57:63:37:0b:f1:01:45:
ea:df:48:93:20:ba:4c:9e:fa:ab:70:a5:07:22:44:
0a:5c:2a:c3:7a:b6:4b:1d:35:c0:bc:89:c3:f5:e6:
06:fb:af:b1:07:3d:10:fa:d9:ea:03:49:41:a6:fe:
00:04:da:76:0a:11:62:20:04:1b:59:fa:b8:12:b2:
ec:62:51:b6:24:e4:85:8d:0b:db:06:32:45:8f:cf:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:92:7E:B3:F8:36:01:F7:BC:49:66:9C:22:3C:5A:B3:42:83:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl
X509v3 Authority Key Identifier:
keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.120.0/21
IPv6:
2620:c:8000::/48
2620:109:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:2d:d2:25:94:a9:f9:6f:d3:f5:8d:91:50:9e:89:16:94:75:
36:a5:74:8a:34:be:3b:4f:52:87:df:55:01:d4:72:a3:b7:c7:
2f:e9:43:c4:7f:b2:b7:15:ec:27:9f:1d:a9:7e:7a:97:bc:31:
f9:b6:45:a9:66:f6:ad:f0:59:f4:12:7c:34:e8:3e:85:2e:b1:
c5:0e:2b:b4:0b:bb:a5:60:1f:9a:f6:e9:4e:41:6d:97:f6:d5:
7d:d0:db:85:08:5d:d0:4c:ab:36:30:e2:0b:9f:e0:ae:9a:47:
e9:55:ad:69:84:87:07:22:ac:36:d6:bf:a8:b5:15:61:93:1e:
fd:08:8b:97:15:2d:98:96:1a:a2:e2:fe:62:89:d0:c9:78:51:
a8:50:b5:83:6f:ff:0a:c1:75:3b:f7:fd:74:b5:45:95:16:01:
e5:dd:60:d9:1d:b0:7e:cd:1a:f3:eb:52:1a:5f:9d:9a:08:58:
68:98:bd:ef:14:05:6b:bf:71:d3:0b:75:cb:94:7b:0b:d8:ee:
2c:1e:2c:1d:ac:fe:c2:cf:3f:df:c2:12:51:b1:53:7e:e5:8d:
66:04:96:49:29:69:9e:6d:43:66:41:de:c8:83:e5:9a:28:2c:
c6:bd:36:a3:e2:44:ba:2d:b6:51:d6:6c:f3:af:f1:17:a4:74:
c5:7f:fd:6c
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE4V5G/DgemW3uyBDqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2
OTIyMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
MTM0ZWRkNDEtYTY3Zi00NWQ0LWI4OGItMzI1MmNmZTcxYzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZrgQHJuOVuk5rnaun0LINO75kvcgyqyU/7R
s7eJzT1/xRLEGY6i7RMUHNREHGbfA6GnmjCp47VS5cyVVFOv82vayhhfAsh6OE6C
vbfCTtpk/FQPmboSJ9066cngTtRQC4C1IHuTlhotWD760MYn4UUKlp/qsnWaiW3g
JN1VvQem0p2mkHbpEJY3Ng/oj/++4/9K8H2utk33WkfzLnJGlncXz2oFXU+ugoQm
2VdjNwvxAUXq30iTILpMnvqrcKUHIkQKXCrDerZLHTXAvInD9eYG+6+xBz0Q+tnq
A0lBpv4ABNp2ChFiIAQbWfq4ErLsYlG2JOSFjQvbBjJFj89hAwIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFF+vkn6z+DYB97xJZpwiPFqzQoMWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQx
ZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvMWM4ZTU1ZTQtYTk3Ny0z
NWU3LWE5OGYtZWIyOGI2ZmE5MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZkMWZlM2ItN2UyNC00ZDI3LWJi
MTAtYmViOWNlMmQ2OTIyL2FmZDFmZTNiLTdlMjQtNGQyNy1iYjEwLWJlYjljZTJk
NjkyMi5jcmwwHwYDVR0jBBgwFoAU76MsHlY0EPKfNjNb4XPd5lnEiQkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5
Y2UyZDY5MjIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDxiN4MBgE
AgACMBIDBwAmIAAMgAADBwQmIAEJYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVC3SJZSp+W/T9Y2RUJ6J
FpR1NqV0ijS+O09Sh99VAdRyo7fHL+lDxH+ytxXsJ58dqX56l7wx+bZFqWb2rfBZ
9BJ8NOg+hS6xxQ4rtAu7pWAfmvbpTkFtl/bVfdDbhQhd0EyrNjDiC5/grppH6VWt
aYSHByKsNta/qLUVYZMe/QiLlxUtmJYaouL+YonQyXhRqFC1g2//CsF1O/f9dLVF
lRYB5d1g2R2wfs0a8+tSGl+dmghYaJi97xQFa79x0wt1y5R7C9juLB4sHaz+ws8/
38ISUbFTfuWNZgSWSSlpnm1DZkHeyIPlmigsxr02o+JEui22UdZs86/xF6R0xX/9
bA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:12 2026 by rpki-client