
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa
File: aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa (raw, json)
Hash identifier: G1foXPlu8URKmk+MMhBx/oKcTayPsp4zu8lpgJD8Bt0=
Subject key identifier: 68:16:88:34:2D:AE:8D:44:AC:B7:CE:10:C9:5D:B7:E0:9C:34:53:BA
Certificate issuer: /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Certificate serial: 010D0C9F4328584C50D12B61729B4F9C3E723680
Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 17185
IP address blocks: 74.115.168.0/21 maxlen: 24
173.195.144.0/20 maxlen: 24
199.16.48.0/21 maxlen: 24
208.72.236.0/22 maxlen: 24
208.82.128.0/22 maxlen: 24
208.88.48.0/21 maxlen: 24
2604:bf00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:2b:61:72:9b:4f:9c:3e:72:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=2f29e135-a663-4648-a619-a526bdfa34d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:19:bc:32:b5:03:fb:fd:6e:8c:27:b9:83:
c3:70:3c:44:ed:9d:78:5b:fe:3e:87:67:51:6c:63:
60:2d:65:b9:60:c1:6d:f4:43:e2:70:30:de:9e:71:
80:17:03:63:1d:1f:a4:21:5c:f7:30:a5:b8:a7:ae:
96:48:93:ba:1e:32:40:cc:22:3e:7c:b1:f5:16:f2:
c3:a1:de:2b:1d:c4:08:45:c5:a4:cf:5a:b4:27:b4:
67:83:dc:82:ff:a2:de:50:69:ab:7d:83:f5:26:87:
60:97:3b:eb:45:68:8d:ae:6f:fa:b8:ed:f5:8d:a8:
f5:95:c9:8c:84:95:12:fd:30:da:88:58:f2:4d:2f:
d0:d9:f4:1a:42:6c:b5:b4:06:88:a0:37:e4:f8:1c:
6d:fe:c4:85:0a:0c:7d:56:72:74:ce:d5:dd:a0:2b:
6d:a1:5e:33:3d:1c:ec:14:8c:fb:d0:ff:05:c0:70:
3e:48:0a:6a:5d:39:35:ae:47:b9:4e:ff:54:cc:5e:
e2:c9:1c:6f:0a:fb:13:a1:6c:6d:00:2a:a2:ab:13:
2e:e4:b3:92:28:09:b2:8c:cf:52:1b:f5:40:67:f1:
5b:8b:e5:3b:fb:dd:c2:5a:98:04:21:6c:23:6a:87:
15:36:c5:a4:81:a6:00:f2:7f:f9:c2:1c:bf:4f:7a:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:88:34:2D:AE:8D:44:AC:B7:CE:10:C9:5D:B7:E0:9C:34:53:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
X509v3 Authority Key Identifier:
keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
sbgp-ipAddrBlock: critical
IPv4:
74.115.168.0/21
173.195.144.0/20
199.16.48.0/21
208.72.236.0/22
208.82.128.0/22
208.88.48.0/21
IPv6:
2604:bf00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c1:8c:70:2a:e6:e0:6b:d1:ed:1e:ae:87:e8:ca:07:fe:e5:
aa:c5:65:fc:8e:5e:11:2e:4a:57:03:79:a7:68:7c:87:eb:10:
ad:84:bb:63:98:57:21:88:9f:91:6a:84:b5:a6:a1:77:b6:7c:
48:e9:10:30:73:4e:cc:b8:59:cb:8a:4c:41:7d:58:72:e9:1f:
9b:55:46:d8:2d:61:b9:20:e9:4a:a9:67:61:69:50:1d:79:16:
2d:c4:68:68:ab:99:a7:0b:20:9e:0e:f7:8b:ec:37:6b:c3:6c:
09:4e:e5:88:14:96:b0:29:af:60:4a:bb:6d:14:eb:33:0e:fb:
18:78:d3:65:ea:60:1b:67:66:04:4a:e3:07:2f:7f:7a:f9:48:
1c:6b:fa:4c:ba:6f:13:03:e8:fb:eb:c9:65:85:b2:56:82:cd:
4a:be:9d:85:f1:fe:ca:6e:a3:df:6b:e8:86:51:d4:aa:85:e6:
60:9e:03:2e:b3:75:d8:0e:34:60:41:ec:36:51:55:24:da:9f:
15:e3:b4:23:68:9a:cd:33:b8:05:87:50:9e:8e:b0:dd:aa:ee:
99:e8:92:12:b2:24:cd:a2:9a:20:2b:3e:08:19:1b:0d:e3:8e:
2d:e3:dc:58:4d:b1:be:5b:ab:67:8b:f8:8f:9c:21:5e:47:65:
ab:0b:8f:f7
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWExQ0SthcptPnD5yNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZlOGNhMGItMGY1ZS00MDY3LWFjZDctMmJiYjQwMDhl
ZDFjMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk
MmYyOWUxMzUtYTY2My00NjQ4LWE2MTktYTUyNmJkZmEzNGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/gZvDK1A/v9bownuYPDcDxE7Z14W/4+h2dR
bGNgLWW5YMFt9EPicDDennGAFwNjHR+kIVz3MKW4p66WSJO6HjJAzCI+fLH1FvLD
od4rHcQIRcWkz1q0J7Rng9yC/6LeUGmrfYP1JodglzvrRWiNrm/6uO31jaj1lcmM
hJUS/TDaiFjyTS/Q2fQaQmy1tAaIoDfk+Bxt/sSFCgx9VnJ0ztXdoCttoV4zPRzs
FIz70P8FwHA+SApqXTk1rke5Tv9UzF7iyRxvCvsToWxtACqiqxMu5LOSKAmyjM9S
G/VAZ/Fbi+U7+93CWpgEIWwjaocVNsWkgaYA8n/5why/T3orlQIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFGgWiDQtro1ErLfOEMldt+CcNFO6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4
Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJiNDAwOGVkMWMvYWFjZmIwYTUtZWZjZC0z
YzhmLWI5YzMtYjEzNzg4MmU5YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTZlOGNhMGItMGY1ZS00MDY3LWFj
ZDctMmJiYjQwMDhlZDFjLzE2ZThjYTBiLTBmNWUtNDA2Ny1hY2Q3LTJiYmI0MDA4
ZWQxYy5jcmwwHwYDVR0jBBgwFoAUT6kz7dxBnGP6bwm5Ex/lf45BiBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJi
NDAwOGVkMWMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDSnOoAwQE
rcOQAwQDxxAwAwQC0EjsAwQC0FKAAwQD0FgwMA0EAgACMAcDBQAmBL8AMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBACDBjHAq5uBr0e0erofoygf+5arFZfyOXhEuSlcDeadofIfrEK2Eu2OYVyGI
n5FqhLWmoXe2fEjpEDBzTsy4WcuKTEF9WHLpH5tVRtgtYbkg6UqpZ2FpUB15Fi3E
aGirmacLIJ4O94vsN2vDbAlO5YgUlrApr2BKu20U6zMO+xh402XqYBtnZgRK4wcv
f3r5SBxr+ky6bxMD6PvryWWFslaCzUq+nYXx/spuo99r6IZR1KqF5mCeAy6zddgO
NGBB7DZRVSTanxXjtCNoms0zuAWHUJ6OsN2q7pnokhKyJM2imiArPggZGw3jji3j
3FhNsb5bq2eL+I+cIV5HZasLj/c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:46 2026 by rpki-client