
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3df6cf2d-3d6c-3d19-9456-e5cdf19cd182.roa
File: 3df6cf2d-3d6c-3d19-9456-e5cdf19cd182.roa (raw, json)
Hash identifier: TI8HwLWBxeBsgoPzrizHdypLE+QHbpKM04idfgrQ2Vc=
Subject key identifier: ED:52:DA:27:31:07:70:64:A9:99:3A:EE:8E:04:31:69:1F:8A:F1:F3
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584D5024E7F20E8E3E5C476DEF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3df6cf2d-3d6c-3d19-9456-e5cdf19cd182.roa
Signing time: Sat 28 Mar 2026 01:00:31 +0000
ROA not before: Sat 28 Mar 2026 01:00:31 +0000
ROA not after: Fri 26 Jun 2026 01:00:31 +0000
asID: 400536
IP address blocks: 172.121.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:50:24:e7:f2:0e:8e:3e:5c:47:6d:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 28 01:00:31 2026 GMT
Not After : Jun 26 01:00:31 2026 GMT
Subject: CN=65ddbd63-e46f-4c07-a0d3-fb481b6bc778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:1e:08:43:ba:78:47:e9:63:62:31:d7:8b:
b6:a3:68:49:02:a1:c7:25:a2:2a:a3:f5:8e:c2:fe:
b7:55:eb:47:c4:de:78:d3:fa:20:ea:89:da:9f:d0:
0a:e9:c3:8b:33:49:41:a9:bf:92:0c:22:3b:2c:83:
ac:fb:a8:29:24:fb:2e:be:7c:86:e2:1f:47:a1:d7:
0a:f4:be:89:8d:ff:84:ad:a5:84:ec:a2:fb:5e:d2:
c9:03:af:e2:6d:d4:ad:b4:da:cf:06:9c:29:0f:df:
cb:3b:03:12:16:7f:ad:82:22:83:11:e1:86:be:42:
8a:64:c4:98:9c:25:b3:99:6f:aa:3f:f4:b0:25:59:
f6:24:cd:f9:1b:71:c4:a4:93:e6:0e:4a:2f:6e:20:
b9:c4:11:19:38:4b:af:c0:db:d5:ae:4b:ac:d7:6f:
1b:cd:49:0a:0e:49:15:ca:50:72:ee:72:e9:0a:a8:
4d:43:dc:07:18:54:5b:7c:39:c5:fd:2a:41:da:f3:
b7:38:07:15:ce:11:b4:f5:8e:8f:d1:b1:55:c0:d5:
ed:1d:ce:9e:9c:51:cf:5e:00:9b:14:2a:33:b1:1e:
b7:da:b5:27:3e:ec:80:fd:34:3c:9a:48:89:1b:7b:
e1:21:68:bf:22:5f:cd:81:60:02:c4:41:93:75:23:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:DA:27:31:07:70:64:A9:99:3A:EE:8E:04:31:69:1F:8A:F1:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3df6cf2d-3d6c-3d19-9456-e5cdf19cd182.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.121.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:66:64:b6:5b:7f:80:7d:c1:fd:df:73:ba:b6:6c:a9:9e:51:
e6:81:c2:5e:25:4f:6a:73:7f:76:61:6e:54:98:ef:2a:8b:81:
b5:a2:df:3c:f0:07:1e:4f:40:ff:fb:b0:d6:fd:57:8a:ad:e4:
7c:38:2a:fa:dc:33:63:98:b4:16:cb:9f:38:7a:06:56:f8:34:
10:88:92:0e:62:34:eb:ca:e6:14:07:b9:18:fc:34:a9:36:19:
51:9e:d8:52:b3:f3:0c:bf:5f:bb:26:b6:de:66:02:b6:6a:b5:
94:5d:cf:e0:9c:d6:14:fb:c7:20:39:ac:9b:bd:55:fd:d4:07:
a2:52:10:2e:db:c8:cf:ab:07:23:3e:4f:6e:58:7d:ae:cc:9a:
80:8d:a2:82:fc:c4:3d:dd:9c:a8:85:96:98:5c:00:c9:9f:c8:
ed:b3:a9:6e:6d:23:45:8f:82:bc:bb:62:a5:ba:40:fa:d4:e5:
3f:7f:54:5d:b2:75:12:11:1d:c4:b3:97:25:b2:40:1e:59:5b:
23:66:2d:c7:79:6b:42:7d:f6:a4:d4:68:20:97:8f:a1:8e:2e:
c7:db:84:44:1d:68:33:0d:d4:c4:6c:d4:b7:e0:ce:d0:bb:47:
f5:6b:94:e4:f0:f9:ab:0b:bd:00:48:0a:a3:98:ea:02:ca:d2:
86:88:eb:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJOfyDo4+XEdt74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk
NjVkZGJkNjMtZTQ2Zi00YzA3LWEwZDMtZmI0ODFiNmJjNzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCIeCEO6eEfpY2Ix14u2o2hJAqHHJaIqo/WO
wv63VetHxN540/og6onan9AK6cOLM0lBqb+SDCI7LIOs+6gpJPsuvnyG4h9HodcK
9L6Jjf+EraWE7KL7XtLJA6/ibdSttNrPBpwpD9/LOwMSFn+tgiKDEeGGvkKKZMSY
nCWzmW+qP/SwJVn2JM35G3HEpJPmDkovbiC5xBEZOEuvwNvVrkus128bzUkKDkkV
ylBy7nLpCqhNQ9wHGFRbfDnF/SpB2vO3OAcVzhG09Y6P0bFVwNXtHc6enFHPXgCb
FCozsR632rUnPuyA/TQ8mkiJG3vhIWi/Il/NgWACxEGTdSPAzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1S2icxB3BkqZk67o4EMWkfivHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2RmNmNmMmQtM2Q2Yy0z
ZDE5LTk0NTYtZTVjZGYxOWNkMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxmZLZbf4B9wf3fc7q2bKmeUeaBwl4lT2pzf3ZhblSY7yqLgbWi3zzw
Bx5PQP/7sNb9V4qt5Hw4KvrcM2OYtBbLnzh6Blb4NBCIkg5iNOvK5hQHuRj8NKk2
GVGe2FKz8wy/X7smtt5mArZqtZRdz+Cc1hT7xyA5rJu9Vf3UB6JSEC7byM+rByM+
T25Yfa7MmoCNooL8xD3dnKiFlphcAMmfyO2zqW5tI0WPgry7YqW6QPrU5T9/VF2y
dRIRHcSzlyWyQB5ZWyNmLcd5a0J99qTUaCCXj6GOLsfbhEQdaDMN1MRs1LfgztC7
R/VrlOTw+asLvQBICqOY6gLK0oaI6wU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:05 2026 by rpki-client