
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa
File: 3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa (raw, json)
Hash identifier: xUtNdePa+XwqrzwvYKz8n6/pY1KR9C5OfsB+LX+JP1M=
Subject key identifier: 24:A8:50:EA:2F:5C:C0:77:A8:63:F6:40:2B:6A:64:45:20:FC:77:29
Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial: 010D0C9F4328584CAA271B1EE98AA3AD6D06AEA0
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 398343
IP address blocks: 128.254.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:1b:1e:e9:8a:a3:ad:6d:06:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=d9750d4c-27ae-4244-83d1-1a1b974bea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:e8:3a:19:c9:ca:09:d0:5b:43:56:22:c8:
fb:6f:5d:a6:c8:cc:13:c3:70:3a:6d:10:d3:84:89:
2b:22:ee:c6:94:5f:e9:19:3b:ca:b7:08:f3:3a:12:
69:38:7f:e1:58:55:02:af:0a:9b:80:ff:67:d7:3e:
f6:23:98:ad:e7:71:b4:b0:d8:3e:4c:9d:a1:f6:3d:
c5:1e:88:f0:01:b9:57:52:47:89:b8:00:83:7e:7c:
3e:38:ff:58:5e:08:01:29:df:04:e2:91:87:f9:34:
87:1d:13:11:da:50:de:d8:84:aa:64:1d:2d:c3:66:
e6:82:fc:d7:3b:c7:e3:4f:67:ae:24:8e:d7:8b:ca:
2c:f4:52:20:ef:45:a1:fd:6b:00:0b:5d:50:a8:c8:
a6:a1:f9:50:04:1b:a8:56:2d:65:3f:ed:ff:39:38:
e9:63:ee:08:ba:e6:6d:b1:68:5b:8b:ff:d9:17:be:
8f:04:87:98:6c:5c:6a:cb:6f:53:3e:fc:46:a3:49:
58:db:e9:e9:76:fe:46:75:b3:83:df:90:08:79:02:
4a:c4:b6:f9:94:8e:a2:d2:69:59:ad:f3:40:f2:fa:
b5:34:56:36:a4:06:93:be:5a:8a:e3:7a:83:e3:4d:
8b:e5:ee:cb:46:1e:ea:01:da:29:4e:23:f0:b5:bc:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:50:EA:2F:5C:C0:77:A8:63:F6:40:2B:6A:64:45:20:FC:77:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
X509v3 Authority Key Identifier:
keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:7d:bc:02:cc:a4:37:73:39:86:1b:b2:7d:dc:ad:15:ef:11:
8c:93:9b:0f:df:f7:9c:a4:88:c5:0f:14:9c:ba:d6:42:89:e4:
a8:2b:6b:c7:bc:28:5c:89:12:95:38:6d:f1:7d:da:7f:cb:34:
f6:d2:fc:77:ad:36:58:a2:96:84:ac:4e:4e:08:64:ca:77:92:
71:20:a6:21:ca:80:75:7e:db:3e:85:a8:4b:4e:ac:60:10:f5:
53:ee:68:e4:8f:91:80:f0:f5:3b:24:b5:ec:1e:fd:29:a5:e6:
a1:35:6a:7e:40:34:67:17:ec:13:0c:ea:75:9d:a1:b0:88:09:
81:44:fb:a0:08:4a:62:8e:9e:f3:21:82:0e:e1:49:d2:20:d2:
1c:8e:70:78:76:7d:35:a6:de:d2:55:20:6b:85:f5:94:9d:82:
81:06:30:3a:04:60:38:57:50:1a:0e:66:60:e1:cc:a0:5b:3d:
16:a8:c3:5d:90:9a:80:37:d1:92:c5:60:97:05:b0:85:43:a6:
6f:47:59:40:ad:33:61:2b:52:d4:e0:3d:cd:24:c6:8d:67:33:
00:f9:f7:85:d9:66:1c:b7:93:56:8f:9c:4d:6d:74:c4:2f:1d:
33:09:ed:66:f4:17:7d:08:e0:f1:69:29:8c:b9:09:e5:bb:64:
79:6c:9d:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxse6YqjrW0GrqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl
MzM1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
ZDk3NTBkNGMtMjdhZS00MjQ0LTgzZDEtMWExYjk3NGJlYTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlinoOhnJygnQW0NWIsj7b12myMwTw3A6bRDT
hIkrIu7GlF/pGTvKtwjzOhJpOH/hWFUCrwqbgP9n1z72I5it53G0sNg+TJ2h9j3F
HojwAblXUkeJuACDfnw+OP9YXggBKd8E4pGH+TSHHRMR2lDe2ISqZB0tw2bmgvzX
O8fjT2euJI7Xi8os9FIg70Wh/WsAC11QqMimoflQBBuoVi1lP+3/OTjpY+4IuuZt
sWhbi//ZF76PBIeYbFxqy29TPvxGo0lY2+npdv5GdbOD35AIeQJKxLb5lI6i0mlZ
rfNA8vq1NFY2pAaTvlqK43qD402L5e7LRh7qAdopTiPwtbxbVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSoUOovXMB3qGP2QCtqZEUg/HcpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk
MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvM2MwZTMwMjQtZTkyYi0z
MWQyLWI5OTAtZTJlZjU1YmU2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw
OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh
ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5
NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP6SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHd9vALMpDdzOYYbsn3crRXvEYyTmw/f95ykiMUPFJy61kKJ5Kgra8e8
KFyJEpU4bfF92n/LNPbS/HetNliiloSsTk4IZMp3knEgpiHKgHV+2z6FqEtOrGAQ
9VPuaOSPkYDw9Tsktewe/Sml5qE1an5ANGcX7BMM6nWdobCICYFE+6AISmKOnvMh
gg7hSdIg0hyOcHh2fTWm3tJVIGuF9ZSdgoEGMDoEYDhXUBoOZmDhzKBbPRaow12Q
moA30ZLFYJcFsIVDpm9HWUCtM2ErUtTgPc0kxo1nMwD594XZZhy3k1aPnE1tdMQv
HTMJ7Wb0F30I4PFpKYy5CeW7ZHlsnQ8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:39 2026 by rpki-client