
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa
File: 5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa (raw, json)
Hash identifier: a9CIMIDd5BAAjBDMBQTSeHfkaqQ2mZKdbWO2XZGMU4w=
Subject key identifier: 80:F7:2E:61:B0:23:AF:85:94:73:BB:45:1C:B2:15:F7:74:F8:3B:F0
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584C768163979EB8F810BD298E00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa
Signing time: Fri 09 Jan 2026 02:00:31 +0000
ROA not before: Fri 09 Jan 2026 02:00:31 +0000
ROA not after: Thu 09 Apr 2026 01:00:31 +0000
asID: 14618
IP address blocks: 52.129.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:76:81:63:97:9e:b8:f8:10:bd:29:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Jan 9 02:00:31 2026 GMT
Not After : Apr 9 01:00:31 2026 GMT
Subject: CN=afa5e693-1e38-4aaf-89cc-753ed4de37df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:4d:49:84:f8:26:91:d7:54:a4:75:1e:e1:
f4:5d:04:6e:e7:e3:73:68:12:a4:de:4e:bc:49:6f:
20:86:b9:54:5d:4a:6b:0f:0b:9b:e5:ee:e0:48:f3:
8f:82:1e:c7:fd:12:78:37:cd:84:e5:a0:fa:e8:26:
85:b6:9c:92:a4:2e:b5:56:8a:4d:62:87:b6:5f:77:
5c:f6:b1:9b:3b:6e:1b:ed:9f:ed:5a:81:bd:70:96:
d5:a5:4c:b9:09:52:7a:d5:03:d8:1d:5e:20:05:42:
51:1b:2a:fd:97:72:a7:a5:2c:d9:a0:1c:08:92:da:
51:fd:4f:f4:a3:11:97:b8:83:c2:7d:fa:64:3c:a6:
b9:e3:ba:99:6e:43:96:c1:ff:da:89:20:4c:8e:55:
9b:08:54:52:5b:9a:59:98:31:82:19:f1:92:05:6f:
35:d7:2e:c6:61:93:ec:41:ee:ff:28:10:99:76:b4:
eb:74:2f:cb:44:29:19:5b:43:e9:9e:d2:f6:f5:d9:
06:d6:fe:3e:f6:77:fa:65:91:34:85:16:73:56:f0:
d5:a7:d2:6b:36:dd:f5:f0:e4:e7:76:05:ef:1f:9e:
39:c2:77:23:e8:64:30:db:a0:fa:13:ee:fa:b7:65:
d1:3a:6b:8b:46:f7:ab:36:1d:7e:c8:d9:e3:c1:a6:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:2E:61:B0:23:AF:85:94:73:BB:45:1C:B2:15:F7:74:F8:3B:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:89:cf:9b:63:f4:28:07:7f:b0:59:21:9d:8a:7d:7f:c6:18:
14:ad:58:d6:2a:e2:23:79:24:3f:25:5c:38:c2:55:bc:e0:aa:
b0:cb:e9:d4:53:1e:9c:cb:59:85:a9:59:5f:b3:4e:a7:36:1b:
c9:f7:de:a0:12:3f:84:78:89:1e:61:5b:0b:94:f7:eb:4e:60:
b7:0e:e0:1e:58:53:4b:2e:79:ba:0b:0c:d6:9d:11:cf:fd:84:
ab:dc:02:07:1b:d6:1a:7a:c4:67:a0:df:9e:d6:f2:3a:6e:84:
9b:03:a7:76:62:7e:6b:0e:b9:56:9b:8f:04:7a:41:7d:ee:76:
e1:dc:56:8b:27:2f:0b:87:56:bd:f3:51:b4:8a:b9:4b:55:b6:
c7:c9:f6:59:8c:ad:2f:0d:82:a3:05:e8:e3:eb:88:72:ff:a9:
33:07:54:82:b1:33:e2:50:53:c1:e6:db:ec:8b:f4:9e:37:24:
96:2d:69:75:cb:8a:9b:6f:be:52:d3:45:db:56:49:f9:e2:a7:
65:48:ae:84:cd:25:fa:27:e4:6f:37:4d:39:21:f5:9e:54:ce:
2c:f2:b1:fc:42:a9:26:e8:dc:1c:d6:8d:f5:d9:3c:fe:c8:40:
4c:a9:07:4c:79:09:29:e2:d4:f3:40:7c:23:7f:96:21:3e:dd:
44:f4:e2:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gWOXnrj4EL0pjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk
YWZhNWU2OTMtMWUzOC00YWFmLTg5Y2MtNzUzZWQ0ZGUzN2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk9NSYT4JpHXVKR1HuH0XQRu5+NzaBKk3k68
SW8ghrlUXUprDwub5e7gSPOPgh7H/RJ4N82E5aD66CaFtpySpC61VopNYoe2X3dc
9rGbO24b7Z/tWoG9cJbVpUy5CVJ61QPYHV4gBUJRGyr9l3KnpSzZoBwIktpR/U/0
oxGXuIPCffpkPKa547qZbkOWwf/aiSBMjlWbCFRSW5pZmDGCGfGSBW811y7GYZPs
Qe7/KBCZdrTrdC/LRCkZW0PpntL29dkG1v4+9nf6ZZE0hRZzVvDVp9JrNt318OTn
dgXvH545wncj6GQw26D6E+76t2XROmuLRverNh1+yNnjwaY25wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFID3LmGwI6+FlHO7RRyyFfd0+DvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNWM2MDlhMzAtMGE4NS0z
ZTkzLWE0Y2QtMWQ5NzYwNDhiOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGJz5tj9CgHf7BZIZ2KfX/GGBStWNYq4iN5JD8lXDjCVbzgqrDL6dRT
HpzLWYWpWV+zTqc2G8n33qASP4R4iR5hWwuU9+tOYLcO4B5YU0sueboLDNadEc/9
hKvcAgcb1hp6xGeg357W8jpuhJsDp3ZifmsOuVabjwR6QX3uduHcVosnLwuHVr3z
UbSKuUtVtsfJ9lmMrS8NgqMF6OPriHL/qTMHVIKxM+JQU8Hm2+yL9J43JJYtaXXL
iptvvlLTRdtWSfnip2VIroTNJfon5G83TTkh9Z5UzizysfxCqSbo3BzWjfXZPP7I
QEypB0x5CSni1PNAfCN/liE+3UT04gY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:40 2026 by rpki-client