
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
File: 42c8111b-72eb-368e-a605-4f13d00564aa.roa (raw, json)
Hash identifier: ohE7Qn/YwmRAuvmyEjScBYYNIs+KM6S1sENsLf58lJs=
Subject key identifier: 13:59:EB:FA:71:20:8E:50:9E:CF:96:96:9C:15:1D:46:BF:42:7E:A3
Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial: 010D0C9F4328584D55BA3ABC39A334A9F6584000
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 14618
IP address blocks: 208.95.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:3a:bc:39:a3:34:a9:f6:58:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=334ff4d9-120d-4391-8ff5-6562ca353faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:73:df:b1:81:ba:05:53:11:25:f0:c7:87:
b4:62:94:99:06:de:83:74:85:a2:c5:e7:11:bb:14:
3b:cf:b7:6f:fb:76:24:5d:74:47:17:76:af:24:dc:
75:5f:e3:59:53:72:68:96:ad:10:3e:73:81:b7:04:
6c:c6:da:65:e1:b1:81:1f:41:3e:40:f2:45:96:68:
0a:98:cc:2d:fa:d5:6d:9c:81:d6:8b:63:03:e9:2d:
06:f8:f4:44:68:d0:ef:69:30:70:81:fc:f1:51:dd:
c7:43:cc:ea:db:3a:c1:8b:10:b8:d4:4a:48:1f:96:
08:6f:72:28:1b:37:dd:d2:ca:2d:f8:c7:9c:6c:7e:
6f:54:fd:78:b4:74:cc:51:a8:4b:81:b0:2e:51:05:
db:6a:f3:c9:00:32:3b:52:b2:eb:5d:31:ad:60:51:
7a:f3:56:9d:9f:c6:a1:79:45:e1:85:b8:23:05:ce:
f7:5c:63:d8:44:67:8d:26:51:d5:ee:9e:2e:32:b0:
94:e5:2c:36:0c:74:41:88:bb:d4:8f:4b:45:5d:9b:
9a:c0:51:e3:d2:c2:62:bb:b7:9f:8b:f8:e6:4c:05:
a7:c9:d9:2a:2e:69:d7:76:6c:18:03:bd:04:ce:ee:
41:b2:bc:3e:bd:91:b1:26:60:ae:bf:83:90:33:7b:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:EB:FA:71:20:8E:50:9E:CF:96:96:9C:15:1D:46:BF:42:7E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
X509v3 Authority Key Identifier:
keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.95.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:6c:e4:fa:b3:d5:9c:24:4e:bc:26:66:fa:f2:43:22:07:cb:
c4:9f:f6:1c:25:ec:46:69:3c:b4:b3:74:bb:bd:e7:8b:8e:e1:
1a:91:7a:f0:8d:45:b5:91:63:ce:f7:06:f9:58:f0:f1:cc:76:
1b:07:d5:cb:a3:24:ec:d6:59:80:b8:4d:aa:5b:46:1d:47:54:
57:63:af:c3:4a:99:ec:61:dc:d3:d1:a1:bc:c4:3a:83:c6:e1:
30:01:5c:46:55:6e:18:f9:96:21:4e:35:6a:2a:91:e9:a0:ab:
d0:0c:e8:7a:23:95:db:9d:6c:d5:a2:e6:52:1d:e6:18:dd:7a:
54:68:c7:90:c3:e2:46:1d:68:71:84:1c:6f:08:2a:2a:db:54:
04:fd:16:68:3d:90:c1:44:21:af:c8:90:4b:f3:4f:33:2d:c2:
f1:fa:c3:6e:d7:a2:6d:09:8e:17:0e:5e:d6:f9:44:50:77:e2:
41:8a:ef:b2:ae:6e:ce:f7:d8:b7:b9:44:08:c3:8e:fd:1a:8c:
8d:54:24:61:43:89:51:69:3f:06:45:fb:95:2d:d2:6d:4d:83:
00:ed:f6:9b:e5:70:ad:33:57:e4:22:e5:d0:00:f8:52:9b:76:
5d:e6:20:79:17:95:90:ad:00:75:35:9d:b0:15:65:e9:a7:4b:
32:ff:23:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vujq8OaM0qfZYQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MzM0ZmY0ZDktMTIwZC00MzkxLThmZjUtNjU2MmNhMzUzZmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JFz37GBugVTESXwx4e0YpSZBt6DdIWixecR
uxQ7z7dv+3YkXXRHF3avJNx1X+NZU3Jolq0QPnOBtwRsxtpl4bGBH0E+QPJFlmgK
mMwt+tVtnIHWi2MD6S0G+PREaNDvaTBwgfzxUd3HQ8zq2zrBixC41EpIH5YIb3Io
Gzfd0sot+MecbH5vVP14tHTMUahLgbAuUQXbavPJADI7UrLrXTGtYFF681adn8ah
eUXhhbgjBc73XGPYRGeNJlHV7p4uMrCU5Sw2DHRBiLvUj0tFXZuawFHj0sJiu7ef
i/jmTAWnydkqLmnXdmwYA70Ezu5Bsrw+vZGxJmCuv4OQM3vgawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNZ6/pxII5Qns+WlpwVHUa/Qn6jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNDJjODExMWItNzJlYi0z
NjhlLWE2MDUtNGYxM2QwMDU2NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F82MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNs5Pqz1ZwkTrwmZvryQyIHy8Sf9hwl7EZpPLSzdLu954uO4RqRevCN
RbWRY873BvlY8PHMdhsH1cujJOzWWYC4TapbRh1HVFdjr8NKmexh3NPRobzEOoPG
4TABXEZVbhj5liFONWoqkemgq9AM6HojldudbNWi5lId5hjdelRox5DD4kYdaHGE
HG8IKirbVAT9Fmg9kMFEIa/IkEvzTzMtwvH6w27Xom0JjhcOXtb5RFB34kGK77Ku
bs732Le5RAjDjv0ajI1UJGFDiVFpPwZF+5Ut0m1NgwDt9pvlcK0zV+Qi5dAA+FKb
dl3mIHkXlZCtAHU1nbAVZemnSzL/I/I=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:07 2026 by rpki-client