
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
File: cc973301-7c68-348a-bd7d-e22b5396a832.roa (raw, json)
Hash identifier: GgOPH8iJMdQToIBSWQgJ5SV4bWyC5psS+qMgecNcRAg=
Subject key identifier: EB:A0:05:2D:B7:A8:9C:53:7A:FF:7E:0B:D0:85:07:FA:AC:70:69:2F
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584D6EDA5EC62A390775E5079080
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 12189
IP address blocks: 131.153.112.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:5e:c6:2a:39:07:75:e5:07:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=e5b50266-03d1-480b-a733-ed26f2cdb93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:0f:86:a5:67:35:47:d1:b4:9f:66:11:ad:
ce:0b:0c:09:97:4e:9c:3f:cb:b9:0d:ed:1f:c9:78:
f9:72:8b:32:0d:e0:30:e9:16:ea:5e:7a:31:04:30:
4b:db:3c:72:2c:ec:83:51:82:11:4c:bd:4c:cf:35:
ad:ce:a3:bf:20:a5:8a:f3:f8:28:87:2d:83:98:07:
be:f0:c5:16:18:88:79:b6:cf:01:84:db:a9:1d:b3:
07:3b:30:2a:44:3d:37:da:e5:e4:9f:4f:b4:b2:83:
ac:46:67:97:49:85:01:6e:b1:11:62:c9:53:23:e3:
e8:0d:85:35:0b:37:d6:e4:09:a4:93:5a:03:7d:79:
36:2d:04:7b:e9:6f:6d:af:dd:ba:ec:1c:fd:f8:56:
26:aa:6f:04:de:38:d2:63:ae:00:71:7d:df:4e:a9:
fa:e6:3b:f6:cf:7f:52:17:5e:45:be:9e:c2:58:af:
cc:e2:c4:a8:64:f9:a4:eb:53:1f:75:fe:ff:b0:a8:
d3:62:74:f5:93:f0:ed:24:88:8d:58:c2:b8:b2:f9:
d6:06:b4:d0:82:ea:a9:03:d1:46:9c:6f:43:88:b5:
26:33:cd:d6:14:4a:d1:73:17:f9:76:2a:ba:17:9e:
19:05:9c:72:d6:a1:cf:b5:e3:fc:67:9f:77:37:4c:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A0:05:2D:B7:A8:9C:53:7A:FF:7E:0B:D0:85:07:FA:AC:70:69:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:18:93:cf:2e:08:c1:a9:c6:5c:5e:10:8f:f4:12:2d:03:2b:
5d:2b:b6:48:93:ea:e6:d9:b4:e1:e2:f5:31:c3:95:5c:34:b2:
28:e3:db:aa:19:3d:f8:db:00:9c:6a:b3:d0:4a:24:b4:b7:84:
32:cf:a7:30:7a:69:47:26:4f:b5:dc:74:4f:ad:bd:36:d1:1d:
d5:e9:24:ca:81:0d:74:f7:5a:22:08:c3:fc:b6:0a:36:97:09:
7d:a8:35:cf:02:1f:34:c0:4b:94:87:c7:b6:1d:2d:53:34:de:
d4:52:ba:6b:9f:b5:b5:ef:85:5b:09:f1:2f:dd:68:47:75:89:
f1:90:ee:99:df:fe:2d:4f:38:e8:6e:4e:7b:a8:b8:62:9c:d8:
c9:18:93:cc:3a:5d:15:85:4f:83:8b:90:68:b8:14:22:cf:59:
82:22:29:04:77:4f:31:6a:06:0e:88:0e:d6:4a:a1:00:82:7d:
c1:09:2c:68:4d:7f:c4:7c:80:b0:86:3d:21:64:3a:96:c1:42:
fd:be:ee:2b:05:30:fb:d8:66:83:fa:23:08:bc:b7:96:58:73:
9f:d0:df:80:6b:16:b1:24:cd:47:0e:cc:f3:90:25:95:ee:2e:
07:c2:18:91:15:fa:b8:a5:52:f3:62:cd:ee:ee:54:f6:77:c3:
6b:82:05:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l7GKjkHdeUHkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZTViNTAyNjYtMDNkMS00ODBiLWE3MzMtZWQyNmYyY2RiOTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleEPhqVnNUfRtJ9mEa3OCwwJl06cP8u5De0f
yXj5cosyDeAw6RbqXnoxBDBL2zxyLOyDUYIRTL1MzzWtzqO/IKWK8/gohy2DmAe+
8MUWGIh5ts8BhNupHbMHOzAqRD032uXkn0+0soOsRmeXSYUBbrERYslTI+PoDYU1
CzfW5Amkk1oDfXk2LQR76W9tr9267Bz9+FYmqm8E3jjSY64AcX3fTqn65jv2z39S
F15Fvp7CWK/M4sSoZPmk61Mfdf7/sKjTYnT1k/DtJIiNWMK4svnWBrTQguqpA9FG
nG9DiLUmM83WFErRcxf5diq6F54ZBZxy1qHPteP8Z593N0xwdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOugBS23qJxTev9+C9CFB/qscGkvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M5NzMzMDEtN2M2OC0z
NDhhLWJkN2QtZTIyYjUzOTZhODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAYk88uCMGpxlxeEI/0Ei0DK10rtkiT6ubZtOHi9THDlVw0sijj26oZ
PfjbAJxqs9BKJLS3hDLPpzB6aUcmT7XcdE+tvTbRHdXpJMqBDXT3WiIIw/y2CjaX
CX2oNc8CHzTAS5SHx7YdLVM03tRSumuftbXvhVsJ8S/daEd1ifGQ7pnf/i1POOhu
TnuouGKc2MkYk8w6XRWFT4OLkGi4FCLPWYIiKQR3TzFqBg6IDtZKoQCCfcEJLGhN
f8R8gLCGPSFkOpbBQv2+7isFMPvYZoP6Iwi8t5ZYc5/Q34BrFrEkzUcOzPOQJZXu
LgfCGJEV+rilUvNize7uVPZ3w2uCBVA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:39 2026 by rpki-client