
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa
File: 84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (raw, json)
Hash identifier: fNZTYG1F9xppvvXvFgkMWTvas/sIByDzOHRUJ2rrTdQ=
Subject key identifier: 58:3E:A6:62:7B:C2:A4:EF:FB:0C:C4:EE:3C:35:42:69:BB:DF:A2:BD
Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945
Certificate serial: 010D0C9F4328584D703FE3C9D2161DD39A637FC0
Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 14618
IP address blocks: 192.28.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:e3:c9:d2:16:1d:d3:9a:63:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=e7cb3372-a8aa-4a56-af97-08526f9c2969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:58:da:96:fe:cb:8e:f1:ef:48:53:17:db:
7a:7c:3d:62:3a:8b:8f:6d:4e:4f:01:88:ad:24:63:
fc:d1:f9:c9:91:d6:13:ed:7e:64:72:9b:01:ad:3e:
2f:f5:b0:60:63:00:74:d5:34:01:d0:5a:62:83:2b:
9c:59:44:17:ae:c5:76:fb:73:a8:c9:dd:e6:5f:72:
00:8d:b3:4a:00:f7:5d:a8:a9:3b:03:4c:d5:8a:59:
2e:e2:f3:8f:62:c2:5c:5d:0b:93:1b:ff:94:06:df:
79:1d:46:88:d5:35:e4:9e:a6:b9:df:a6:98:9a:e3:
38:b9:38:24:18:d6:06:7d:c1:73:7b:dd:a2:20:34:
47:ec:9d:1c:b1:5d:cf:59:37:75:11:bf:2e:2b:33:
b2:29:35:ba:7a:3a:5c:9f:4c:b4:a7:67:a4:72:b2:
10:43:33:55:83:90:91:de:5c:68:99:80:aa:c2:f3:
cb:1b:6c:4b:6a:c7:73:36:26:69:46:cb:a2:79:3c:
5f:f3:00:5e:0b:f4:63:e8:61:e7:22:f9:8a:0a:76:
bb:a3:dc:20:8d:29:48:7e:b6:a5:f1:b2:fc:49:c6:
80:0f:af:26:e3:9b:ba:63:79:0b:10:7c:49:d4:e5:
db:5f:80:f5:08:c6:27:61:76:84:9a:49:5e:3b:55:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:A6:62:7B:C2:A4:EF:FB:0C:C4:EE:3C:35:42:69:BB:DF:A2:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
X509v3 Authority Key Identifier:
keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.28.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d1:5d:5d:21:02:c2:52:2b:db:0c:12:85:09:f0:e8:50:0f:
e7:15:31:16:9d:39:3a:de:64:aa:da:cf:29:0e:fb:95:98:df:
40:59:f2:11:e9:01:1e:be:3d:f4:d4:b4:14:d4:24:0b:90:ee:
30:8a:e4:08:97:63:41:01:fa:fe:cd:1c:7a:b8:71:51:42:5b:
a9:af:cb:2a:9a:ef:f2:d9:60:ea:45:fd:d8:4c:2a:f7:c3:a1:
d3:13:08:9e:ca:7c:a7:d6:cc:97:a6:fd:06:8b:73:5a:9e:f6:
3c:de:5d:91:0d:b6:c3:7e:4b:db:aa:0a:e5:fe:66:8a:01:a5:
9d:eb:04:26:5e:73:af:30:aa:ab:9f:f7:b6:b3:2f:61:aa:b0:
b2:32:1a:93:8d:80:9e:41:b0:64:6b:22:67:1e:81:25:91:ac:
8c:b6:c1:f5:e7:02:d3:0f:82:7e:c9:4e:f4:dc:c1:b1:45:6b:
66:b3:ca:e9:cf:9c:d9:01:e1:20:9b:d5:4e:8f:2d:b8:a1:91:
f3:ba:db:07:95:b6:a1:fb:72:49:0d:b8:e6:97:a9:31:ed:ae:
35:14:09:44:d7:f9:c3:36:4e:56:cc:39:4e:19:39:88:77:1d:
78:76:50:27:f0:33:e9:f4:83:d1:08:2e:91:66:c2:f7:25:2f:
a7:57:4a:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+PJ0hYd05pjf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi
OTQ1MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZTdjYjMzNzItYThhYS00YTU2LWFmOTctMDg1MjZmOWMyOTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodZY2pb+y47x70hTF9t6fD1iOouPbU5PAYit
JGP80fnJkdYT7X5kcpsBrT4v9bBgYwB01TQB0FpigyucWUQXrsV2+3Ooyd3mX3IA
jbNKAPddqKk7A0zVilku4vOPYsJcXQuTG/+UBt95HUaI1TXknqa536aYmuM4uTgk
GNYGfcFze92iIDRH7J0csV3PWTd1Eb8uKzOyKTW6ejpcn0y0p2ekcrIQQzNVg5CR
3lxomYCqwvPLG2xLasdzNiZpRsuieTxf8wBeC/Rj6GHnIvmKCna7o9wgjSlIfral
8bL8ScaAD68m45u6Y3kLEHxJ1OXbX4D1CMYnYXaEmkleO1Vw3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg+pmJ7wqTv+wzE7jw1Qmm736K9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2
ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvODRlODkwM2QtZWM1Yi0z
NTUxLTk2YmQtZDQxOWRiYzk3ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk
ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw
Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz
NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHRXV0hAsJSK9sMEoUJ8OhQD+cVMRadOTreZKrazykO+5WY30BZ8hHp
AR6+PfTUtBTUJAuQ7jCK5AiXY0EB+v7NHHq4cVFCW6mvyyqa7/LZYOpF/dhMKvfD
odMTCJ7KfKfWzJem/QaLc1qe9jzeXZENtsN+S9uqCuX+ZooBpZ3rBCZec68wqquf
97azL2GqsLIyGpONgJ5BsGRrImcegSWRrIy2wfXnAtMPgn7JTvTcwbFFa2azyunP
nNkB4SCb1U6PLbihkfO62weVtqH7ckkNuOaXqTHtrjUUCUTX+cM2TlbMOU4ZOYh3
HXh2UCfwM+n0g9EILpFmwvclL6dXSgo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:03 2026 by rpki-client