
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
File: c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa (raw, json)
Hash identifier: e1c70Lbdj/PI+7oAB+RAGFUCVPK+aCShg8MDfj3X6qc=
Subject key identifier: 93:2D:13:00:04:70:DA:3D:0B:39:9E:78:05:82:1E:CD:03:16:54:CD
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584CD40786ECF690000CB4778F00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 54113
IP address blocks: 140.248.253.128/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:86:ec:f6:90:00:0c:b4:77:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=708f6848-374f-4cc5-bb33-b8f0fe88dbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:16:37:47:20:f0:9b:c8:19:c1:14:69:6c:
94:e5:45:d4:7f:17:61:ff:b6:44:06:2a:e5:58:a3:
40:bd:67:d5:20:94:38:0b:a3:92:74:b9:10:69:b9:
ba:f3:98:24:e7:b8:d3:ff:27:03:e0:59:34:c6:a7:
e1:76:a1:e7:da:0e:1e:60:78:4e:bd:e3:fc:f5:e0:
a0:1c:b9:4f:bf:c4:a7:ae:7b:08:37:f5:7b:01:28:
22:dd:a3:c2:25:a3:cc:67:b2:54:c1:1e:35:a8:61:
f6:89:38:2c:5d:09:a2:f4:1a:01:a2:e6:51:65:5a:
aa:72:1a:de:e2:49:1d:f1:ca:ac:7c:f3:1b:d2:69:
db:10:84:b8:d0:13:38:1e:0f:8b:97:3f:b7:ba:9b:
f4:b3:47:da:4b:72:bf:7f:79:1b:a3:c9:b9:77:f8:
23:52:6b:1d:f2:e2:fa:db:8a:7d:27:ba:ab:b2:a0:
39:0e:97:e3:23:55:b5:2d:af:b3:bd:39:e9:60:aa:
48:11:a7:a4:ab:d1:e5:01:cd:1f:68:af:47:e5:1d:
e6:e7:32:8b:7d:e6:1a:5b:58:07:10:8f:e1:76:35:
c1:f9:d3:af:74:84:ec:70:e5:b1:87:e8:2a:39:66:
ed:cd:98:76:84:fb:17:37:b6:32:5b:ff:87:3a:ad:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:13:00:04:70:DA:3D:0B:39:9E:78:05:82:1E:CD:03:16:54:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.253.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ae:8e:27:18:3d:fe:ec:e2:b3:cc:7d:16:e2:a7:e7:84:fb:
6e:73:f1:0f:3c:78:fb:33:ba:1b:02:92:92:bb:20:76:2e:d4:
db:9b:e8:08:d5:36:a6:ae:39:06:31:f7:b6:b2:e3:84:90:9c:
21:ba:0c:c3:a5:a1:0c:8a:5c:df:c7:34:7b:53:3e:c4:86:a4:
07:62:20:be:34:3e:d1:41:36:3d:6c:fe:bf:29:4d:67:e5:cb:
ec:d4:80:e7:b9:e3:fb:c9:43:a9:3f:67:04:1b:59:da:3c:7a:
c4:4c:72:14:5e:c2:78:75:98:7b:fc:0c:8b:68:ca:31:9d:73:
18:60:6e:82:ef:d5:a0:8b:c3:33:99:a5:bd:ec:53:d8:e6:6b:
16:80:8e:aa:c7:a0:58:e6:ad:7b:41:a7:d8:aa:f2:11:5f:ed:
00:a3:64:74:bd:be:61:c5:1b:91:67:40:27:56:f4:ab:06:c6:
f3:50:9c:7e:4f:39:8d:42:1a:f7:25:e8:2f:8c:6e:c2:2b:7c:
c4:5b:fa:7b:d3:0b:7e:5b:e3:12:0e:bf:fd:66:f8:17:4b:2e:
78:c2:b8:28:e4:40:61:aa:e2:0e:3b:0e:ea:cb:d3:67:10:50:
83:34:c4:f5:3a:fb:2b:d6:cf:6e:91:82:98:59:07:38:99:7f:
8b:9a:81:64
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB4bs9pAADLR3jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
NzA4ZjY4NDgtMzc0Zi00Y2M1LWJiMzMtYjhmMGZlODhkYmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0agWN0cg8JvIGcEUaWyU5UXUfxdh/7ZEBirl
WKNAvWfVIJQ4C6OSdLkQabm685gk57jT/ycD4Fk0xqfhdqHn2g4eYHhOveP89eCg
HLlPv8SnrnsIN/V7ASgi3aPCJaPMZ7JUwR41qGH2iTgsXQmi9BoBouZRZVqqchre
4kkd8cqsfPMb0mnbEIS40BM4Hg+Llz+3upv0s0faS3K/f3kbo8m5d/gjUmsd8uL6
24p9J7qrsqA5DpfjI1W1La+zvTnpYKpIEaekq9HlAc0faK9H5R3m5zKLfeYaW1gH
EI/hdjXB+dOvdITscOWxh+gqOWbtzZh2hPsXN7YyW/+HOq1WaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJMtEwAEcNo9CzmeeAWCHs0DFlTNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzI4YWNkNWYtNWZhNi0z
YzI4LTliODEtZDg4OGMxZTczODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPj9gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBLro4nGD3+7OKzzH0W4qfnhPtuc/EPPHj7M7obApKSuyB2LtTbm+gI
1TamrjkGMfe2suOEkJwhugzDpaEMilzfxzR7Uz7EhqQHYiC+ND7RQTY9bP6/KU1n
5cvs1IDnueP7yUOpP2cEG1naPHrETHIUXsJ4dZh7/AyLaMoxnXMYYG6C79Wgi8Mz
maW97FPY5msWgI6qx6BY5q17QafYqvIRX+0Ao2R0vb5hxRuRZ0AnVvSrBsbzUJx+
TzmNQhr3JegvjG7CK3zEW/p70wt+W+MSDr/9ZvgXSy54wrgo5EBhquIOOw7qy9Nn
EFCDNMT1Ovsr1s9ukYKYWQc4mX+LmoFk
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:43 2026 by rpki-client