
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json)
Hash identifier: 4ajdNHQa0hfA5DEZa0dCuswZCtfFKrHMTxkPaJwE4FA=
Subject key identifier: 5D:CA:5E:AE:A1:63:42:A0:65:EE:32:F8:3A:88:FF:DE:92:02:BB:F9
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F4328584E0C1ECEE347FC238821FE4900
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 16433
IP address blocks: 173.240.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:ce:e3:47:fc:23:88:21:fe:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=70be198a-6bb7-4ba5-9d37-47956f7fdef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:08:87:27:6b:53:85:9e:e3:e4:e1:38:26:
6e:6e:6a:40:e7:64:90:40:39:84:3a:9d:49:8d:cd:
66:4a:81:e3:2a:67:a1:63:bf:f6:b2:55:2f:a6:c6:
c4:e0:0d:61:00:5e:a2:05:01:d9:b1:32:b1:2f:95:
9e:f5:8e:99:9a:1f:70:ae:b1:a9:d9:c6:ab:ac:e3:
53:e8:1d:f1:af:55:aa:2e:5b:24:40:c8:70:24:03:
31:9f:08:b3:d5:e9:1b:02:e6:b7:48:ef:25:e2:1f:
c7:7a:1f:8b:23:0e:a4:c8:9d:96:e5:36:d7:eb:06:
66:11:19:e3:d0:e9:9c:b2:f7:3a:49:3f:78:94:1d:
76:07:e1:ee:f0:86:c3:84:2f:8a:de:ab:63:cc:6d:
7f:82:46:2d:c1:d0:ac:e8:16:00:bb:26:12:48:e7:
6f:97:41:57:95:6b:d0:e0:ae:47:41:45:11:31:e1:
b3:2f:c4:1e:c8:12:7a:22:ba:e0:e2:85:46:c4:c2:
6d:dc:f5:64:1e:d8:e6:07:b1:04:a5:c9:42:d1:5f:
a1:f0:e7:b7:37:27:1d:59:6e:85:93:83:ab:9b:2b:
c9:8e:4d:04:93:1c:4c:0f:21:e1:46:76:59:63:3a:
73:53:86:ed:26:c9:96:10:85:e5:39:fb:bc:1b:e4:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:5E:AE:A1:63:42:A0:65:EE:32:F8:3A:88:FF:DE:92:02:BB:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
173.240.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:8a:c3:ee:e7:81:34:d5:70:ce:4a:b9:83:cd:37:70:48:f5:
e3:20:61:8d:a8:46:bc:27:43:0b:87:12:0e:71:35:89:e0:7b:
e7:a7:33:7e:50:89:77:72:b6:df:b0:68:7a:6f:c0:f7:77:a0:
07:84:1f:d6:eb:70:5b:b5:d4:6e:46:29:ee:34:62:d2:eb:c3:
68:7b:2e:c1:3d:be:4b:e6:66:c9:0b:f4:bb:76:02:dd:68:73:
73:c2:42:d7:8a:92:7f:e5:64:f1:45:50:13:91:08:2e:0d:1a:
a8:de:74:39:a1:c9:28:a3:80:12:b1:55:93:47:53:da:c4:c1:
f4:14:c6:60:a2:11:5c:db:8c:90:34:1e:e5:52:3b:0e:9d:56:
1b:31:1f:69:b0:ba:38:89:b9:4b:26:08:ad:eb:f5:ab:ac:c2:
40:f3:fb:00:a0:65:b5:79:b1:f0:3a:11:d9:36:5d:c9:70:34:
a0:b5:77:e9:d2:17:24:cc:c7:b7:3d:32:5f:14:65:17:a3:e7:
5b:20:e8:1a:d3:8c:bb:52:8f:3b:e2:49:2f:cd:54:8c:db:90:
df:96:c7:f7:90:f1:1d:7b:34:b9:e9:03:ac:f9:08:d6:96:05:
4d:6f:c4:59:16:de:7e:63:8f:ef:a9:7b:36:0e:ff:72:78:86:
29:ce:f3:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHs7jR/wjiCH+SQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1
ZDUwMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk
NzBiZTE5OGEtNmJiNy00YmE1LTlkMzctNDc5NTZmN2ZkZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaUIhydrU4We4+ThOCZubmpA52SQQDmEOp1J
jc1mSoHjKmehY7/2slUvpsbE4A1hAF6iBQHZsTKxL5We9Y6Zmh9wrrGp2carrONT
6B3xr1WqLlskQMhwJAMxnwiz1ekbAua3SO8l4h/Heh+LIw6kyJ2W5TbX6wZmERnj
0Omcsvc6ST94lB12B+Hu8IbDhC+K3qtjzG1/gkYtwdCs6BYAuyYSSOdvl0FXlWvQ
4K5HQUURMeGzL8QeyBJ6Irrg4oVGxMJt3PVkHtjmB7EEpclC0V+h8Oe3NycdWW6F
k4OrmyvJjk0EkxxMDyHhRnZZYzpzU4btJsmWEIXlOfu8G+TrWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3KXq6hY0KgZe4y+DqI/96SArv5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm
NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNzc0ZGI2ZjAtY2YyZC0z
OTVlLWI1YTctNDBhNWQyMTEzNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw
OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl
NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi
MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2Kw+7ngTTVcM5KuYPNN3BI9eMgYY2oRrwnQwuHEg5xNYnge+enM35Q
iXdytt+waHpvwPd3oAeEH9brcFu11G5GKe40YtLrw2h7LsE9vkvmZskL9Lt2At1o
c3PCQteKkn/lZPFFUBORCC4NGqjedDmhySijgBKxVZNHU9rEwfQUxmCiEVzbjJA0
HuVSOw6dVhsxH2mwujiJuUsmCK3r9auswkDz+wCgZbV5sfA6Edk2XclwNKC1d+nS
FyTMx7c9Ml8UZRej51sg6BrTjLtSjzviSS/NVIzbkN+Wx/eQ8R17NLnpA6z5CNaW
BU1vxFkW3n5jj++pezYO/3J4hinO87g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:55 2026 by rpki-client