
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa
File: 8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa (raw, json)
Hash identifier: YvkIlZdRh95/tmFSQ2N8Jx+XQODOH318JNh7iRDEfos=
Subject key identifier: C3:5B:00:10:A1:44:3B:A7:A6:45:76:59:52:44:77:A2:60:A2:C8:0C
Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial: 010D0C9F4328584D037D1943CE177E9E42236580
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 30039
IP address blocks: 216.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:19:43:ce:17:7e:9e:42:23:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=99ffc01a-2a34-4f21-9ab3-a6a821151eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:e2:54:ab:f8:ed:68:2c:85:19:a4:dc:13:
fb:46:47:38:e9:15:f9:08:50:95:81:a3:f3:04:28:
69:98:18:5f:11:ff:43:bb:39:9a:e8:eb:98:dc:d1:
4e:2a:4a:82:eb:71:26:f2:f0:0c:b7:e6:36:36:da:
91:21:5d:ab:46:d5:63:c9:69:f0:1c:ab:e4:fa:e7:
b5:15:8e:a5:1c:80:1a:20:af:95:ba:55:5d:86:c8:
b7:0b:a8:d8:9f:32:1e:25:db:8d:c1:63:4c:43:e5:
3a:a8:8b:9e:a5:9a:46:c2:ea:61:f4:fc:88:ed:3d:
dc:88:e4:d5:b1:d5:11:b6:32:6f:1e:13:d3:0a:c0:
54:f8:0f:56:77:9d:92:2e:2c:65:28:dc:91:f1:c6:
f2:f6:fa:e9:08:64:16:cc:77:73:f2:88:0e:17:91:
9d:cc:a2:01:58:0e:4a:77:d2:a1:db:dd:16:20:d1:
66:30:df:e4:15:45:10:5c:f4:49:2b:b7:5c:f2:57:
30:f7:3b:56:33:4c:18:fc:0d:be:63:97:5b:42:13:
17:a3:80:a8:d4:7c:c1:66:e7:8a:bf:a6:d7:df:aa:
0d:64:40:06:9a:17:03:45:28:6b:dd:c4:1b:48:b1:
9c:dd:0b:2b:72:8d:79:c6:16:51:7a:a3:81:3b:17:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:00:10:A1:44:3B:A7:A6:45:76:59:52:44:77:A2:60:A2:C8:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
X509v3 Authority Key Identifier:
keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.222.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:41:0d:aa:de:d1:5c:39:09:a7:2f:6e:69:0e:b1:55:df:83:
0c:f4:e1:3a:e9:60:8e:e3:63:6f:0c:0a:dd:41:83:aa:8e:7f:
d1:6e:e6:1c:ac:97:8e:c0:69:50:a3:81:36:95:58:df:36:1f:
eb:39:7e:44:0e:d8:65:cd:09:b5:11:72:04:6b:8d:d0:8e:5f:
4b:be:6e:bf:fa:3b:0c:be:6c:09:e4:da:ce:1b:99:47:62:47:
1d:a7:5e:22:0c:61:50:0b:84:83:e2:1b:af:c2:b6:70:d1:d1:
78:4d:02:8e:fb:e5:45:6d:3d:ef:a9:1d:0a:0f:e4:4e:52:1a:
d9:96:96:8d:89:f4:5d:a7:ed:0b:bd:e5:b7:ef:b5:5f:15:c5:
80:08:cf:3f:ca:92:08:77:39:c9:35:b4:3c:9d:cb:9d:9a:6f:
52:dd:b9:49:75:d6:d5:8d:db:7a:c3:9c:cf:f9:8f:9d:be:74:
c0:a4:3a:63:71:21:77:3e:af:3b:37:29:c8:64:19:95:cc:76:
b6:cb:68:05:f3:b6:b7:34:c1:3d:c5:d9:ef:20:fe:ed:38:ea:
68:8d:1e:da:7c:fe:96:51:86:7b:80:b5:75:0f:82:65:ff:8d:
fd:d8:4b:13:7e:bf:7a:77:5a:d1:f8:8e:e0:9e:45:28:d2:24:
a0:da:5f:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRlDzhd+nkIjZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy
NGJhMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
OTlmZmMwMWEtMmEzNC00ZjIxLTlhYjMtYTZhODIxMTUxZWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlDiVKv47WgshRmk3BP7Rkc46RX5CFCVgaPz
BChpmBhfEf9Duzma6OuY3NFOKkqC63Em8vAMt+Y2NtqRIV2rRtVjyWnwHKvk+ue1
FY6lHIAaIK+VulVdhsi3C6jYnzIeJduNwWNMQ+U6qIuepZpGwuph9PyI7T3ciOTV
sdURtjJvHhPTCsBU+A9Wd52SLixlKNyR8cby9vrpCGQWzHdz8ogOF5GdzKIBWA5K
d9Kh290WINFmMN/kFUUQXPRJK7dc8lcw9ztWM0wY/A2+Y5dbQhMXo4Co1HzBZueK
v6bX36oNZEAGmhcDRShr3cQbSLGc3Qsrco15xhZReqOBOxf2FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNbABChRDunpkV2WVJEd6JgosgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1
N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvOGIyYTIyYmYtN2I2Ni0z
NGU2LTkxOTgtMjRkOGMwOWIxOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1
NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz
MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm
ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExBDare0Vw5CacvbmkOsVXfgwz04TrpYI7jY28MCt1Bg6qOf9Fu5hys
l47AaVCjgTaVWN82H+s5fkQO2GXNCbURcgRrjdCOX0u+br/6Owy+bAnk2s4bmUdi
Rx2nXiIMYVALhIPiG6/CtnDR0XhNAo775UVtPe+pHQoP5E5SGtmWlo2J9F2n7Qu9
5bfvtV8VxYAIzz/Kkgh3Ock1tDydy52ab1LduUl11tWN23rDnM/5j52+dMCkOmNx
IXc+rzs3KchkGZXMdrbLaAXztrc0wT3F2e8g/u046miNHtp8/pZRhnuAtXUPgmX/
jf3YSxN+v3p3WtH4juCeRSjSJKDaXxc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:08 2026 by rpki-client