
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/c520f1f5-fa27-3314-bdd7-48ef172a427d.roa
File: c520f1f5-fa27-3314-bdd7-48ef172a427d.roa (raw, json)
Hash identifier: LLxxxJa1ls1ds09NijK73di8QN+xVkmQ0BWolGiXU/U=
Subject key identifier: BA:11:92:81:7E:69:0A:50:FA:AA:7C:A5:CB:A8:82:6D:53:30:C1:B4
Certificate issuer: /CN=0a1ff3e6-c9a5-4864-9107-b8da19c23c53
Certificate serial: 010D0C9F4328584CC11A35E53CF3FF8442C327C0
Authority key identifier: 64:41:3C:3D:D9:54:12:74:22:99:05:26:52:06:96:5D:42:58:7F:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/c520f1f5-fa27-3314-bdd7-48ef172a427d.roa
Signing time: Wed 04 Feb 2026 19:18:28 +0000
ROA not before: Wed 04 Feb 2026 19:18:28 +0000
ROA not after: Tue 05 May 2026 18:18:28 +0000
asID: 32560
IP address blocks: 74.119.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c1:1a:35:e5:3c:f3:ff:84:42:c3:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1ff3e6-c9a5-4864-9107-b8da19c23c53
Validity
Not Before: Feb 4 19:18:28 2026 GMT
Not After : May 5 18:18:28 2026 GMT
Subject: CN=aa910ccb-ac00-4d47-a21e-5ee974ed0bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:1a:b7:70:23:a2:e3:98:d6:4c:95:56:a1:
18:06:73:a1:03:ba:9a:55:47:34:f9:06:0b:9d:a9:
8d:9c:d9:bc:a6:44:4c:ef:3a:b4:7d:35:72:f6:cf:
e1:50:f9:78:ba:d1:fe:5d:f1:c2:43:06:a6:c8:73:
82:0a:a1:d1:99:be:82:bb:4d:8b:b4:51:f8:b0:69:
a0:1c:4a:67:88:fc:b7:e6:32:a6:c6:c3:80:66:3f:
3c:ed:7b:39:67:cd:d9:3f:b8:ec:a9:e1:1e:4b:98:
6e:97:05:6d:5e:70:82:e6:ee:6e:d5:00:18:e8:47:
63:c3:13:cd:be:e4:9e:77:fb:8d:ae:93:0b:85:d8:
d7:06:1c:eb:19:90:eb:d4:5d:ee:e0:42:24:6a:3f:
e2:de:5f:1b:7a:f9:69:2c:6f:b3:f1:1b:e3:0b:f6:
aa:1d:37:ac:74:8b:c3:99:43:0c:ec:aa:c1:d3:28:
d5:cb:76:b4:f0:c3:d3:9d:00:e4:46:ad:d5:3a:d8:
35:73:d4:7a:a7:6f:39:b7:18:5d:c3:96:42:f3:7b:
32:1c:55:24:84:cb:38:43:d7:83:6e:dc:63:fc:70:
de:99:5a:cb:40:c0:c7:ff:d0:f8:b8:0b:18:91:9f:
60:29:6d:2a:dc:b7:00:3b:5c:46:29:3e:38:83:ce:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:92:81:7E:69:0A:50:FA:AA:7C:A5:CB:A8:82:6D:53:30:C1:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/c520f1f5-fa27-3314-bdd7-48ef172a427d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.crl
X509v3 Authority Key Identifier:
keyid:64:41:3C:3D:D9:54:12:74:22:99:05:26:52:06:96:5D:42:58:7F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer
sbgp-ipAddrBlock: critical
IPv4:
74.119.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:4a:ab:b9:49:a6:98:47:3f:96:03:0b:03:99:f1:3c:42:28:
3f:44:8e:78:c2:7c:d0:5f:ec:d4:d1:26:f4:54:12:70:da:f5:
a6:1f:e5:3a:4f:07:7c:42:e4:31:75:a5:d1:b4:cd:7a:31:7a:
15:c5:14:2a:b8:86:b6:30:b2:ad:fe:39:de:c3:ee:1f:1f:18:
18:9f:78:c3:47:b5:f9:98:4f:88:c9:40:81:28:ff:be:66:0f:
52:47:fc:3e:c1:2f:a6:57:c7:1b:f4:51:9e:06:d5:18:2d:92:
6a:b5:02:13:27:9e:ea:0a:4c:d3:0e:d9:9a:21:9a:98:47:b7:
0d:52:2f:b6:51:8c:5a:b1:01:b9:e4:17:47:97:ed:f5:33:3b:
9b:76:32:e8:fa:5f:59:41:0e:3f:41:06:c7:0c:70:8f:17:9a:
36:96:d9:7c:86:17:0d:c8:93:fa:11:43:18:a9:65:a0:18:13:
17:40:08:6d:7f:86:c6:b7:56:ad:2a:72:6b:94:3b:0f:21:f4:
9e:13:df:59:97:a4:68:e4:6b:fc:89:bd:e4:22:d6:a4:77:03:
6a:6e:3f:6f:77:e0:71:88:4d:9c:1a:e7:6e:21:d0:74:b7:5e:
33:9d:60:0a:ec:17:b2:c4:9e:a5:d9:41:fd:e2:f0:b6:ae:e3:
7f:23:ec:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzBGjXlPPP/hELDJ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGExZmYzZTYtYzlhNS00ODY0LTkxMDctYjhkYTE5YzIz
YzUzMB4XDTI2MDIwNDE5MTgyOFoXDTI2MDUwNTE4MTgyOFowLzEtMCsGA1UEAxMk
YWE5MTBjY2ItYWMwMC00ZDQ3LWEyMWUtNWVlOTc0ZWQwYmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55sat3AjouOY1kyVVqEYBnOhA7qaVUc0+QYL
namNnNm8pkRM7zq0fTVy9s/hUPl4utH+XfHCQwamyHOCCqHRmb6Cu02LtFH4sGmg
HEpniPy35jKmxsOAZj887Xs5Z83ZP7jsqeEeS5hulwVtXnCC5u5u1QAY6EdjwxPN
vuSed/uNrpMLhdjXBhzrGZDr1F3u4EIkaj/i3l8bevlpLG+z8RvjC/aqHTesdIvD
mUMM7KrB0yjVy3a08MPTnQDkRq3VOtg1c9R6p285txhdw5ZC83syHFUkhMs4Q9eD
btxj/HDemVrLQMDH/9D4uAsYkZ9gKW0q3LcAO1xGKT44g863eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoRkoF+aQpQ+qp8pcuogm1TMMG0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYTFm
ZjNlNi1jOWE1LTQ4NjQtOTEwNy1iOGRhMTljMjNjNTMvYzUyMGYxZjUtZmEyNy0z
MzE0LWJkZDctNDhlZjE3MmE0MjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGExZmYzZTYtYzlhNS00ODY0LTkx
MDctYjhkYTE5YzIzYzUzLzBhMWZmM2U2LWM5YTUtNDg2NC05MTA3LWI4ZGExOWMy
M2M1My5jcmwwHwYDVR0jBBgwFoAUZEE8PdlUEnQimQUmUgaWXUJYf98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYTFmZjNlNi1jOWE1LTQ4NjQtOTEwNy1iOGRh
MTljMjNjNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnfkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJKq7lJpphHP5YDCwOZ8TxCKD9EjnjCfNBf7NTRJvRUEnDa9aYf5TpP
B3xC5DF1pdG0zXoxehXFFCq4hrYwsq3+Od7D7h8fGBifeMNHtfmYT4jJQIEo/75m
D1JH/D7BL6ZXxxv0UZ4G1Rgtkmq1AhMnnuoKTNMO2ZohmphHtw1SL7ZRjFqxAbnk
F0eX7fUzO5t2Muj6X1lBDj9BBscMcI8XmjaW2XyGFw3Ik/oRQxipZaAYExdACG1/
hsa3Vq0qcmuUOw8h9J4T31mXpGjka/yJveQi1qR3A2puP2934HGITZwa524h0HS3
XjOdYArsF7LEnqXZQf3i8Lau438j7Ao=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:13 2026 by rpki-client