
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/18a44674-eb0c-3dce-b03a-171f9c3759f2.roa
File: 18a44674-eb0c-3dce-b03a-171f9c3759f2.roa (raw, json)
Hash identifier: ijM5qrArFKzcaNngG0+TVg/E7UUp3SVK7u5SZ9+eTqw=
Subject key identifier: 26:D8:58:9F:57:F1:92:44:19:5C:4D:32:4A:F8:C0:15:99:45:D9:69
Certificate issuer: /CN=a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a
Certificate serial: 010D0C9F4328584D5234EEE51818AC8BF3537780
Authority key identifier: 5F:C7:CC:D2:E6:77:18:6A:01:93:E4:67:69:83:D6:E0:B6:23:9F:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/18a44674-eb0c-3dce-b03a-171f9c3759f2.roa
Signing time: Sat 28 Mar 2026 18:44:31 +0000
ROA not before: Sat 28 Mar 2026 18:44:31 +0000
ROA not after: Tue 16 Jun 2026 21:08:15 +0000
asID: 16509
IP address blocks: 68.67.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:ee:e5:18:18:ac:8b:f3:53:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a
Validity
Not Before: Mar 28 18:44:31 2026 GMT
Not After : Jun 16 21:08:15 2026 GMT
Subject: CN=e8047aec-ad74-4e83-ab98-fa7c906a6c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:71:62:3b:b7:6e:e6:b9:91:76:9b:1f:e1:
61:9c:a8:73:38:c9:0d:73:21:a2:d2:a0:14:88:c1:
10:f5:55:c2:5b:2f:d3:56:ed:19:80:6b:98:a0:19:
4f:b2:fa:be:1e:41:c8:78:c8:58:49:76:2a:26:b4:
9e:0a:c0:d5:41:48:9c:d6:13:f2:e1:ea:de:02:56:
7d:db:d0:76:c4:13:56:17:07:b5:63:f9:19:af:b0:
92:46:3e:17:0d:38:7b:65:25:8c:d0:4b:08:35:52:
a5:35:a8:b9:32:c2:ce:9d:90:30:3d:a2:5e:61:1e:
12:bf:4f:2b:92:9a:38:1d:bc:0f:23:84:1d:22:a7:
b3:93:d5:fd:7c:0d:fe:2a:11:57:87:88:28:30:38:
d2:c8:73:32:20:84:c8:24:92:3c:1b:40:cb:92:0e:
a2:57:47:bc:a2:1d:b5:c3:17:99:d5:f2:3b:d0:9b:
33:6f:2f:2b:1a:b4:32:c6:08:0a:55:15:46:b7:bd:
f4:38:c6:08:bc:c6:56:a1:93:37:f3:02:6b:36:62:
6c:5f:cc:61:3a:99:73:a7:a3:d8:f2:9e:d1:8a:42:
3f:57:38:01:9d:c1:8d:3a:1d:84:fb:2a:15:57:90:
79:6c:11:a8:a9:63:b9:b9:22:3c:d7:59:18:cd:ff:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:58:9F:57:F1:92:44:19:5C:4D:32:4A:F8:C0:15:99:45:D9:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/18a44674-eb0c-3dce-b03a-171f9c3759f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.crl
X509v3 Authority Key Identifier:
keyid:5F:C7:CC:D2:E6:77:18:6A:01:93:E4:67:69:83:D6:E0:B6:23:9F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:9d:21:ac:e7:d1:b6:03:37:30:f0:28:67:b0:96:fe:9b:ba:
38:d8:5c:df:be:4d:b2:31:ed:fc:e8:bc:10:7d:1a:0e:ad:0d:
e2:39:c2:89:39:d5:f3:79:95:de:1c:68:07:9e:ea:fe:e1:ca:
bc:67:39:e9:38:4d:5d:36:b2:67:03:e0:d2:5f:cd:ad:2a:c1:
88:4e:de:c5:e3:d9:2f:67:06:c1:fb:50:92:3d:03:23:16:1b:
fd:86:93:91:60:7d:33:ea:96:60:ad:86:30:64:21:9e:dc:58:
7d:1e:a3:80:c8:07:24:88:16:4a:0f:55:d0:b5:76:2a:db:7f:
31:a7:dc:db:21:5b:33:0d:f0:a3:84:19:2d:7b:00:e9:ab:25:
a2:5c:1b:a2:04:42:2d:1c:b1:f8:53:2a:7e:97:1f:2d:42:81:
47:8a:46:d2:bc:1a:fe:07:ce:69:b4:c8:d6:2b:4b:fe:43:2a:
df:13:bb:88:79:41:a6:d7:a9:7b:a2:b1:be:a1:c3:20:9e:e4:
0b:a1:ea:8a:65:a5:72:bb:ac:80:21:07:7e:d3:11:b0:0c:a8:
6e:a6:b3:e6:84:26:a6:89:29:c6:0e:06:49:fd:d5:5d:a9:5c:
07:b6:6b:28:c0:0c:1b:be:b7:b5:e3:ff:e8:bd:57:90:dd:dc:
15:b6:53:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNO7lGBisi/NTd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFiN2IzMjgtZGRkNy00MjgwLWIzYTktOGU1YzdiYmY4
NjJhMB4XDTI2MDMyODE4NDQzMVoXDTI2MDYxNjIxMDgxNVowLzEtMCsGA1UEAxMk
ZTgwNDdhZWMtYWQ3NC00ZTgzLWFiOTgtZmE3YzkwNmE2YzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkypxYju3bua5kXabH+FhnKhzOMkNcyGi0qAU
iMEQ9VXCWy/TVu0ZgGuYoBlPsvq+HkHIeMhYSXYqJrSeCsDVQUic1hPy4ereAlZ9
29B2xBNWFwe1Y/kZr7CSRj4XDTh7ZSWM0EsINVKlNai5MsLOnZAwPaJeYR4Sv08r
kpo4HbwPI4QdIqezk9X9fA3+KhFXh4goMDjSyHMyIITIJJI8G0DLkg6iV0e8oh21
wxeZ1fI70Jszby8rGrQyxggKVRVGt730OMYIvMZWoZM38wJrNmJsX8xhOplzp6PY
8p7RikI/VzgBncGNOh2E+yoVV5B5bBGoqWO5uSI811kYzf+8lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbYWJ9X8ZJEGVxNMkr4wBWZRdlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hMWI3
YjMyOC1kZGQ3LTQyODAtYjNhOS04ZTVjN2JiZjg2MmEvMThhNDQ2NzQtZWIwYy0z
ZGNlLWIwM2EtMTcxZjljMzc1OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTFiN2IzMjgtZGRkNy00MjgwLWIz
YTktOGU1YzdiYmY4NjJhL2ExYjdiMzI4LWRkZDctNDI4MC1iM2E5LThlNWM3YmJm
ODYyYS5jcmwwHwYDVR0jBBgwFoAUX8fM0uZ3GGoBk+RnaYPW4LYjn4owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hMWI3YjMyOC1kZGQ3LTQyODAtYjNhOS04ZTVj
N2JiZjg2MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARENwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSdIazn0bYDNzDwKGewlv6bujjYXN++TbIx7fzovBB9Gg6tDeI5wok5
1fN5ld4caAee6v7hyrxnOek4TV02smcD4NJfza0qwYhO3sXj2S9nBsH7UJI9AyMW
G/2Gk5FgfTPqlmCthjBkIZ7cWH0eo4DIBySIFkoPVdC1dirbfzGn3NshWzMN8KOE
GS17AOmrJaJcG6IEQi0csfhTKn6XHy1CgUeKRtK8Gv4Hzmm0yNYrS/5DKt8Tu4h5
QabXqXuisb6hwyCe5Auh6oplpXK7rIAhB37TEbAMqG6ms+aEJqaJKcYOBkn91V2p
XAe2ayjADBu+t7Xj/+i9V5Dd3BW2U8E=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:48 2026 by rpki-client