
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa
File: d56026a1-cfac-3474-a6ad-48aea0c9a396.roa (raw, json)
Hash identifier: F60AvyXpfSTtSe2HZL+OUgew02GL+OzgOPI5C4wb8GM=
Subject key identifier: 91:B1:DB:D2:86:71:5B:B8:29:6D:66:B9:AF:B7:8F:B7:5C:B7:B8:33
Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Certificate serial: 010D0C9F4328584DE15088F2D328F7CADB2FCCE0
Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa
Signing time: Tue 19 May 2026 01:00:24 +0000
ROA not before: Tue 19 May 2026 01:00:24 +0000
ROA not after: Mon 17 Aug 2026 01:00:24 +0000
asID: 396261
IP address blocks: 128.163.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e1:50:88:f2:d3:28:f7:ca:db:2f:cc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Validity
Not Before: May 19 01:00:24 2026 GMT
Not After : Aug 17 01:00:24 2026 GMT
Subject: CN=0795d567-5748-4082-bbfc-80b12ae6e43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:55:fb:2a:27:19:9a:79:a4:79:68:1a:98:
ae:92:6c:e9:73:6c:52:cb:17:b1:28:0d:c5:63:0d:
1b:7f:eb:25:d4:f7:99:00:c4:d7:48:5a:69:1d:51:
29:18:4c:8b:cd:04:6e:9f:62:a1:c5:fe:0a:fb:01:
b7:f3:c6:ed:9d:36:05:fc:c8:ca:98:62:2c:fb:90:
34:3f:2c:50:b3:58:b2:1f:e6:2b:3f:ee:f9:62:b5:
db:20:76:b9:11:18:b8:2d:6b:9d:09:26:d3:21:7e:
64:ad:09:04:ed:ed:91:14:2a:77:27:76:4f:22:e1:
7a:58:a5:b7:36:7c:9e:fa:58:8e:4b:4c:25:16:9b:
31:06:42:8a:ac:35:c0:a0:f9:9c:d4:57:5f:ff:4b:
e3:1d:50:2b:19:ac:a5:ac:d4:b6:58:aa:86:74:18:
ba:c9:94:7f:f6:b1:1b:67:df:65:4f:bd:ce:3a:60:
ba:aa:d4:78:4c:41:8b:73:02:31:c2:6e:cf:78:6e:
14:07:c6:be:99:b5:d4:34:c6:cc:8b:eb:e4:f0:70:
90:6f:30:51:ef:79:f4:a4:c0:fa:7c:15:81:85:50:
c6:89:54:a4:50:b4:84:ce:44:70:15:f4:aa:37:75:
66:cc:f7:57:9d:50:68:c7:f2:ea:de:28:fc:50:4a:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B1:DB:D2:86:71:5B:B8:29:6D:66:B9:AF:B7:8F:B7:5C:B7:B8:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl
X509v3 Authority Key Identifier:
keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.163.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:cb:26:50:42:0f:08:92:42:b9:18:1c:42:e7:a4:f3:a5:b1:
d7:98:25:6e:8c:4a:4d:38:d8:01:b0:3f:51:6b:6b:68:5c:09:
16:7e:8d:e1:6e:5b:10:c4:2f:36:68:95:a9:07:01:c6:f2:66:
69:24:3c:5c:60:68:50:aa:24:58:50:51:d2:ca:de:5b:95:28:
fd:d1:54:11:68:94:00:c5:a9:72:1e:95:07:1c:33:f8:0f:be:
eb:83:60:67:4b:71:aa:cd:b8:40:69:23:04:6d:4e:f7:3d:d8:
e8:01:09:24:4a:dc:1f:60:ca:58:59:65:d4:94:ed:27:12:e1:
11:b9:f0:86:c1:05:62:1b:de:23:fe:dc:da:47:57:51:c1:1c:
b7:db:ec:b2:3a:a5:81:36:48:12:5d:66:2b:93:3c:8b:83:5c:
df:2d:77:03:12:45:ab:35:4f:13:a2:e6:f7:48:4d:69:24:19:
5d:9b:92:1f:b1:f9:bb:38:06:b3:33:76:01:83:2b:f8:d2:05:
74:8d:0c:95:f7:d9:c7:01:14:ed:b1:cc:f3:3c:73:d3:9a:95:
7f:80:06:47:87:e5:17:cb:a7:6f:ce:37:73:ae:98:d1:7c:e0:
8d:45:84:b7:42:1f:a9:77:43:a6:f5:68:53:e1:ca:a5:2d:a0:
0c:8f:05:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUIjy0yj3ytsvzOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh
OWU1MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
MDc5NWQ1NjctNTc0OC00MDgyLWJiZmMtODBiMTJhZTZlNDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygBV+yonGZp5pHloGpiukmzpc2xSyxexKA3F
Yw0bf+sl1PeZAMTXSFppHVEpGEyLzQRun2Khxf4K+wG388btnTYF/MjKmGIs+5A0
PyxQs1iyH+YrP+75YrXbIHa5ERi4LWudCSbTIX5krQkE7e2RFCp3J3ZPIuF6WKW3
Nnye+liOS0wlFpsxBkKKrDXAoPmc1Fdf/0vjHVArGaylrNS2WKqGdBi6yZR/9rEb
Z99lT73OOmC6qtR4TEGLcwIxwm7PeG4UB8a+mbXUNMbMi+vk8HCQbzBR73n0pMD6
fBWBhVDGiVSkULSEzkRwFfSqN3VmzPdXnVBox/Lq3ij8UErKNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGx29KGcVu4KW1mua+3j7dct7gzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw
ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDU2MDI2YTEtY2ZhYy0z
NDc0LWE2YWQtNDhhZWEwYzlhMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm
M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm
YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx
MGFmZmE5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgKPKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHLJlBCDwiSQrkYHELnpPOlsdeYJW6MSk042AGwP1Fra2hcCRZ+jeFu
WxDELzZolakHAcbyZmkkPFxgaFCqJFhQUdLK3luVKP3RVBFolADFqXIelQccM/gP
vuuDYGdLcarNuEBpIwRtTvc92OgBCSRK3B9gylhZZdSU7ScS4RG58IbBBWIb3iP+
3NpHV1HBHLfb7LI6pYE2SBJdZiuTPIuDXN8tdwMSRas1TxOi5vdITWkkGV2bkh+x
+bs4BrMzdgGDK/jSBXSNDJX32ccBFO2xzPM8c9OalX+ABkeH5RfLp2/ON3OumNF8
4I1FhLdCH6l3Q6b1aFPhyqUtoAyPBUg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:16 2026 by rpki-client