
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa
File: a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa (raw, json)
Hash identifier: Rp3ee2NmlkrTKq8VlDK2oZCpBcfDjYHMI7KTS/KcDL0=
Subject key identifier: 88:AF:91:72:F4:E5:4E:B4:C4:A7:A5:16:96:DE:7B:3A:63:5C:44:72
Certificate issuer: /CN=5063cd63-15d7-4a40-801a-3f85ef7d09d1
Certificate serial: 010D0C9F4328584CCD0C8AE19080EB16E4AB1160
Authority key identifier: BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa
Signing time: Mon 09 Feb 2026 02:00:31 +0000
ROA not before: Mon 09 Feb 2026 02:00:31 +0000
ROA not after: Sun 10 May 2026 01:00:31 +0000
asID: 401958
IP address blocks: 208.93.136.0/22 maxlen: 22
2604:2060::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cd:0c:8a:e1:90:80:eb:16:e4:ab:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5063cd63-15d7-4a40-801a-3f85ef7d09d1
Validity
Not Before: Feb 9 02:00:31 2026 GMT
Not After : May 10 01:00:31 2026 GMT
Subject: CN=780b5dab-8d8c-4f9d-9d78-d3b1635ea297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:9e:52:bf:54:b0:10:b9:2f:4c:e5:f3:0f:
42:b5:f7:1d:d5:cf:54:6d:ee:3a:29:54:74:01:7c:
9c:fb:77:17:4c:a4:01:a3:b1:65:27:c0:20:19:e5:
21:80:5e:c6:39:3a:14:0c:ed:64:67:4c:00:cf:08:
05:7e:42:ff:3f:93:0d:9f:8e:93:9e:81:d8:3f:a5:
62:32:ee:7b:89:0b:01:54:4d:2d:20:e0:b9:09:2f:
c3:b6:26:0e:1d:d3:60:3f:ad:66:56:47:67:a3:42:
0c:29:82:64:6b:84:db:32:06:c5:ad:3d:0d:e4:be:
16:08:26:81:8d:e5:63:cd:b7:3e:22:a4:ed:cf:d2:
f5:78:9f:0c:1f:31:d8:4d:d1:14:2c:e8:5a:f3:1c:
ec:fe:ae:52:63:7c:c8:3f:02:24:35:9a:7b:4c:38:
12:ee:a4:68:cb:f8:f0:20:07:59:06:d9:72:83:cd:
4c:a5:a1:e5:bb:a4:46:07:a9:43:5c:96:bb:2f:48:
15:fe:f0:56:8c:41:fd:e2:e0:0e:9e:0b:4f:b8:68:
0c:28:d7:85:b5:48:94:bc:0a:88:e7:34:67:65:80:
d7:29:4d:86:99:69:2f:88:f5:d7:07:fe:eb:59:72:
9d:12:9a:03:24:cd:19:22:43:49:fd:f3:bf:d1:a4:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:91:72:F4:E5:4E:B4:C4:A7:A5:16:96:DE:7B:3A:63:5C:44:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.crl
X509v3 Authority Key Identifier:
keyid:BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.136.0/22
IPv6:
2604:2060::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ca:48:66:7a:ea:ba:9f:de:99:ca:cb:21:a2:8a:ab:37:75:
f6:c3:62:c8:3f:88:6c:01:6d:1f:ed:3b:32:ed:b4:49:60:4f:
f4:77:a4:e3:5f:8d:19:41:53:0b:3c:76:ef:43:8a:20:6d:3e:
28:a2:3f:c4:8a:0e:80:93:22:e8:cd:fa:77:7d:3a:e1:ac:23:
c5:98:2a:e0:d7:4f:9d:59:f4:27:e2:6b:20:08:64:0d:d3:b5:
36:c5:c1:98:d8:e1:98:13:d8:b9:f6:be:80:b0:2e:fa:07:84:
57:a3:0a:a6:0c:6d:0a:ab:ef:11:3d:f2:e3:cc:7b:6a:1a:66:
57:c9:39:ef:21:82:e1:b5:6c:15:3d:d3:2b:e1:81:d3:b8:7e:
e3:66:4e:3b:55:6f:28:b0:4e:ae:3e:29:33:3f:f9:fd:35:5d:
73:6c:04:4a:3c:bf:9c:6d:06:01:27:2f:46:41:5b:ee:0b:4c:
e0:c3:5b:64:39:06:35:b1:a0:7c:da:39:04:76:b5:12:38:62:
64:7d:40:df:0d:16:04:b7:21:a2:f5:1e:63:cf:7b:3a:60:a6:
73:e1:f2:48:34:26:9e:70:40:77:64:7a:4a:d1:aa:cb:4b:93:
4a:82:09:2a:b5:be:d3:05:63:7a:80:0a:a8:bd:2f:20:e8:a5:
c1:f7:c4:9b
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEzNDIrhkIDrFuSrEWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA2M2NkNjMtMTVkNy00YTQwLTgwMWEtM2Y4NWVmN2Qw
OWQxMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NzgwYjVkYWItOGQ4Yy00ZjlkLTlkNzgtZDNiMTYzNWVhMjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6qeUr9UsBC5L0zl8w9Ctfcd1c9Ube46KVR0
AXyc+3cXTKQBo7FlJ8AgGeUhgF7GOToUDO1kZ0wAzwgFfkL/P5MNn46TnoHYP6Vi
Mu57iQsBVE0tIOC5CS/DtiYOHdNgP61mVkdno0IMKYJka4TbMgbFrT0N5L4WCCaB
jeVjzbc+IqTtz9L1eJ8MHzHYTdEULOha8xzs/q5SY3zIPwIkNZp7TDgS7qRoy/jw
IAdZBtlyg81MpaHlu6RGB6lDXJa7L0gV/vBWjEH94uAOngtPuGgMKNeFtUiUvAqI
5zRnZYDXKU2GmWkviPXXB/7rWXKdEpoDJM0ZIkNJ/fO/0aT6rQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFIivkXL05U60xKelFpbeezpjXERyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MDYz
Y2Q2My0xNWQ3LTRhNDAtODAxYS0zZjg1ZWY3ZDA5ZDEvYTE5OGRkNzMtMzJmYS0z
YmM1LTk3YmMtZjFiZDY5NzI1Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTA2M2NkNjMtMTVkNy00YTQwLTgw
MWEtM2Y4NWVmN2QwOWQxLzUwNjNjZDYzLTE1ZDctNGE0MC04MDFhLTNmODVlZjdk
MDlkMS5jcmwwHwYDVR0jBBgwFoAUv5Qq8767hhUrRTd8hnQPvVC8118wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MDYzY2Q2My0xNWQ3LTRhNDAtODAxYS0zZjg1
ZWY3ZDA5ZDEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC0F2IMA0E
AgACMAcDBQAmBCBgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBADnKSGZ66rqf3pnKyyGiiqs3dfbDYsg/iGwB
bR/tOzLttElgT/R3pONfjRlBUws8du9DiiBtPiiiP8SKDoCTIujN+nd9OuGsI8WY
KuDXT51Z9CfiayAIZA3TtTbFwZjY4ZgT2Ln2voCwLvoHhFejCqYMbQqr7xE98uPM
e2oaZlfJOe8hguG1bBU90yvhgdO4fuNmTjtVbyiwTq4+KTM/+f01XXNsBEo8v5xt
BgEnL0ZBW+4LTODDW2Q5BjWxoHzaOQR2tRI4YmR9QN8NFgS3IaL1HmPPezpgpnPh
8kg0Jp5wQHdkekrRqstLk0qCCSq1vtMFY3qACqi9LyDopcH3xJs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:36 2026 by rpki-client