
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa
File: 521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa (raw, json)
Hash identifier: U2fwfVSBYn0CoWzMzEFQ9sDk/S32E3t0T6LP1BTErVI=
Subject key identifier: DF:66:0B:7C:0B:D3:FA:80:75:C3:5D:B0:6D:5F:38:0F:5F:2A:21:09
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584E000616B8131BCE9D200A7E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 108.170.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:16:b8:13:1b:ce:9d:20:0a:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=4ea94918-77d4-47f7-b108-4a94909cb72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:23:57:81:f5:5e:fb:5b:a7:be:69:13:99:
35:57:93:d2:77:08:e7:c6:53:d7:f2:bd:20:8a:69:
f0:6c:d6:f9:68:21:85:3a:63:85:79:6d:45:e8:c0:
6d:96:3b:85:5a:b2:8b:fb:cd:f2:5d:e7:6d:3a:99:
6a:33:fb:2e:6e:25:95:39:7a:20:1b:c4:cf:92:c8:
3b:5e:c2:14:29:f1:21:47:43:22:37:df:1d:e3:9b:
a7:ab:f1:fc:eb:86:b1:3d:52:52:a9:b0:31:b4:cb:
eb:80:4f:26:b3:c3:eb:49:30:03:bf:d0:a6:12:eb:
a4:6c:1f:56:e1:9d:d5:4f:3c:fe:63:6c:35:81:e5:
cd:3c:f5:94:79:5b:5f:42:3e:fb:09:4e:f7:aa:98:
87:e4:11:b7:3c:58:0b:14:df:8a:4f:f6:3d:cd:1b:
45:e3:a2:e2:48:a6:a7:20:bc:9f:04:48:d2:50:6e:
62:fd:e5:bb:91:6a:dd:39:7c:57:e4:21:01:76:2a:
3f:6c:4c:d2:93:2c:d2:75:a7:11:6c:02:8d:9f:7d:
2b:5e:b1:9d:68:4e:b5:27:ab:a0:95:27:7e:2c:e4:
61:35:b9:67:27:5c:45:81:c8:b4:20:dd:5a:50:ef:
5b:01:1e:44:19:62:c2:4a:13:a6:db:28:d1:63:82:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:66:0B:7C:0B:D3:FA:80:75:C3:5D:B0:6D:5F:38:0F:5F:2A:21:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:9c:d4:73:e1:e7:26:a9:e5:b8:ab:19:32:28:85:08:87:e4:
79:e2:32:47:2f:bb:64:b9:4c:7a:08:73:38:d9:aa:fd:8c:39:
86:36:66:fe:58:af:94:80:3d:66:b1:d4:b6:0e:69:3e:45:8a:
9c:9f:f5:da:47:fc:27:d9:09:ef:7d:eb:fe:a9:3e:f6:bc:23:
f5:d7:f4:bb:81:03:59:c4:14:e1:02:9b:7c:f3:48:6a:24:8f:
c8:ab:7c:91:dc:cb:ea:eb:f4:25:c8:41:3a:c5:78:88:24:43:
f1:50:90:25:e7:9d:7e:3b:e9:e3:f3:aa:ab:21:47:b7:1e:a4:
f9:1d:5d:59:23:65:20:e5:a0:2a:a2:a3:be:5b:20:55:5f:3b:
ba:61:0d:b9:e9:d4:c8:0d:d6:d6:94:c4:3b:41:36:be:ce:d9:
11:74:ca:04:f9:a6:cb:7d:f1:b3:a6:5a:98:32:b2:97:7c:2c:
f0:ff:1c:25:14:f1:1c:7e:2c:84:b4:82:18:06:c9:fd:87:96:
10:19:b3:8c:2b:f1:c8:a1:96:78:d4:d5:6b:dc:05:a6:b2:f1:
0f:7a:ff:42:bf:11:5a:9b:fb:d7:10:3b:2a:a2:90:2b:b0:3a:
e6:01:49:62:c7:17:fa:ff:94:1f:8a:a9:b5:a3:cc:ac:b9:68:
1d:60:2b:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABha4ExvOnSAKfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
NGVhOTQ5MTgtNzdkNC00N2Y3LWIxMDgtNGE5NDkwOWNiNzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD8jV4H1Xvtbp75pE5k1V5PSdwjnxlPX8r0g
imnwbNb5aCGFOmOFeW1F6MBtljuFWrKL+83yXedtOplqM/subiWVOXogG8TPksg7
XsIUKfEhR0MiN98d45unq/H864axPVJSqbAxtMvrgE8ms8PrSTADv9CmEuukbB9W
4Z3VTzz+Y2w1geXNPPWUeVtfQj77CU73qpiH5BG3PFgLFN+KT/Y9zRtF46LiSKan
ILyfBEjSUG5i/eW7kWrdOXxX5CEBdio/bEzSkyzSdacRbAKNn30rXrGdaE61J6ug
lSd+LORhNblnJ1xFgci0IN1aUO9bAR5EGWLCShOm2yjRY4LCwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9mC3wL0/qAdcNdsG1fOA9fKiEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTIxYTNlOTctMWE1Yy0z
ZmM0LTk5M2ItNTUyMWZmMTJkOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHac1HPh5yap5birGTIohQiH5HniMkcvu2S5THoIczjZqv2MOYY2Zv5Y
r5SAPWax1LYOaT5Fipyf9dpH/CfZCe996/6pPva8I/XX9LuBA1nEFOECm3zzSGok
j8irfJHcy+rr9CXIQTrFeIgkQ/FQkCXnnX476ePzqqshR7cepPkdXVkjZSDloCqi
o75bIFVfO7phDbnp1MgN1taUxDtBNr7O2RF0ygT5pst98bOmWpgyspd8LPD/HCUU
8Rx+LIS0ghgGyf2HlhAZs4wr8cihlnjU1WvcBaay8Q96/0K/EVqb+9cQOyqikCuw
OuYBSWLHF/r/lB+KqbWjzKy5aB1gK9U=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:31 2026 by rpki-client