
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3c058aa-7069-3d02-a003-99090939f219.roa
File: a3c058aa-7069-3d02-a003-99090939f219.roa (raw, json)
Hash identifier: sDwE9LAFZScERVgQCmmwMjCMteve+ON6ANAwNjgZ9xE=
Subject key identifier: 70:50:23:3D:C0:11:4D:82:86:19:B1:D7:F3:3F:0C:D6:B1:AD:F3:94
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584E210FDAFE81A80FCAA4CAE160
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3c058aa-7069-3d02-a003-99090939f219.roa
Signing time: Wed 10 Jun 2026 21:00:11 +0000
ROA not before: Wed 10 Jun 2026 21:00:11 +0000
ROA not after: Tue 08 Sep 2026 21:00:11 +0000
asID: 15169
IP address blocks: 172.253.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:21:0f:da:fe:81:a8:0f:ca:a4:ca:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jun 10 21:00:11 2026 GMT
Not After : Sep 8 21:00:11 2026 GMT
Subject: CN=6e82d995-891f-4a0b-bf1f-79df67bb1080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:50:e2:76:76:f0:79:67:8c:e6:dd:ec:66:
db:40:15:1b:73:1a:38:33:1e:98:ac:a0:1c:6c:42:
c3:a7:fa:cf:40:85:f8:54:fb:55:ac:4a:6c:58:28:
7c:26:80:98:28:c6:c2:49:73:bb:69:4c:6b:24:96:
c2:62:d3:5e:71:71:ff:5b:e6:8a:19:9f:1b:9b:bc:
0b:62:e8:2e:c8:dd:6b:70:f8:15:83:44:15:27:23:
bd:27:ca:5d:d1:2a:24:b5:04:ab:6d:65:e2:57:78:
2f:49:80:46:d3:9b:0d:9c:96:53:9c:9a:21:a8:dd:
c3:be:9b:eb:2d:09:cc:64:75:8c:0a:bb:49:37:fc:
5c:5c:d0:51:4e:68:56:7e:b9:b8:1f:f8:fc:dd:90:
e9:ae:c4:15:10:8e:58:0b:d1:f0:5a:f6:89:08:cb:
77:25:12:2b:af:b1:96:c5:26:a5:4d:6e:52:6a:17:
d3:91:12:66:b3:b5:03:ef:3c:2c:9b:53:95:30:6a:
44:71:62:90:71:ee:22:8c:ce:52:ea:5f:c2:be:71:
fe:c2:5a:8f:80:80:9e:3f:06:cf:28:56:cc:6c:fb:
b3:cc:15:3d:a2:4f:7c:2e:3c:ca:ec:fb:7b:a3:84:
40:ac:c5:fe:9e:de:aa:eb:05:26:76:aa:e3:9a:7c:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:23:3D:C0:11:4D:82:86:19:B1:D7:F3:3F:0C:D6:B1:AD:F3:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3c058aa-7069-3d02-a003-99090939f219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:21:89:d2:50:33:26:2a:c3:ee:43:2d:6a:26:ff:d5:a5:71:
00:60:df:02:ce:25:e6:08:e8:41:db:94:2a:96:f4:cb:59:84:
e0:61:33:2f:a9:25:c3:db:b3:36:d7:d5:e3:61:ad:08:47:c8:
dd:33:ff:5f:76:e9:79:6d:cf:af:5d:af:c5:07:f4:a4:67:b2:
2b:2d:34:e1:53:c5:b4:93:16:a6:e5:3f:7a:9b:b5:30:12:f9:
6b:ce:ce:6a:d7:28:a4:4e:98:4b:6d:7f:90:0d:c3:4a:fa:06:
da:b1:0a:d2:51:80:3a:be:b5:bb:cc:30:d5:57:9f:c9:21:ad:
b6:69:fe:93:ba:34:b4:c4:80:03:34:06:1a:03:78:3d:c2:b5:
07:4e:5b:c8:8c:69:97:4d:b5:8f:13:d8:84:c0:55:d1:fa:f1:
02:aa:13:2f:f8:c4:23:c1:94:9d:91:04:dc:54:30:2b:ea:0e:
23:4f:6b:a3:84:a8:90:4e:17:a4:30:ed:f6:a2:27:49:be:30:
fd:d4:47:60:0f:b6:40:05:64:41:ed:cd:83:e7:d2:07:d0:b5:
29:b7:67:b7:94:ab:d2:7e:fc:c9:a0:7f:21:bf:54:a0:61:d4:
c5:fd:32:e8:73:6c:53:2e:2c:35:c9:c9:0a:a3:0c:97:f4:e6:
54:cd:13:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD9r+gagPyqTK4WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
NmU4MmQ5OTUtODkxZi00YTBiLWJmMWYtNzlkZjY3YmIxMDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h1Q4nZ28HlnjObd7GbbQBUbcxo4Mx6YrKAc
bELDp/rPQIX4VPtVrEpsWCh8JoCYKMbCSXO7aUxrJJbCYtNecXH/W+aKGZ8bm7wL
YuguyN1rcPgVg0QVJyO9J8pd0SoktQSrbWXiV3gvSYBG05sNnJZTnJohqN3Dvpvr
LQnMZHWMCrtJN/xcXNBRTmhWfrm4H/j83ZDprsQVEI5YC9HwWvaJCMt3JRIrr7GW
xSalTW5SahfTkRJms7UD7zwsm1OVMGpEcWKQce4ijM5S6l/CvnH+wlqPgICePwbP
KFbMbPuzzBU9ok98LjzK7Pt7o4RArMX+nt6q6wUmdqrjmnxd+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBQIz3AEU2Chhmx1/M/DNaxrfOUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTNjMDU4YWEtNzA2OS0z
ZDAyLWEwMDMtOTkwOTA5MzlmMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAhidJQMyYqw+5DLWom/9WlcQBg3wLOJeYI6EHblCqW9MtZhOBhMy+p
JcPbszbX1eNhrQhHyN0z/1926Xltz69dr8UH9KRnsistNOFTxbSTFqblP3qbtTAS
+WvOzmrXKKROmEttf5ANw0r6BtqxCtJRgDq+tbvMMNVXn8khrbZp/pO6NLTEgAM0
BhoDeD3CtQdOW8iMaZdNtY8T2ITAVdH68QKqEy/4xCPBlJ2RBNxUMCvqDiNPa6OE
qJBOF6Qw7faiJ0m+MP3UR2APtkAFZEHtzYPn0gfQtSm3Z7eUq9J+/MmgfyG/VKBh
1MX9MuhzbFMuLDXJyQqjDJf05lTNE3M=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:13 2026 by rpki-client