
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/0ac89b16-c79e-354d-bf18-eba19931804a.roa
File: 0ac89b16-c79e-354d-bf18-eba19931804a.roa (raw, json)
Hash identifier: bjNGIrfG2EI7gUdhbPsifz6GQmNwK8BatQfjFIEhEVw=
Subject key identifier: BC:E4:3B:13:75:F9:E6:85:23:F1:C6:A1:B8:E6:2C:8D:B3:B3:6D:8B
Certificate issuer: /CN=61a98034-fe16-431f-9842-402073e93fa8
Certificate serial: 010D0C9F4328584CBDB1E80F76BCA17346E52440
Authority key identifier: 2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/0ac89b16-c79e-354d-bf18-eba19931804a.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 62628
IP address blocks: 208.99.52.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b1:e8:0f:76:bc:a1:73:46:e5:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a98034-fe16-431f-9842-402073e93fa8
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=47fc672c-e10a-4817-864b-18f1f9ac4c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:36:d5:55:53:a5:de:ee:ce:ee:ff:3e:e0:
c3:48:f0:70:83:40:f7:8d:9c:75:d8:14:c3:27:26:
ea:ed:49:fd:e3:ec:78:5b:4e:60:02:68:d2:7e:cf:
61:51:b0:aa:b6:ee:91:ec:a3:3a:a9:c5:28:ad:26:
a6:82:d1:ac:ed:2c:9a:54:6c:d7:c5:3a:9b:77:ca:
d7:f0:67:af:e7:77:af:35:be:e1:53:49:8d:1a:1b:
d3:22:7a:80:c3:39:2d:e3:8b:3e:47:f0:b7:d4:64:
18:26:ec:86:f8:e7:5f:76:20:26:a5:44:06:e6:09:
e3:13:71:db:f1:59:3d:66:71:3d:29:b9:9c:77:54:
81:46:91:d0:48:43:7d:52:c8:3c:eb:bc:06:c5:b4:
ca:23:90:09:b5:4c:1b:5c:12:0e:30:93:c7:46:ab:
44:8c:bd:49:72:ba:ea:f1:23:d8:69:d1:fa:de:c8:
7b:bd:6f:1d:24:b4:5d:9e:93:ec:c9:99:70:a7:28:
45:08:79:9b:71:7d:4a:40:c4:e1:ad:bf:bd:c3:a7:
59:64:51:79:f0:54:aa:3f:b7:35:fb:22:07:55:f2:
bd:21:89:16:50:7f:ca:05:3b:c8:26:d4:d9:8c:7d:
71:35:10:9d:32:03:1d:ca:43:f4:d3:c4:ea:3b:c5:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:3B:13:75:F9:E6:85:23:F1:C6:A1:B8:E6:2C:8D:B3:B3:6D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/0ac89b16-c79e-354d-bf18-eba19931804a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl
X509v3 Authority Key Identifier:
keyid:2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:5f:40:50:6a:36:a6:da:fb:8a:41:84:a4:b8:5c:20:34:31:
01:f7:3f:ae:6d:81:1c:eb:76:9c:9b:41:aa:b2:7b:fe:56:7c:
19:14:17:c2:54:94:80:a5:f4:a8:ed:bf:6a:1f:9c:39:4e:47:
cf:d1:6a:7b:27:76:9b:22:d2:89:a8:81:56:95:bc:30:b3:a1:
77:b5:ce:35:35:10:df:77:07:30:b9:78:c3:36:82:d3:2c:7f:
b6:a5:5e:29:72:50:bd:c5:45:78:10:6e:73:d5:65:bf:0b:ce:
ab:25:62:00:86:c9:c3:c9:e6:7f:82:4f:63:6c:1c:a4:73:60:
33:14:d8:b3:d7:d2:f6:cc:36:1f:26:94:4c:ac:df:12:63:37:
5d:46:da:85:e8:6d:15:ee:87:fe:e3:b6:c0:d5:dd:5d:03:84:
d2:e9:b3:18:77:a4:23:7d:95:4d:dc:ab:23:7c:fd:d6:90:dc:
dd:d2:44:86:d5:b9:9b:e4:89:5d:e6:99:73:2a:ce:66:05:29:
2c:1c:21:e8:12:0e:0e:e7:76:38:7e:39:4c:eb:ae:cc:34:94:
33:a2:cb:d4:17:8c:96:f1:17:26:3f:e4:05:6a:d1:19:16:8c:
87:f7:dc:51:5d:7a:5a:4c:fd:0d:03:05:56:dc:4b:c7:5c:7e:
55:c1:8c:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9segPdryhc0blJEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFhOTgwMzQtZmUxNi00MzFmLTk4NDItNDAyMDczZTkz
ZmE4MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NDdmYzY3MmMtZTEwYS00ODE3LTg2NGItMThmMWY5YWM0YzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wM21VVTpd7uzu7/PuDDSPBwg0D3jZx12BTD
Jybq7Un94+x4W05gAmjSfs9hUbCqtu6R7KM6qcUorSamgtGs7SyaVGzXxTqbd8rX
8Gev53evNb7hU0mNGhvTInqAwzkt44s+R/C31GQYJuyG+OdfdiAmpUQG5gnjE3Hb
8Vk9ZnE9Kbmcd1SBRpHQSEN9Usg867wGxbTKI5AJtUwbXBIOMJPHRqtEjL1Jcrrq
8SPYadH63sh7vW8dJLRdnpPsyZlwpyhFCHmbcX1KQMThrb+9w6dZZFF58FSqP7c1
+yIHVfK9IYkWUH/KBTvIJtTZjH1xNRCdMgMdykP008TqO8VXJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzkOxN1+eaFI/HGobjmLI2zs22LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWE5
ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIwNzNlOTNmYTgvMGFjODliMTYtYzc5ZS0z
NTRkLWJmMTgtZWJhMTk5MzE4MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFhOTgwMzQtZmUxNi00MzFmLTk4
NDItNDAyMDczZTkzZmE4LzYxYTk4MDM0LWZlMTYtNDMxZi05ODQyLTQwMjA3M2U5
M2ZhOC5jcmwwHwYDVR0jBBgwFoAULfrMAj5Bkhwa8cX2iS8v+ntlWoYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MWE5ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIw
NzNlOTNmYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERfQFBqNqba+4pBhKS4XCA0MQH3P65tgRzrdpybQaqye/5WfBkUF8JU
lICl9Kjtv2ofnDlOR8/Ransndpsi0omogVaVvDCzoXe1zjU1EN93BzC5eMM2gtMs
f7alXilyUL3FRXgQbnPVZb8LzqslYgCGycPJ5n+CT2NsHKRzYDMU2LPX0vbMNh8m
lEys3xJjN11G2oXobRXuh/7jtsDV3V0DhNLpsxh3pCN9lU3cqyN8/daQ3N3SRIbV
uZvkiV3mmXMqzmYFKSwcIegSDg7ndjh+OUzrrsw0lDOiy9QXjJbxFyY/5AVq0RkW
jIf33FFdelpM/Q0DBVbcS8dcflXBjMA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:19 2026 by rpki-client