
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c8719043-fe53-3e80-9603-d8416e80abe1.roa
File: c8719043-fe53-3e80-9603-d8416e80abe1.roa (raw, json)
Hash identifier: 2AFF5TO184tKeHtQ7jbso+xqwscxv6C09/XaR2qweVM=
Subject key identifier: 1C:A6:0E:F3:64:0A:FF:2A:7A:47:47:AA:4F:1C:F2:9F:EA:57:22:40
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584D60E4F324F19FAE99925FCFEC
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c8719043-fe53-3e80-9603-d8416e80abe1.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 21866
IP address blocks: 216.219.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e4:f3:24:f1:9f:ae:99:92:5f:cf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=a01b3f58-ed65-4195-9b9e-61b203f8d74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:ed:2c:4f:54:00:07:60:fc:df:b6:ff:14:
e9:cf:fa:0b:89:d3:42:3a:61:70:21:77:8a:dd:5b:
57:86:df:ef:55:82:bf:e9:e7:02:5c:12:7a:89:7b:
d7:64:dd:07:4c:1e:36:67:76:bc:0f:ce:50:2e:71:
97:7e:58:78:9e:9f:64:1d:a1:02:7e:67:63:47:fc:
1e:b2:7f:cf:42:93:6c:32:fa:3a:ad:56:80:96:9e:
60:b1:9a:61:83:0e:02:ca:1b:80:68:b7:0d:54:9e:
dc:ff:0a:41:a5:7d:23:d8:9f:91:ee:93:90:a0:cb:
b9:68:83:59:e5:37:e3:ac:2c:6e:a0:c4:97:c8:cb:
e9:2c:d3:9d:71:dc:5e:c4:a0:25:b3:da:38:83:b5:
75:8b:68:40:1e:f4:cd:e2:2d:8c:42:ed:e8:6b:f4:
c8:b4:79:71:86:91:35:31:09:93:86:2a:86:f4:63:
9e:a6:b1:1a:25:07:5e:b7:fc:3c:fb:a3:63:6a:5d:
9c:64:16:7e:aa:91:ff:e3:fd:ff:53:3f:9a:e1:18:
df:e6:ca:2d:33:68:6d:93:c3:c3:71:8a:48:d7:3f:
67:99:59:bd:71:ef:a6:80:4b:84:a0:f1:6e:5a:ce:
a3:34:26:ff:92:1f:c9:5c:c1:d3:76:d9:e5:6b:0f:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:0E:F3:64:0A:FF:2A:7A:47:47:AA:4F:1C:F2:9F:EA:57:22:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c8719043-fe53-3e80-9603-d8416e80abe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.219.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a7:08:d9:ea:8a:86:09:4a:be:0a:04:c9:37:c6:7f:d5:10:
59:ee:36:57:42:d4:67:a3:57:97:08:10:e9:0e:03:b2:be:22:
32:62:c5:ea:e6:33:5f:3b:3d:5e:d0:1c:b2:b5:53:6d:60:a8:
e1:fc:4f:fd:bb:72:76:97:da:49:4b:c0:c2:26:a8:e1:31:d2:
d1:5b:b3:7a:e6:83:88:52:7f:8b:01:94:b3:78:44:d7:13:82:
78:05:7d:45:7a:e6:57:7c:27:43:79:3a:80:da:56:77:ce:8e:
2a:ea:db:e5:59:c1:4e:76:9a:0e:88:fa:11:44:77:21:10:95:
53:0a:81:e6:be:0e:04:1a:6d:a2:98:99:05:80:3c:15:74:7a:
9b:10:7d:81:3b:41:d4:d5:c0:db:a5:66:59:07:23:49:90:cf:
72:ef:4d:17:83:ac:ad:92:26:79:82:00:25:0e:7f:70:38:b4:
44:3a:3c:33:bb:dd:04:bf:e8:93:33:5c:fc:95:5c:60:9a:9b:
57:16:00:fc:97:de:47:dc:5a:82:a9:f1:eb:92:1f:fc:ad:64:
d6:5a:77:b5:ef:fa:b2:0a:e7:ea:4f:b7:b6:1f:c8:93:2d:bc:
24:d5:bd:1c:7a:28:0f:f8:07:58:04:bd:7e:0b:4b:a5:13:15:
4a:48:ff:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PMk8Z+umZJfz+wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
YTAxYjNmNTgtZWQ2NS00MTk1LTliOWUtNjFiMjAzZjhkNzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuevtLE9UAAdg/N+2/xTpz/oLidNCOmFwIXeK
3VtXht/vVYK/6ecCXBJ6iXvXZN0HTB42Z3a8D85QLnGXflh4np9kHaECfmdjR/we
sn/PQpNsMvo6rVaAlp5gsZphgw4CyhuAaLcNVJ7c/wpBpX0j2J+R7pOQoMu5aINZ
5TfjrCxuoMSXyMvpLNOdcdxexKAls9o4g7V1i2hAHvTN4i2MQu3oa/TItHlxhpE1
MQmThiqG9GOeprEaJQdet/w8+6Njal2cZBZ+qpH/4/3/Uz+a4Rjf5sotM2htk8PD
cYpI1z9nmVm9ce+mgEuEoPFuWs6jNCb/kh/JXMHTdtnlaw9gzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBymDvNkCv8qekdHqk8c8p/qVyJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYzg3MTkwNDMtZmU1My0z
ZTgwLTk2MDMtZDg0MTZlODBhYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nt9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFanCNnqioYJSr4KBMk3xn/VEFnuNldC1GejV5cIEOkOA7K+IjJixerm
M187PV7QHLK1U21gqOH8T/27cnaX2klLwMImqOEx0tFbs3rmg4hSf4sBlLN4RNcT
gngFfUV65ld8J0N5OoDaVnfOjirq2+VZwU52mg6I+hFEdyEQlVMKgea+DgQabaKY
mQWAPBV0epsQfYE7QdTVwNulZlkHI0mQz3LvTReDrK2SJnmCACUOf3A4tEQ6PDO7
3QS/6JMzXPyVXGCam1cWAPyX3kfcWoKp8euSH/ytZNZad7Xv+rIK5+pPt7YfyJMt
vCTVvRx6KA/4B1gEvX4LS6UTFUpI/wY=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:57 2026 by rpki-client