
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
File: f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa (raw, json)
Hash identifier: S41gQVATxJq3y5Oy8D3S9Cjc9w3UULnIhQGK+r9d44I=
Subject key identifier: E4:4D:09:45:9B:02:F7:4E:72:FB:51:8F:86:55:5D:41:C5:C1:84:01
Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8
Certificate serial: 010D0C9F4328584CB121B54D9DF54A852FA79EB4
Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 36610
IP address blocks: 208.77.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:b5:4d:9d:f5:4a:85:2f:a7:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=a36649b4-ea2e-4813-8f8c-1fba04a602b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:f5:62:8a:d9:91:ee:1f:9b:89:ba:8d:8c:
97:7f:c3:24:7f:1e:bd:14:10:64:47:71:42:b0:1a:
ca:5d:6c:79:2d:ef:91:a6:9d:10:3c:61:dc:2c:5c:
1d:85:af:03:4c:bf:e7:3f:da:e5:ab:26:ff:92:79:
06:c6:3a:c9:0f:d6:b6:d9:45:77:f6:d8:99:37:81:
b9:2c:0f:39:49:b9:84:a9:a4:19:f5:79:99:ff:f6:
98:c5:0e:e4:45:95:03:19:b8:9f:44:1e:92:78:28:
32:b8:8d:e0:5e:ac:2e:0e:f9:d1:63:25:fb:39:c0:
3a:4d:45:01:b9:6f:13:62:a2:56:8b:e6:c1:ff:27:
9c:37:25:92:7a:35:09:72:2d:f1:85:2a:5c:b1:63:
70:b9:02:da:7a:e2:29:c4:9a:d1:cf:50:31:9b:e4:
f0:4f:21:24:78:fb:21:08:2e:ba:25:bb:ad:ce:66:
66:87:03:68:f5:4f:d4:9e:ff:7b:1b:86:05:31:e1:
13:27:b5:6b:0d:aa:7f:64:ba:29:f0:c4:47:b4:9c:
32:04:08:e4:fa:ae:d4:41:49:1c:3b:45:e1:f9:ae:
76:74:8b:49:bd:c0:34:28:64:9d:31:c3:8e:ef:ee:
54:ee:11:06:26:3a:5f:e3:6a:d4:72:b2:03:16:79:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4D:09:45:9B:02:F7:4E:72:FB:51:8F:86:55:5D:41:C5:C1:84:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
X509v3 Authority Key Identifier:
keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.77.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:79:1f:d4:1a:12:65:51:13:a5:a9:b9:15:28:44:ea:4c:02:
98:12:c3:cf:d3:24:c8:d9:55:71:82:5d:6b:85:5c:98:b1:98:
78:3a:b7:82:57:9d:f7:2a:f3:01:b5:4c:65:7c:64:f0:5f:1c:
57:ac:14:0a:15:4c:29:b9:16:dd:d9:a2:cb:2a:70:e5:32:db:
ac:63:75:d1:38:b0:e8:f1:81:f1:c9:f1:c0:7a:d3:be:cc:26:
c8:c1:03:2b:1b:81:9b:48:cf:65:17:7f:f8:5f:15:ac:e2:3d:
4e:a0:df:1c:de:30:6c:8c:ac:82:cb:2c:1c:2a:db:c6:bb:9f:
fc:6a:17:72:83:a8:d5:46:fb:82:ad:31:bd:34:c7:b5:34:f2:
81:a3:18:ed:c0:e9:b6:f4:13:09:dc:60:6f:57:67:8d:ea:de:
2d:5d:49:d2:f9:ce:41:84:a6:4f:55:11:d3:dd:f4:b6:ca:75:
68:e7:46:57:0d:70:29:ba:cd:76:0e:24:b6:f8:e4:f6:e9:be:
46:15:c2:6f:d5:4f:24:ca:10:2e:74:cb:eb:8d:33:5a:63:b5:
4c:16:d8:36:84:50:1a:5b:7b:99:17:fc:09:59:87:ca:df:ac:
2a:e7:10:50:c6:0a:1c:09:2c:bf:70:cb:86:42:7d:10:a4:fc:
72:05:d2:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIbVNnfVKhS+nnrQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgzMWM0NjEtZTE3NS00MjY1LWEwZWEtNTY1ZDhlNjE3
OWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YTM2NjQ5YjQtZWEyZS00ODEzLThmOGMtMWZiYTA0YTYwMmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+T1YorZke4fm4m6jYyXf8Mkfx69FBBkR3FC
sBrKXWx5Le+Rpp0QPGHcLFwdha8DTL/nP9rlqyb/knkGxjrJD9a22UV39tiZN4G5
LA85SbmEqaQZ9XmZ//aYxQ7kRZUDGbifRB6SeCgyuI3gXqwuDvnRYyX7OcA6TUUB
uW8TYqJWi+bB/yecNyWSejUJci3xhSpcsWNwuQLaeuIpxJrRz1Axm+TwTyEkePsh
CC66JbutzmZmhwNo9U/Unv97G4YFMeETJ7VrDap/ZLop8MRHtJwyBAjk+q7UQUkc
O0Xh+a52dItJvcA0KGSdMcOO7+5U7hEGJjpf42rUcrIDFnmGQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORNCUWbAvdOcvtRj4ZVXUHFwYQBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODMx
YzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2MTc5YjgvZjdkN2ZlYzAtNGNmMy0z
OTk1LWFhYTktOWM4ZGUxM2Q2ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgzMWM0NjEtZTE3NS00MjY1LWEw
ZWEtNTY1ZDhlNjE3OWI4LzI4MzFjNDYxLWUxNzUtNDI2NS1hMGVhLTU2NWQ4ZTYx
NzliOC5jcmwwHwYDVR0jBBgwFoAUPbTzeq2Sc3Qop+VNhCPz1J+fhe8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVk
OGU2MTc5YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0E14MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACF5H9QaEmVRE6WpuRUoROpMApgSw8/TJMjZVXGCXWuFXJixmHg6t4JX
nfcq8wG1TGV8ZPBfHFesFAoVTCm5Ft3ZossqcOUy26xjddE4sOjxgfHJ8cB6077M
JsjBAysbgZtIz2UXf/hfFaziPU6g3xzeMGyMrILLLBwq28a7n/xqF3KDqNVG+4Kt
Mb00x7U08oGjGO3A6bb0EwncYG9XZ43q3i1dSdL5zkGEpk9VEdPd9LbKdWjnRlcN
cCm6zXYOJLb45PbpvkYVwm/VTyTKEC50y+uNM1pjtUwW2DaEUBpbe5kX/AlZh8rf
rCrnEFDGChwJLL9wy4ZCfRCk/HIF0lA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:30 2026 by rpki-client