
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/3a277667-159c-31ef-a703-8ebf49ddb255.roa
File: 3a277667-159c-31ef-a703-8ebf49ddb255.roa (raw, json)
Hash identifier: 6Bmd/gJSuV3lXd8YAEG4UkahWrxEOrCprgoFfdkVonk=
Subject key identifier: 2F:59:15:35:94:6E:87:FD:01:A3:41:EB:B4:C8:24:C2:CE:19:39:72
Certificate issuer: /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial: 010D0C9F4328584E6011AA27802E0E1FC70B7A00
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/3a277667-159c-31ef-a703-8ebf49ddb255.roa
Signing time: Fri 03 Jul 2026 10:41:42 +0000
ROA not before: Fri 03 Jul 2026 10:41:42 +0000
ROA not after: Thu 01 Oct 2026 10:41:42 +0000
asID: 11059
IP address blocks: 198.13.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:60:11:aa:27:80:2e:0e:1f:c7:0b:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
Validity
Not Before: Jul 3 10:41:42 2026 GMT
Not After : Oct 1 10:41:42 2026 GMT
Subject: CN=9e17bbc2-f04d-4013-b28a-befa66de687a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:43:87:80:5e:59:16:74:f0:96:42:1e:cb:
05:54:11:6a:5b:6e:67:d2:de:43:99:8f:f8:a6:32:
4a:03:c2:d5:6a:a7:58:6c:b8:fa:20:c7:e9:19:cd:
e8:3f:26:88:87:55:40:31:e0:63:fc:c8:fc:ee:40:
3a:c0:61:05:ff:89:97:a8:88:5c:36:42:f0:30:8c:
80:5d:a0:c9:d8:4c:f7:7b:a1:a1:07:cc:69:43:0a:
a5:8b:2e:b7:a3:24:b7:3b:8f:63:ef:c1:c0:20:cc:
1c:32:5d:bb:2c:16:30:ad:90:c0:f0:dd:09:3a:e7:
6c:81:80:ea:f8:e1:2d:93:9f:0b:1c:fd:88:6a:a7:
37:39:59:16:2f:ee:20:5d:c5:dd:69:7e:8c:4f:97:
4d:a4:51:e3:dd:66:29:aa:42:b3:b2:01:8f:3d:a2:
fe:4b:52:48:3e:22:ef:aa:fb:95:91:23:98:2b:d6:
c1:e1:62:c4:25:87:f5:5b:c8:01:4f:6e:e0:29:7a:
7a:da:1b:28:1e:1b:b8:15:e0:d3:d1:b6:01:9d:56:
02:c7:88:80:ca:0c:a4:0d:b7:f3:c3:3b:89:d9:de:
aa:cd:dd:63:fc:2b:17:14:c2:73:27:bc:18:f6:76:
b0:73:9a:6d:5c:62:2a:36:ff:ff:9f:05:72:38:c5:
4c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:59:15:35:94:6E:87:FD:01:A3:41:EB:B4:C8:24:C2:CE:19:39:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/3a277667-159c-31ef-a703-8ebf49ddb255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
X509v3 Authority Key Identifier:
keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c3:29:f1:99:66:8b:43:4a:3b:e5:e1:1d:fe:54:ce:15:1b:
54:e3:28:99:29:bf:d5:81:2e:a8:40:69:99:35:35:cd:56:05:
b1:28:9c:de:f2:c3:ed:35:0b:4f:fb:72:f2:fe:92:12:9f:03:
f3:19:ed:b7:ee:e5:fe:4e:55:2b:7e:05:a8:52:9b:1a:bd:a9:
31:29:69:e9:f3:2d:cf:1e:6b:5c:d4:dc:ce:e9:6a:31:87:43:
8d:5c:bf:8d:98:bb:65:9b:90:f5:69:be:cb:20:c8:36:bc:76:
2a:cc:4c:e0:af:36:cd:f9:9b:be:2a:0a:66:77:93:b6:d7:ba:
f2:6c:49:f0:22:2f:08:86:50:d7:0c:08:79:ba:02:49:f2:c4:
d2:12:6f:33:67:16:b1:02:9e:0a:39:c0:27:f1:ba:bc:7e:b0:
b5:33:36:9c:0c:55:67:21:01:3d:c7:07:58:f4:00:cb:81:5e:
87:46:a5:36:69:d8:ca:10:9e:63:7e:1a:3c:17:51:66:6e:29:
bb:6c:bc:79:00:d3:48:6d:a5:1f:32:37:d9:37:81:95:ae:7a:
65:95:0b:d2:13:fb:9f:90:c3:16:71:dd:bd:7a:84:da:cd:69:
3b:83:2f:72:3a:0b:4e:c3:e9:9b:d7:9c:16:45:17:4e:55:ed:
ca:9e:97:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5gEaongC4OH8cLegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2
MTUxMB4XDTI2MDcwMzEwNDE0MloXDTI2MTAwMTEwNDE0MlowLzEtMCsGA1UEAxMk
OWUxN2JiYzItZjA0ZC00MDEzLWIyOGEtYmVmYTY2ZGU2ODdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+5Dh4BeWRZ08JZCHssFVBFqW25n0t5DmY/4
pjJKA8LVaqdYbLj6IMfpGc3oPyaIh1VAMeBj/Mj87kA6wGEF/4mXqIhcNkLwMIyA
XaDJ2Ez3e6GhB8xpQwqliy63oyS3O49j78HAIMwcMl27LBYwrZDA8N0JOudsgYDq
+OEtk58LHP2Iaqc3OVkWL+4gXcXdaX6MT5dNpFHj3WYpqkKzsgGPPaL+S1JIPiLv
qvuVkSOYK9bB4WLEJYf1W8gBT27gKXp62hsoHhu4FeDT0bYBnVYCx4iAygykDbfz
wzuJ2d6qzd1j/CsXFMJzJ7wY9nawc5ptXGIqNv//nwVyOMVMyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9ZFTWUbof9AaNB67TIJMLOGTlyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk
NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvM2EyNzc2NjctMTU5Yy0z
MWVmLWE3MDMtOGViZjQ5ZGRiMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2
NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4
NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2
NDMwODYxNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg2cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3DKfGZZotDSjvl4R3+VM4VG1TjKJkpv9WBLqhAaZk1Nc1WBbEonN7y
w+01C0/7cvL+khKfA/MZ7bfu5f5OVSt+BahSmxq9qTEpaenzLc8ea1zU3M7pajGH
Q41cv42Yu2WbkPVpvssgyDa8dirMTOCvNs35m74qCmZ3k7bXuvJsSfAiLwiGUNcM
CHm6AknyxNISbzNnFrECngo5wCfxurx+sLUzNpwMVWchAT3HB1j0AMuBXodGpTZp
2MoQnmN+GjwXUWZuKbtsvHkA00htpR8yN9k3gZWuemWVC9IT+5+QwxZx3b16hNrN
aTuDL3I6C07D6ZvXnBZFF05V7cqel3k=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:46:14 2026 by rpki-client