
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa
File: 4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa (raw, json)
Hash identifier: kWbAGcxtRu8LIqrI0qB1ov/TTnBPBP0nD2IQr3GK9W0=
Subject key identifier: 83:85:73:89:C1:21:0F:92:CA:38:20:22:42:95:F3:1A:EB:6C:43:C9
Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial: 010D0C9F4328584E709F78531B2337545676BB40
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa
Signing time: Thu 09 Jul 2026 09:00:13 +0000
ROA not before: Thu 09 Jul 2026 09:00:13 +0000
ROA not after: Wed 07 Oct 2026 09:00:13 +0000
asID: 15296
IP address blocks: 199.216.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:70:9f:78:53:1b:23:37:54:56:76:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Validity
Not Before: Jul 9 09:00:13 2026 GMT
Not After : Oct 7 09:00:13 2026 GMT
Subject: CN=85790589-18f2-4a0f-97aa-ef7904d11194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:ff:49:6a:67:2d:9a:25:ad:ba:b8:9b:e4:
0a:68:2e:ba:b8:a6:4e:a8:ee:31:12:27:7f:84:dc:
18:66:ec:11:f1:96:fe:a7:79:72:51:f9:83:e8:46:
1f:7e:d3:91:1a:6c:d8:04:ac:a4:da:4d:e4:76:05:
6a:f7:47:75:49:c0:fc:f2:e9:02:d7:00:57:ed:fd:
b2:3a:9f:98:00:6c:82:1a:61:a8:55:5c:0b:85:f8:
0b:0c:0a:6d:1f:42:16:f5:65:a2:97:bd:1c:78:a6:
6b:4a:3d:4d:df:c1:f8:9d:9f:50:81:0a:f8:06:8e:
55:00:3d:4c:55:72:67:4d:05:1c:ef:7a:b2:b4:eb:
dc:74:5c:99:23:80:ba:3f:be:1b:46:15:a3:d8:f1:
a5:11:18:3e:32:67:1f:99:cb:93:e7:57:79:57:5f:
fe:da:fa:7d:e5:0d:79:d1:26:ee:6a:50:33:2d:d6:
5e:b0:96:95:4c:14:ef:ce:45:f2:5f:93:6d:4a:f4:
ac:3c:d8:66:f8:c5:63:38:10:60:2a:7c:46:17:b2:
5e:de:48:fa:57:74:65:ca:ca:16:67:d6:89:fd:f9:
89:8f:a1:c7:f6:78:14:3f:13:29:cb:94:12:b8:40:
50:59:cd:44:4c:75:5d:2b:34:ce:43:70:3b:ee:97:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:73:89:C1:21:0F:92:CA:38:20:22:42:95:F3:1A:EB:6C:43:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
X509v3 Authority Key Identifier:
keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
sbgp-ipAddrBlock: critical
IPv4:
199.216.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:80:4e:9e:9b:30:17:bd:ac:0d:b2:5f:00:63:84:36:84:ce:
b7:a2:df:20:16:a0:f1:75:2d:56:21:88:c6:a3:f9:c6:27:62:
1a:f9:a5:98:ce:07:ff:27:81:86:e2:2b:fb:d7:8e:b7:9c:37:
73:51:b6:2c:af:b1:3d:63:bf:dd:39:3c:1f:13:99:f4:fb:a9:
4d:ad:dd:75:cb:6a:b8:ab:6c:a5:59:60:c0:05:a4:2a:7e:b4:
04:ad:3c:7d:96:6b:00:49:a6:f3:27:cb:5a:25:82:c5:15:cb:
46:e5:19:bc:27:7c:68:bc:44:8d:79:99:2c:88:8e:aa:6a:91:
11:43:e6:73:b2:a3:82:56:a0:06:36:b7:fe:e3:20:01:bf:f5:
95:80:65:f2:2b:19:0a:79:43:11:1a:53:40:d9:74:9e:0c:ae:
9c:55:d9:49:f6:fc:47:b7:e8:8e:52:de:0c:79:6c:35:32:61:
35:6a:76:ce:90:cf:b1:eb:2f:90:b0:55:02:cc:5e:3d:b4:80:
a8:43:60:c5:32:f3:08:bf:fe:c3:a0:2e:99:a1:1b:16:39:f2:
ea:94:e5:dd:76:5d:13:39:3a:a2:c8:dd:86:7e:36:a1:3c:12:
d3:33:a6:d2:b3:79:6f:6f:c3:d5:1a:3b:28:10:c3:3d:62:d2:
dd:d1:27:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3hTGyM3VFZ2u0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk
ODU3OTA1ODktMThmMi00YTBmLTk3YWEtZWY3OTA0ZDExMTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7//SWpnLZolrbq4m+QKaC66uKZOqO4xEid/
hNwYZuwR8Zb+p3lyUfmD6EYfftORGmzYBKyk2k3kdgVq90d1ScD88ukC1wBX7f2y
Op+YAGyCGmGoVVwLhfgLDAptH0IW9WWil70ceKZrSj1N38H4nZ9QgQr4Bo5VAD1M
VXJnTQUc73qytOvcdFyZI4C6P74bRhWj2PGlERg+MmcfmcuT51d5V1/+2vp95Q15
0SbualAzLdZesJaVTBTvzkXyX5NtSvSsPNhm+MVjOBBgKnxGF7Je3kj6V3RlysoW
Z9aJ/fmJj6HH9ngUPxMpy5QSuEBQWc1ETHVdKzTOQ3A77pey4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOFc4nBIQ+SyjggIkKV8xrrbEPJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvNGQ4N2IyYTYtMTE3NC0z
YTY0LWE4ODctZTlhYThiNDgxNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9ijMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyATp6bMBe9rA2yXwBjhDaEzrei3yAWoPF1LVYhiMaj+cYnYhr5pZjO
B/8ngYbiK/vXjrecN3NRtiyvsT1jv905PB8TmfT7qU2t3XXLarirbKVZYMAFpCp+
tAStPH2WawBJpvMny1olgsUVy0blGbwnfGi8RI15mSyIjqpqkRFD5nOyo4JWoAY2
t/7jIAG/9ZWAZfIrGQp5QxEaU0DZdJ4MrpxV2Un2/Ee36I5S3gx5bDUyYTVqds6Q
z7HrL5CwVQLMXj20gKhDYMUy8wi//sOgLpmhGxY58uqU5d12XRM5OqLI3YZ+NqE8
EtMzptKzeW9vw9UaOygQwz1i0t3RJy4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:56:48 2026 by rpki-client