
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
File: b2efcee3-c214-3e02-92aa-9064905257d6.roa (raw, json)
Hash identifier: wcBlLmA/+b+EaexJbZ3H7Afpghs2a7SMXDK+WQaBI9E=
Subject key identifier: 9E:F2:F9:A3:73:F6:38:67:A2:11:01:22:AF:FA:5A:6A:38:BB:F1:72
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F4328584E4AEF2FDF026EC97EB8CEA080
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 8888
IP address blocks: 167.253.157.0/24 maxlen: 24
167.253.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:2f:df:02:6e:c9:7e:b8:ce:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=4e4cd847-2fd8-45bf-bdec-a00437cbdd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:31:2d:c7:14:aa:c6:6a:b9:a0:8c:58:53:
38:96:0c:b8:40:e9:4d:5c:13:60:22:26:46:9a:a6:
56:5a:b9:a5:02:b4:28:f3:ba:00:46:41:02:a8:33:
7a:67:50:67:74:dd:bf:7c:15:4c:f2:56:44:9b:c5:
21:be:b3:c9:7e:4b:e8:e5:a0:99:f5:0f:a3:80:1a:
25:de:39:b1:ec:60:c4:7b:b1:15:e9:fe:06:74:8f:
84:e9:cb:f6:6e:ac:0c:b8:35:d2:ac:9d:0d:1f:51:
d0:35:f8:9b:c1:b9:17:d9:04:6e:38:c9:ca:13:63:
0e:23:60:74:ed:d0:dc:24:4d:7f:b3:a6:0e:a1:e4:
d3:b2:8b:63:8b:09:2f:6e:9c:b8:65:81:fc:fd:e1:
d7:03:b5:74:b4:b6:a9:95:ca:ca:5e:6c:e6:25:20:
4b:55:d0:ba:5c:ef:ff:4e:bb:c3:d0:5a:88:d8:d4:
38:52:48:84:28:3a:2f:96:35:60:1d:be:73:c7:82:
eb:c0:42:4e:15:78:07:d3:8d:46:e9:1f:02:80:51:
ed:bf:bf:fb:a1:93:c2:e2:60:0e:ff:08:89:2d:5d:
3a:d1:b2:97:df:27:91:9e:f1:68:42:d8:4e:60:63:
8c:fd:75:b0:9e:e7:d7:19:39:42:a0:49:37:31:fc:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:F9:A3:73:F6:38:67:A2:11:01:22:AF:FA:5A:6A:38:BB:F1:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.157.0/24
167.253.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:db:b7:a0:26:0d:32:47:ac:0e:ca:6b:35:9d:a8:fc:22:c9:
93:bd:ab:3d:b2:78:19:c4:75:fa:7c:26:0c:79:a2:3e:4b:74:
3d:c6:e0:ff:ec:23:5d:39:40:2e:ee:0d:1a:a4:ea:e9:ed:e8:
ad:6c:bf:69:c2:24:22:d1:dc:42:5b:a1:c9:c2:82:77:e4:b0:
b4:18:58:bc:ab:10:78:00:69:e5:97:87:84:94:a7:1f:93:dd:
7f:a7:02:db:bc:b6:18:ba:f4:e4:54:7a:da:c4:9a:cc:85:1a:
fe:c4:02:81:cc:79:ac:3c:c4:bf:ab:bc:63:1b:9d:27:79:cd:
1f:6d:a0:7f:39:7f:f1:af:b5:26:89:e8:d3:66:49:1d:f3:b0:
e9:68:b3:14:a6:4f:ec:5e:9c:fc:40:3e:cf:ab:50:22:94:57:
6c:53:4a:f0:d3:90:0d:79:ba:c9:e7:5e:a8:46:70:a2:1a:ae:
b5:f7:4f:e2:e6:95:dd:09:68:52:6e:93:11:03:ee:7f:e4:d6:
db:99:d1:28:00:af:15:36:9b:cd:b1:0a:c4:47:79:02:26:8c:
74:12:2a:03:0c:8c:ae:d2:06:af:98:d5:f3:7b:49:71:b9:f8:
96:e9:41:f6:65:9b:69:1c:24:92:2b:b5:cf:d5:25:4a:88:30:
64:a5:2e:40
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5K7y/fAm7JfrjOoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj
ODVmMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
NGU0Y2Q4NDctMmZkOC00NWJmLWJkZWMtYTAwNDM3Y2JkZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdExLccUqsZquaCMWFM4lgy4QOlNXBNgIiZG
mqZWWrmlArQo87oARkECqDN6Z1BndN2/fBVM8lZEm8UhvrPJfkvo5aCZ9Q+jgBol
3jmx7GDEe7EV6f4GdI+E6cv2bqwMuDXSrJ0NH1HQNfibwbkX2QRuOMnKE2MOI2B0
7dDcJE1/s6YOoeTTsotjiwkvbpy4ZYH8/eHXA7V0tLaplcrKXmzmJSBLVdC6XO//
TrvD0FqI2NQ4UkiEKDovljVgHb5zx4LrwEJOFXgH041G6R8CgFHtv7/7oZPC4mAO
/wiJLV060bKX3yeRnvFoQthOYGOM/XWwnufXGTlCoEk3MfytUQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJ7y+aNz9jhnohEBIq/6Wmo4u/FyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5
ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYjJlZmNlZTMtYzIxNC0z
ZTAyLTkyYWEtOTA2NDkwNTI1N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0
MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz
Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi
NmQ5M2M4NWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp/2dAwQA
p/2fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAB7bt6AmDTJHrA7KazWdqPwiyZO9qz2yeBnEdfp8Jgx5oj5L
dD3G4P/sI105QC7uDRqk6unt6K1sv2nCJCLR3EJbocnCgnfksLQYWLyrEHgAaeWX
h4SUpx+T3X+nAtu8thi69ORUetrEmsyFGv7EAoHMeaw8xL+rvGMbnSd5zR9toH85
f/GvtSaJ6NNmSR3zsOlosxSmT+xenPxAPs+rUCKUV2xTSvDTkA15usnnXqhGcKIa
rrX3T+Lmld0JaFJukxED7n/k1tuZ0SgArxU2m82xCsRHeQImjHQSKgMMjK7SBq+Y
1fN7SXG5+JbpQfZlm2kcJJIrtc/VJUqIMGSlLkA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:13:35 2026 by rpki-client