
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
File: 200ead2f-5307-3cd8-add7-21bfdad71d70.roa (raw, json)
Hash identifier: ZLUXO+s4MdESptyJsOY0QL+fyv3gl1ukPQnBeVhXDGE=
Subject key identifier: AC:23:C9:38:01:C3:EE:5E:9B:6B:1F:6A:03:5D:A1:58:90:DC:32:E9
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328584EF18204F5850D73496147E8F0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 5511
IP address blocks: 200.30.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:82:04:f5:85:0d:73:49:61:47:e8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=c04869b7-c0b4-476b-9f7a-abf4d57d2fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0c:3b:0e:f9:2c:8d:4b:dd:9c:94:e4:05:56:
9c:be:4f:5e:0a:3f:ba:38:1d:bf:64:de:1e:d1:57:
66:9b:48:d9:c0:ac:2c:f5:56:2b:5d:69:65:a5:87:
4b:59:f1:e5:e0:bc:1b:e5:5d:7d:50:24:9d:42:29:
a6:35:de:2a:d6:97:e5:6a:3e:fe:35:35:44:3f:fd:
96:5d:66:da:b1:71:30:93:1a:81:4d:e9:7a:d2:76:
ce:d6:0a:68:e8:7a:a8:fa:9f:17:90:71:0f:d2:aa:
be:f4:4b:d3:f4:8a:d9:32:4c:c7:5f:a0:d3:45:33:
ad:a3:d8:59:ad:90:7e:91:b2:79:e2:2c:e9:84:3e:
14:d7:67:6d:db:16:98:a7:2f:20:a5:db:2e:a0:8c:
80:cd:e6:88:2b:d1:dc:6c:29:89:ee:11:29:eb:03:
e7:d8:20:bd:24:39:89:ed:fb:dd:4d:99:0b:fc:bf:
ef:b8:2c:c5:87:4a:54:fb:d2:8a:ba:d1:ed:ec:bc:
c7:74:2a:6a:73:c1:d2:1e:5d:1b:37:be:fe:08:e4:
f8:38:36:0a:2e:f6:ef:c1:a6:da:3c:7d:f2:d0:6f:
33:0d:6e:c3:f0:b8:d4:03:4c:79:b5:79:db:90:eb:
b0:b6:63:3d:04:ab:0d:18:70:b7:31:51:8c:ad:aa:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:C9:38:01:C3:EE:5E:9B:6B:1F:6A:03:5D:A1:58:90:DC:32:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
200.30.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:56:91:90:5e:40:8b:6e:e6:b4:66:5b:9d:55:9d:16:26:45:
d6:af:df:da:4e:4a:60:fe:13:40:52:e8:5b:49:0a:84:f3:23:
0a:f1:ba:e4:38:ab:18:59:9f:a6:48:65:57:b0:d8:de:d0:cc:
c3:f2:8d:71:4d:ea:0b:dd:33:d1:6f:38:a6:77:7d:39:8d:36:
11:c5:bf:f2:14:b5:8a:25:e0:15:da:14:b1:0e:9b:b3:3b:2c:
0b:38:c4:03:3f:3c:23:f9:1a:e2:02:ae:a4:d3:45:34:60:2c:
b4:2c:d6:ee:81:70:b4:df:d6:c4:73:69:2f:91:22:ae:c5:ee:
fa:94:b0:9e:e0:24:f2:0b:76:5e:1f:76:51:8b:72:b5:29:8e:
aa:b8:6a:1e:0d:4c:04:85:53:99:a5:d9:f4:b9:47:6a:a6:27:
a5:44:ee:4f:44:83:87:9a:bc:59:cc:6d:8f:e9:1e:ee:38:ec:
e0:3e:83:4d:a5:a2:07:8c:22:69:d8:c0:6c:60:b9:09:98:d9:
f2:7e:a8:1c:04:54:3a:46:98:77:e4:a2:de:25:c9:c3:c6:b3:
9b:d2:8a:ab:97:6e:53:ef:60:5c:eb:94:96:7c:89:ef:44:f7:
0c:d4:07:51:bf:dd:76:21:92:4b:f1:29:ba:b0:62:4e:ea:9e:
de:f1:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 02:01:09 2026 by rpki-client