
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
File: c71a15d2-e000-33ce-85be-6790968c961e.roa (raw, json)
Hash identifier: gl84/jvfi2ZrMHZrQ2lbmP/SP3/yajJQ1LDfAZe6NsQ=
Subject key identifier: 61:30:8E:65:54:DA:16:A5:A0:5E:B6:33:6D:7A:C5:9C:B5:6E:2F:C4
Certificate issuer: /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial: 010D0C9F4328584EAFE70B236677909A6CA8B9D0
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 397709
IP address blocks: 198.203.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e7:0b:23:66:77:90:9a:6c:a8:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=1bcdb153-876c-4ae2-b9cc-7b828b416adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:ec:14:8b:5c:c4:f2:31:1d:63:9a:44:d8:
d4:23:8a:9d:e2:7f:49:90:06:7d:45:c4:f5:93:05:
8a:8e:db:48:e7:5c:d7:db:da:b5:5c:d3:58:61:3d:
a5:e8:d4:35:1d:f2:79:a1:54:5f:27:48:93:66:a1:
ef:c3:72:51:39:fb:c6:17:01:69:5d:73:e6:24:98:
6f:bd:4f:d0:4e:57:e5:d9:e7:72:56:18:27:40:87:
ef:57:9c:e1:75:96:a5:4f:c2:84:5f:fe:ce:d3:9b:
8d:df:14:59:44:62:d6:3b:f2:4d:fd:e2:7d:5d:a8:
a5:12:b2:67:8c:2f:cb:bd:9f:8b:0b:c2:0d:aa:3c:
ee:0a:7f:b6:79:78:8d:07:ec:cc:bf:5c:33:e3:47:
4e:04:ca:54:04:37:ba:1c:70:2e:2b:0c:e0:17:fc:
8b:2d:a7:f6:1d:19:28:87:f2:19:17:36:c3:b3:96:
e5:18:83:81:45:f7:70:70:77:40:dd:a4:9e:9e:73:
07:54:7f:c3:16:5c:04:28:e0:1c:fa:a5:0c:9a:84:
92:c9:8b:e5:21:99:c3:e5:05:47:41:9f:a9:36:ba:
3a:95:96:1d:78:96:9b:c4:c3:41:67:0f:b8:d2:72:
57:27:42:e9:10:98:6f:4e:6d:9d:ae:dc:a6:c6:be:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:8E:65:54:DA:16:A5:A0:5E:B6:33:6D:7A:C5:9C:B5:6E:2F:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
X509v3 Authority Key Identifier:
keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
sbgp-ipAddrBlock: critical
IPv4:
198.203.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:db:20:17:49:37:9e:8e:4c:70:d5:1a:90:87:17:54:c1:20:
7c:03:d7:16:d9:93:bd:46:55:e1:4d:c3:ad:8e:39:af:d9:72:
e5:9b:b7:b0:02:1f:af:29:33:15:69:0c:b7:f8:49:c8:ab:4a:
ba:c1:51:cc:d5:46:18:d3:54:5c:d9:2a:e3:02:d3:e3:2a:8b:
d8:ef:94:a5:d4:05:49:83:37:9c:df:e3:d1:71:bd:b0:a1:33:
f0:b9:13:ba:aa:3a:be:ba:0a:5c:a2:cc:1c:24:2d:ef:a9:ce:
4e:61:73:a1:54:42:7e:64:d3:0d:85:07:8c:e0:25:55:3b:01:
9c:fa:2b:82:7a:22:f0:e5:97:95:f9:34:8e:0e:44:aa:8f:61:
55:a2:b4:78:94:30:4f:af:5d:f1:77:c8:97:a6:66:35:15:27:
ff:c0:1e:05:5f:24:13:c6:1d:64:c3:39:d1:11:19:08:a6:89:
33:4a:51:f5:26:a3:98:34:25:d8:69:f8:4c:40:ed:57:52:b5:
d5:24:12:36:4c:d6:eb:ea:ae:bb:12:cf:48:43:56:aa:b9:98:
20:1e:87:b7:46:a4:d4:34:b7:dc:c8:ab:82:45:85:df:6d:0f:
ce:fb:d6:da:60:8a:05:36:d7:96:5b:3f:e1:03:57:6c:b6:85:
b3:44:03:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5wsjZneQmmyoudAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFlNTAzZmQtMmI2Yi00M2JhLWFjMmUtNGZkNDY5N2Fj
NDUyMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
MWJjZGIxNTMtODc2Yy00YWUyLWI5Y2MtN2I4MjhiNDE2YWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApujsFItcxPIxHWOaRNjUI4qd4n9JkAZ9RcT1
kwWKjttI51zX29q1XNNYYT2l6NQ1HfJ5oVRfJ0iTZqHvw3JROfvGFwFpXXPmJJhv
vU/QTlfl2edyVhgnQIfvV5zhdZalT8KEX/7O05uN3xRZRGLWO/JN/eJ9XailErJn
jC/LvZ+LC8INqjzuCn+2eXiNB+zMv1wz40dOBMpUBDe6HHAuKwzgF/yLLaf2HRko
h/IZFzbDs5blGIOBRfdwcHdA3aSennMHVH/DFlwEKOAc+qUMmoSSyYvlIZnD5QVH
QZ+pNro6lZYdeJabxMNBZw+40nJXJ0LpEJhvTm2drtymxr4orQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEwjmVU2haloF62M216xZy1bi/EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1
MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0Njk3YWM0NTIvYzcxYTE1ZDItZTAwMC0z
M2NlLTg1YmUtNjc5MDk2OGM5NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFlNTAzZmQtMmI2Yi00M2JhLWFj
MmUtNGZkNDY5N2FjNDUyLzRhZTUwM2ZkLTJiNmItNDNiYS1hYzJlLTRmZDQ2OTdh
YzQ1Mi5jcmwwHwYDVR0jBBgwFoAU6TxgaZlr8Ypxvn55tq8B+oqhO1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0
Njk3YWM0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsvFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILbIBdJN56OTHDVGpCHF1TBIHwD1xbZk71GVeFNw62OOa/ZcuWbt7AC
H68pMxVpDLf4ScirSrrBUczVRhjTVFzZKuMC0+Mqi9jvlKXUBUmDN5zf49FxvbCh
M/C5E7qqOr66ClyizBwkLe+pzk5hc6FUQn5k0w2FB4zgJVU7AZz6K4J6IvDll5X5
NI4ORKqPYVWitHiUME+vXfF3yJemZjUVJ//AHgVfJBPGHWTDOdERGQimiTNKUfUm
o5g0Jdhp+ExA7VdStdUkEjZM1uvqrrsSz0hDVqq5mCAeh7dGpNQ0t9zIq4JFhd9t
D8771tpgigU215ZbP+EDV2y2hbNEA+U=
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:44 2026 by rpki-client