
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa
File: a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa (raw, json)
Hash identifier: 0i4Wa4rSSf+wRZLhmD2v+VqvyKnIy95hxCpbknMCpls=
Subject key identifier: F8:3E:1E:6F:67:07:27:A6:4F:6D:47:A8:FE:D4:85:04:9D:7E:46:42
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EAE819475C1937C26D5645FE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 36619
IP address blocks: 216.168.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:94:75:c1:93:7c:26:d5:64:5f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=42c20c49-b49b-46a4-bbce-945aa94db6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:bd:3b:f7:70:5f:11:94:3b:f2:03:7c:50:
fd:36:2d:38:01:20:d5:2e:f2:a5:76:1a:ac:e9:ba:
f6:56:f0:f9:ac:75:2e:7c:19:28:42:82:7e:e9:17:
a5:27:b1:5c:ba:2a:00:e7:a4:18:1c:76:45:16:d1:
2f:7b:98:a7:59:71:52:a7:da:0b:5c:df:5b:53:00:
9b:28:36:fc:1b:c4:89:87:6e:b7:14:f7:df:0b:3f:
36:34:ac:4d:d8:2c:5e:8d:41:5e:fb:8e:a9:60:db:
48:3f:d1:25:05:84:22:6f:ee:72:73:ac:6a:e2:a9:
3e:30:17:6c:6e:01:d2:06:1d:87:47:b5:41:8a:03:
20:14:f8:9a:c8:4c:10:87:2d:ff:d2:90:8a:b6:98:
d8:1d:4e:9d:66:0c:96:29:37:36:90:3a:08:da:74:
9c:1e:6d:04:34:98:cf:20:c9:64:d9:d3:c8:3c:37:
23:d3:d5:91:90:8d:26:ae:2d:29:9d:2d:a2:a0:7d:
8c:92:9a:9f:0d:15:9d:f3:b0:62:89:b5:6f:ca:e7:
5a:27:e2:2d:df:d2:a1:84:68:09:82:ce:cb:09:7d:
74:4d:77:1b:1c:e7:18:b8:09:9b:59:af:7a:6b:87:
ff:aa:56:f9:2b:84:9b:e3:14:36:3b:05:79:e8:95:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:1E:6F:67:07:27:A6:4F:6D:47:A8:FE:D4:85:04:9D:7E:46:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:c9:01:ff:ed:f4:d3:04:46:52:d8:5a:7b:dc:10:31:f6:72:
d9:ee:76:22:ff:e3:f7:48:f4:65:04:4a:3e:6e:4d:96:88:73:
d8:a3:86:d6:d3:4e:88:30:44:5e:45:da:49:13:8f:99:6f:24:
c0:8a:bd:1c:46:f8:d3:c4:f9:a9:d2:03:bf:f4:5c:54:b7:37:
46:44:71:a4:7a:14:5a:ca:1b:14:b5:1b:92:84:58:63:1a:ab:
e4:98:25:38:50:37:88:5c:82:b2:f8:24:30:21:a6:c5:f2:ad:
a7:9a:f4:15:fe:43:70:7c:19:77:9e:1e:f8:f0:f4:21:c0:13:
c9:1f:17:2f:ab:66:39:79:ac:1b:96:d2:89:18:9b:29:09:4e:
b1:1a:99:26:0b:ff:b8:84:20:1b:51:65:7b:e3:8e:55:c6:41:
ae:65:3a:36:ec:c7:aa:be:d0:55:92:69:9e:b9:59:57:33:28:
31:97:ba:89:8c:83:3d:6d:79:28:f8:bc:4c:45:a0:d3:01:3c:
c4:ba:0b:f1:01:d3:0d:c3:69:9a:a6:07:3f:d2:bc:ba:66:0d:
5b:61:59:ba:ae:59:38:fe:ad:83:ca:da:52:e3:5f:a2:78:fe:
f8:02:42:b8:59:df:18:e3:aa:5a:9f:91:c2:1b:f8:86:c6:6e:
ad:d1:0d:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZR1wZN8JtVkX+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
NDJjMjBjNDktYjQ5Yi00NmE0LWJiY2UtOTQ1YWE5NGRiNmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU69O/dwXxGUO/IDfFD9Ni04ASDVLvKldhqs
6br2VvD5rHUufBkoQoJ+6RelJ7FcuioA56QYHHZFFtEve5inWXFSp9oLXN9bUwCb
KDb8G8SJh263FPffCz82NKxN2CxejUFe+46pYNtIP9ElBYQib+5yc6xq4qk+MBds
bgHSBh2HR7VBigMgFPiayEwQhy3/0pCKtpjYHU6dZgyWKTc2kDoI2nScHm0ENJjP
IMlk2dPIPDcj09WRkI0mri0pnS2ioH2MkpqfDRWd87BiibVvyudaJ+It39KhhGgJ
gs7LCX10TXcbHOcYuAmbWa96a4f/qlb5K4Sb4xQ2OwV56JWXkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPg+Hm9nByemT21HqP7UhQSdfkZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg5YzllOGEtZDIwYi0z
MmQxLTk1OTYtY2QxNWVjNTdjMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbJAf/t9NMERlLYWnvcEDH2ctnudiL/4/dI9GUESj5uTZaIc9ijhtbT
TogwRF5F2kkTj5lvJMCKvRxG+NPE+anSA7/0XFS3N0ZEcaR6FFrKGxS1G5KEWGMa
q+SYJThQN4hcgrL4JDAhpsXyraea9BX+Q3B8GXeeHvjw9CHAE8kfFy+rZjl5rBuW
0okYmykJTrEamSYL/7iEIBtRZXvjjlXGQa5lOjbsx6q+0FWSaZ65WVczKDGXuomM
gz1teSj4vExFoNMBPMS6C/EB0w3DaZqmBz/SvLpmDVthWbquWTj+rYPK2lLjX6J4
/vgCQrhZ3xjjqlqfkcIb+IbGbq3RDT4=
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:23 2026 by rpki-client