
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa
File: 4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa (raw, json)
Hash identifier: sQnlDa72Irigl1+9c24FAVDq+xOn8PpBIadLkXo6sfg=
Subject key identifier: 68:1C:65:47:99:21:CA:12:B1:3C:18:31:F5:89:59:22:EE:B8:90:71
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584E6B0A214155EB21DEC9C87800
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 12157
IP address blocks: 208.67.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:21:41:55:eb:21:de:c9:c8:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=7c137636-5ed0-4831-aa35-7dab2bb3f965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:59:84:f9:26:1d:d0:a1:8d:2f:41:a2:7f:
e1:de:e2:ae:ad:2f:6b:d7:00:f5:4c:44:01:29:01:
60:47:40:94:62:9e:14:eb:b9:90:7d:e1:9f:01:bd:
c4:1c:3c:fa:de:01:30:dd:2a:c5:b8:79:f8:7d:c2:
38:75:05:9e:11:be:40:85:bb:de:c6:33:20:a1:6b:
01:31:2e:5b:ab:c8:e1:c4:5e:6b:b4:55:11:8e:50:
44:3f:20:40:77:49:27:17:0e:6f:a5:e0:e0:05:ac:
57:40:2e:21:04:3f:d9:ef:6a:65:10:af:6f:52:0f:
10:c7:14:a2:bd:ec:bc:7c:49:ff:7c:fe:0f:a7:a7:
f9:2d:3d:a1:b7:02:98:74:1e:22:d8:2f:39:b6:ed:
91:c9:71:b9:2c:c8:4b:68:45:64:c7:a8:80:07:f3:
6d:1d:be:99:8a:2b:1b:12:51:a7:95:74:0a:3d:c8:
16:b5:4d:60:fd:89:c2:4b:cc:05:74:c9:1e:58:47:
f6:71:ce:6a:f5:68:79:82:2e:9b:ba:e4:03:54:72:
38:c9:06:13:53:1b:02:2f:27:30:8b:3d:dc:24:b6:
54:1b:d6:10:3f:5f:ac:78:69:ef:3b:dc:8a:dd:63:
98:9b:d9:bc:f7:b4:23:03:9d:7a:bb:79:8d:6f:4a:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:65:47:99:21:CA:12:B1:3C:18:31:F5:89:59:22:EE:B8:90:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d9:9c:a3:2b:95:78:24:b9:ba:ba:71:9a:95:da:e9:04:13:
bb:cc:6e:b4:1e:92:92:30:b3:a1:e4:ad:23:30:60:28:12:0b:
63:7e:01:d6:0a:fe:b8:b4:16:72:ba:fb:b1:63:2a:94:91:55:
77:b2:af:62:69:c0:d5:17:8d:51:9e:b8:1d:69:89:99:ba:a1:
56:73:c5:96:00:bf:c7:b1:8d:32:c9:56:5f:41:ad:e5:aa:55:
2c:50:7b:d1:48:be:a8:af:a7:95:39:5b:b4:af:8b:a9:d2:92:
be:be:ff:f9:c6:d0:72:af:ad:c7:e3:07:ca:ee:cf:d3:ca:10:
e0:03:88:59:40:97:4e:01:cb:36:a9:62:2b:6a:97:d3:5b:65:
55:b0:e5:e3:91:29:9f:ed:10:fd:d7:4c:58:0a:95:52:78:ad:
22:80:1d:43:41:3d:6a:49:1a:c4:64:5b:a1:c5:22:1c:11:c9:
78:3d:f8:41:7d:c7:4c:1e:72:83:b7:40:63:d1:07:52:e4:b3:
9e:13:33:17:8a:10:2e:35:86:8b:b1:7f:04:61:18:41:0f:2a:
5e:ee:f5:27:0c:a0:cf:f2:65:07:e4:67:ff:6c:1a:ec:e7:c4:
d2:26:4f:cb:43:a5:02:6c:5b:f3:16:cc:d4:f7:52:4e:a9:6f:
55:3b:07:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCiFBVesh3snIeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
N2MxMzc2MzYtNWVkMC00ODMxLWFhMzUtN2RhYjJiYjNmOTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJBZhPkmHdChjS9Bon/h3uKurS9r1wD1TEQB
KQFgR0CUYp4U67mQfeGfAb3EHDz63gEw3SrFuHn4fcI4dQWeEb5AhbvexjMgoWsB
MS5bq8jhxF5rtFURjlBEPyBAd0knFw5vpeDgBaxXQC4hBD/Z72plEK9vUg8QxxSi
vey8fEn/fP4Pp6f5LT2htwKYdB4i2C85tu2RyXG5LMhLaEVkx6iAB/NtHb6Ziisb
ElGnlXQKPcgWtU1g/YnCS8wFdMkeWEf2cc5q9Wh5gi6buuQDVHI4yQYTUxsCLycw
iz3cJLZUG9YQP1+seGnvO9yK3WOYm9m897QjA516u3mNb0qJAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgcZUeZIcoSsTwYMfWJWSLuuJBxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNGM4YTA2ZjctNDJjMi0z
Njk5LTljMTAtYWE2MDE1OTE4Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EN/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrZnKMrlXgkubq6cZqV2ukEE7vMbrQekpIws6HkrSMwYCgSC2N+AdYK
/ri0FnK6+7FjKpSRVXeyr2JpwNUXjVGeuB1piZm6oVZzxZYAv8exjTLJVl9BreWq
VSxQe9FIvqivp5U5W7Svi6nSkr6+//nG0HKvrcfjB8ruz9PKEOADiFlAl04Byzap
Yitql9NbZVWw5eORKZ/tEP3XTFgKlVJ4rSKAHUNBPWpJGsRkW6HFIhwRyXg9+EF9
x0wecoO3QGPRB1Lks54TMxeKEC41houxfwRhGEEPKl7u9ScMoM/yZQfkZ/9sGuzn
xNImT8tDpQJsW/MWzNT3Uk6pb1U7BxM=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:07:55 2026 by rpki-client