
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa
File: 68c427e0-a575-3b64-98f5-5f2c2b108936.roa (raw, json)
Hash identifier: cqVwXAsxjTueDyYzBTgPUscUvbRJFvwUBtFIY1pXgAQ=
Subject key identifier: 48:12:8C:3E:B9:49:D6:D4:37:B2:69:34:57:0E:DC:66:8B:B8:0A:70
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F4328584EA79B5FCB0882D8EDD1F1C980
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 931
IP address blocks: 128.254.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:5f:cb:08:82:d8:ed:d1:f1:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fea7762e-16fa-4d6e-ac54-c36b4ee9143b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:8b:6d:46:7d:d8:85:21:4a:4e:49:93:18:
32:b5:54:f1:35:a5:b9:70:93:fb:7d:2f:df:42:cf:
c6:3b:b9:27:e4:df:98:74:05:26:45:1f:33:6e:c1:
6d:5d:8f:1c:50:84:a8:57:68:4f:b7:d4:40:20:a0:
62:db:6f:76:32:bb:8c:de:6e:ba:cd:81:43:e6:70:
00:0d:be:73:85:15:80:fa:7a:04:2d:ea:a6:84:78:
38:4e:cb:17:b1:c1:0e:3d:06:c2:cd:43:ff:37:10:
1e:2a:c2:29:b3:5b:3d:95:48:4f:8b:9b:e1:64:45:
2f:2d:8c:81:9d:a6:1b:52:38:bc:d3:d9:50:d8:57:
10:6b:ec:b5:56:d6:b2:d6:8a:72:1b:a0:2a:59:ce:
b3:d5:45:80:00:16:5e:86:55:54:e2:dc:30:29:1f:
1c:80:3c:2f:2d:39:7d:f0:74:5d:1d:d1:f7:ff:3d:
c3:79:c4:c0:f8:05:12:70:a8:93:2a:15:cc:a0:78:
f4:70:a7:71:3e:2b:b1:65:5a:f5:21:66:ed:8b:1d:
8f:8c:67:e3:21:4e:ee:45:c5:58:14:3b:b2:66:5e:
ce:26:65:35:a5:49:b3:16:50:49:09:f6:bd:33:99:
e9:46:16:bd:eb:fb:91:b6:ce:3f:43:b2:17:34:a6:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:8C:3E:B9:49:D6:D4:37:B2:69:34:57:0E:DC:66:8B:B8:0A:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:3f:54:b5:d1:54:3b:11:77:b0:48:c6:05:33:79:dd:ae:4d:
7e:f5:eb:41:65:18:38:97:5c:e6:b5:c4:ec:b7:09:17:03:0f:
6f:c2:b6:a5:74:f2:1a:22:7c:73:c6:61:09:80:3c:c4:6d:83:
d1:95:c1:c9:e4:83:40:91:bb:13:5d:89:97:03:95:26:c8:dc:
7a:0b:eb:ad:7f:3d:ba:47:83:7e:0a:64:90:58:91:77:50:26:
02:d1:0e:63:15:15:05:18:24:ef:bf:d2:2e:ef:4a:8a:c7:40:
ca:7f:f1:97:96:be:a5:0a:67:10:d5:e1:fa:f7:a4:1b:fc:1e:
67:c0:c4:8a:5e:fc:f5:fe:44:3f:3c:7b:24:be:55:78:6c:82:
85:00:9e:91:1f:c7:ec:c6:6a:68:e0:ff:da:eb:56:3d:03:55:
88:87:c6:12:46:5a:fd:d9:30:04:62:76:d3:e4:4f:0d:fc:41:
61:02:56:dd:d4:9f:d1:0c:b8:9b:f6:3e:76:5b:44:14:82:5f:
be:6b:3c:4b:20:cb:24:87:6e:b2:f5:62:af:90:03:7e:d3:0d:
ee:b0:06:23:9e:2e:69:72:65:3e:82:a7:dd:c1:a1:03:a1:3c:
7c:11:26:75:ae:09:01:2f:14:4c:d2:a5:59:55:9f:bd:af:37:
a1:5c:96:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm1/LCILY7dHxyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmVhNzc2MmUtMTZmYS00ZDZlLWFjNTQtYzM2YjRlZTkxNDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZSLbUZ92IUhSk5JkxgytVTxNaW5cJP7fS/f
Qs/GO7kn5N+YdAUmRR8zbsFtXY8cUISoV2hPt9RAIKBi2292MruM3m66zYFD5nAA
Db5zhRWA+noELeqmhHg4TssXscEOPQbCzUP/NxAeKsIps1s9lUhPi5vhZEUvLYyB
naYbUji809lQ2FcQa+y1Vtay1opyG6AqWc6z1UWAABZehlVU4twwKR8cgDwvLTl9
8HRdHdH3/z3DecTA+AUScKiTKhXMoHj0cKdxPiuxZVr1IWbtix2PjGfjIU7uRcVY
FDuyZl7OJmU1pUmzFlBJCfa9M5npRha96/uRts4/Q7IXNKZLDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgSjD65SdbUN7JpNFcO3GaLuApwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjhjNDI3ZTAtYTU3NS0z
YjY0LTk4ZjUtNWYyYzJiMTA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEc/VLXRVDsRd7BIxgUzed2uTX7160FlGDiXXOa1xOy3CRcDD2/CtqV0
8hoifHPGYQmAPMRtg9GVwcnkg0CRuxNdiZcDlSbI3HoL661/PbpHg34KZJBYkXdQ
JgLRDmMVFQUYJO+/0i7vSorHQMp/8ZeWvqUKZxDV4fr3pBv8HmfAxIpe/PX+RD88
eyS+VXhsgoUAnpEfx+zGamjg/9rrVj0DVYiHxhJGWv3ZMARidtPkTw38QWECVt3U
n9EMuJv2PnZbRBSCX75rPEsgyySHbrL1Yq+QA37TDe6wBiOeLmlyZT6Cp93BoQOh
PHwRJnWuCQEvFEzSpVlVn72vN6FcliY=
-----END CERTIFICATE-----
Generated at Tue Aug 11 06:56:10 2026 by rpki-client