
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
File: bb5807ed-8deb-3938-bc64-5cc7806d002d.roa (raw, json)
Hash identifier: /u1IiiIWs7U3FinsMi7+QgZeJntPKtMoU9W8+3H06lU=
Subject key identifier: 64:FB:EA:0B:86:E8:2D:E7:B1:25:BA:15:4D:51:B1:F7:E2:AC:67:CC
Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial: 010D0C9F4328584F03A78F5D28927EA397DBCD40
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 3356
IP address blocks: 199.249.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:8f:5d:28:92:7e:a3:97:db:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=0f6f1f4f-3f7f-4764-a150-bffdfc4f3bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:f9:8a:e8:c9:ba:63:8d:92:47:52:7d:72:
6f:04:ea:75:b0:02:c3:32:34:df:59:d1:25:16:29:
ae:a3:92:e1:4d:ea:43:2c:33:2e:f4:95:a8:26:2f:
89:02:8a:1e:ae:2d:26:ef:3b:97:46:e2:36:33:46:
ce:43:42:00:3b:2f:c8:a9:e8:79:9f:a2:90:00:e3:
a0:21:2b:27:b5:a3:97:de:cb:ea:96:fc:96:36:a0:
a9:02:9c:7f:ae:68:65:12:47:37:b5:ea:06:34:c4:
57:6f:a1:ea:65:ec:7d:52:0d:49:ad:8f:66:bc:6f:
d1:67:63:2e:1b:57:77:cc:d0:ee:07:84:a5:88:43:
26:9f:db:95:56:d2:ce:ad:f6:9f:79:ce:e6:f6:55:
66:ae:2b:fe:da:00:41:79:06:3b:fc:1c:ec:82:e6:
6a:4d:93:2e:0f:b2:4c:a8:1e:f5:84:b5:aa:ed:a6:
38:d5:fd:ca:9e:fd:c3:ca:f5:b6:c7:50:b4:5c:ea:
c4:d2:e0:cb:7a:a3:42:2d:15:cd:9a:ce:bb:21:61:
dd:36:2d:5a:04:48:70:99:1b:03:bb:34:35:69:a2:
0d:8b:81:83:85:63:f1:2f:88:2b:41:57:18:e4:bd:
84:be:7a:1c:78:05:31:db:fc:bd:54:82:a7:c4:b0:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:EA:0B:86:E8:2D:E7:B1:25:BA:15:4D:51:B1:F7:E2:AC:67:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
X509v3 Authority Key Identifier:
keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:1f:4c:28:03:cd:50:9a:73:a1:07:10:6d:a3:ee:39:34:9e:
0a:76:1c:f5:f5:57:61:c2:ba:cb:da:88:68:fe:d3:ef:e0:b9:
ae:c3:f8:cb:54:06:eb:75:98:f9:e0:4e:3b:5c:eb:9c:63:84:
5f:6e:0d:0d:ff:d9:94:ac:25:b3:a1:46:96:ba:5d:4d:bd:d9:
24:6c:99:be:77:e7:aa:a9:01:ce:fa:e1:b7:e7:e1:7e:b5:99:
e2:7d:34:60:9a:0d:db:4f:87:5e:25:7e:a0:04:6c:c0:cc:75:
55:03:2d:ad:6c:3e:13:49:ca:08:16:0b:bd:30:fa:b2:98:58:
4a:ab:ea:3a:f8:0e:13:b0:9c:41:5d:cb:83:b7:c6:b0:f1:3c:
c7:50:9a:cb:7b:50:7f:d0:63:17:dc:38:e4:28:8e:37:93:35:
a0:7c:cc:47:2b:0f:88:75:1c:72:ee:18:01:d8:5c:d7:58:3d:
db:de:1d:e4:c9:fa:da:c9:e0:1b:36:9e:ec:f6:ea:14:bd:89:
07:cc:c8:6c:55:5d:07:f0:cc:ae:32:76:cb:76:2b:d6:98:0e:
1b:4b:80:59:5c:d2:2c:58:b9:67:80:b9:1e:29:fb:ac:fa:c1:
82:2a:da:d5:84:98:ca:e1:04:89:f0:06:53:a6:84:fc:32:99:
b0:3c:8a:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp49dKJJ+o5fbzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3
N2YxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
MGY2ZjFmNGYtM2Y3Zi00NzY0LWExNTAtYmZmZGZjNGYzYmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYv5iujJumONkkdSfXJvBOp1sALDMjTfWdEl
Fimuo5LhTepDLDMu9JWoJi+JAooeri0m7zuXRuI2M0bOQ0IAOy/Iqeh5n6KQAOOg
ISsntaOX3svqlvyWNqCpApx/rmhlEkc3teoGNMRXb6HqZex9Ug1JrY9mvG/RZ2Mu
G1d3zNDuB4SliEMmn9uVVtLOrfafec7m9lVmriv+2gBBeQY7/BzsguZqTZMuD7JM
qB71hLWq7aY41f3Knv3DyvW2x1C0XOrE0uDLeqNCLRXNms67IWHdNi1aBEhwmRsD
uzQ1aaINi4GDhWPxL4grQVcY5L2EvnoceAUx2/y9VIKnxLAU2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGT76guG6C3nsSW6FU1RsffirGfMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1
MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYmI1ODA3ZWQtOGRlYi0z
OTM4LWJjNjQtNWNjNzgwNmQwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl
N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1
NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0
ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFofTCgDzVCac6EHEG2j7jk0ngp2HPX1V2HCusvaiGj+0+/gua7D+MtU
But1mPngTjtc65xjhF9uDQ3/2ZSsJbOhRpa6XU292SRsmb5356qpAc764bfn4X61
meJ9NGCaDdtPh14lfqAEbMDMdVUDLa1sPhNJyggWC70w+rKYWEqr6jr4DhOwnEFd
y4O3xrDxPMdQmst7UH/QYxfcOOQojjeTNaB8zEcrD4h1HHLuGAHYXNdYPdveHeTJ
+trJ4Bs2nuz26hS9iQfMyGxVXQfwzK4ydst2K9aYDhtLgFlc0ixYuWeAuR4p+6z6
wYIq2tWEmMrhBInwBlOmhPwymbA8ivU=
-----END CERTIFICATE-----
Generated at Wed Sep 9 02:20:26 2026 by rpki-client