
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa
File: b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa (raw, json)
Hash identifier: f3El0zuWjzEYrS5Py0/Yz/EZOlaFADqefd0mjJkh6eM=
Subject key identifier: 62:D6:33:5C:FE:D3:2D:21:2C:C2:82:02:A1:D1:4A:C8:A4:4A:F1:18
Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial: 010D0C9F4328584ED861DF7847D8D8C70423D580
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 25649
IP address blocks: 199.187.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:df:78:47:d8:d8:c7:04:23:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=621f6d55-4a4e-4138-8dc9-cf22b1b6e73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:29:78:b5:b8:68:a0:bb:4c:71:40:b4:ba:
1d:0e:17:31:27:b7:97:5c:8b:3a:07:89:72:39:d1:
47:14:24:42:17:59:3c:53:93:88:dd:ad:89:9f:8f:
48:84:7d:e0:c8:ea:e9:73:e0:15:3a:8d:c6:2f:a4:
f4:a9:81:8d:9b:de:f4:33:7a:7b:26:56:c9:e7:00:
f4:e7:47:02:69:60:d0:20:eb:61:a3:b7:c6:23:0e:
02:c1:60:f6:4e:43:a2:20:25:6b:c8:a7:53:86:20:
b5:7d:f1:7f:7f:07:29:cb:4c:d4:55:21:2b:80:ac:
84:03:6e:c1:58:77:99:ea:fe:15:e0:15:fa:ad:9b:
3f:c7:42:59:9a:8b:cd:cb:cc:19:3d:f7:d3:36:ba:
f8:75:7d:07:d8:a9:40:56:7e:1d:80:6c:2d:34:d5:
d8:c4:9d:e6:bf:17:44:d3:d9:9f:cb:05:2c:8c:43:
c1:2b:ea:35:4d:b5:e5:a1:4b:bc:32:24:c9:67:08:
a7:ea:f7:2e:00:97:e1:3d:40:ac:5f:a5:a3:82:9f:
01:f1:52:24:d9:e9:f9:fe:62:4d:36:1c:4b:fc:bc:
fc:a7:7a:6f:91:2a:2a:dc:b3:b2:7c:93:f4:c1:c5:
c3:e4:00:13:32:ac:c9:75:f1:ad:b8:6d:41:68:3a:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D6:33:5C:FE:D3:2D:21:2C:C2:82:02:A1:D1:4A:C8:A4:4A:F1:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
X509v3 Authority Key Identifier:
keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:55:b3:18:f7:34:3c:1d:53:70:0e:9e:46:0f:e0:24:43:f9:
0d:39:62:20:9e:6e:78:59:21:e1:90:24:e5:e9:8c:bd:59:56:
dd:11:4b:b4:00:19:76:9a:81:a1:bd:39:98:eb:5f:d1:9b:91:
db:cb:ca:1e:56:94:15:a3:62:71:42:ec:f8:a9:5c:b0:f6:4a:
73:46:27:23:ac:e5:79:6a:0e:cf:4e:00:13:41:73:ab:c2:e7:
6f:9c:d6:c7:32:87:cb:89:eb:f7:1a:62:03:f4:de:71:93:1d:
f7:55:bb:eb:07:7e:93:42:9e:86:f4:6b:65:a6:c2:ff:46:87:
c7:78:aa:bc:d5:ef:a4:6d:2f:aa:a5:90:9a:54:b5:bb:1a:4c:
b6:97:69:a1:6c:e1:72:23:ed:a8:03:1a:f6:a2:5a:b0:e4:ae:
17:2f:2b:72:69:b7:9d:4d:88:e6:9e:dc:75:b0:66:04:6d:52:
e7:bd:c0:1a:fa:1a:53:20:9b:d6:d9:28:17:ec:9c:2b:21:36:
f7:1e:ad:8d:e4:1f:5d:ca:b6:b8:31:c4:59:46:42:33:ac:a5:
98:56:bf:31:c9:b4:a9:10:eb:17:7a:69:2b:c2:b3:0a:db:4b:
51:97:fc:79:85:ea:be:08:56:cf:e1:25:fb:e5:68:96:c3:31:
3c:4b:38:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd94R9jYxwQj1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
NjIxZjZkNTUtNGE0ZS00MTM4LThkYzktY2YyMmIxYjZlNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWEpeLW4aKC7THFAtLodDhcxJ7eXXIs6B4ly
OdFHFCRCF1k8U5OI3a2Jn49IhH3gyOrpc+AVOo3GL6T0qYGNm970M3p7JlbJ5wD0
50cCaWDQIOtho7fGIw4CwWD2TkOiICVryKdThiC1ffF/fwcpy0zUVSErgKyEA27B
WHeZ6v4V4BX6rZs/x0JZmovNy8wZPffTNrr4dX0H2KlAVn4dgGwtNNXYxJ3mvxdE
09mfywUsjEPBK+o1TbXloUu8MiTJZwin6vcuAJfhPUCsX6Wjgp8B8VIk2en5/mJN
NhxL/Lz8p3pvkSoq3LOyfJP0wcXD5AATMqzJdfGtuG1BaDqddQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGLWM1z+0y0hLMKCAqHRSsikSvEYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYjllMDkxZDgtOGE0Yi0z
YjRmLWJlNDQtYzgzODE4ZjE2YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7voMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxVsxj3NDwdU3AOnkYP4CRD+Q05YiCebnhZIeGQJOXpjL1ZVt0RS7QA
GXaagaG9OZjrX9GbkdvLyh5WlBWjYnFC7PipXLD2SnNGJyOs5XlqDs9OABNBc6vC
52+c1scyh8uJ6/caYgP03nGTHfdVu+sHfpNCnob0a2Wmwv9Gh8d4qrzV76RtL6ql
kJpUtbsaTLaXaaFs4XIj7agDGvaiWrDkrhcvK3Jpt51NiOae3HWwZgRtUue9wBr6
GlMgm9bZKBfsnCshNvcerY3kH13KtrgxxFlGQjOspZhWvzHJtKkQ6xd6aSvCswrb
S1GX/HmF6r4IVs/hJfvlaJbDMTxLON8=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:41:17 2026 by rpki-client