
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa
File: 3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa (raw, json)
Hash identifier: sJE7LJ4Liotx5wtztEk93uwKlEqxhzxdbBgtAk6ltko=
Subject key identifier: AA:59:F0:DA:BD:CB:8A:78:DD:50:EA:21:5B:E8:DB:AE:18:99:3F:7C
Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial: 010D0C9F4328584E62A9F9F5F23BC65DF1A653E0
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa
Signing time: Sat 04 Jul 2026 09:00:11 +0000
ROA not before: Sat 04 Jul 2026 09:00:11 +0000
ROA not after: Fri 02 Oct 2026 09:00:11 +0000
asID: 16766
IP address blocks: 208.122.43.0/24 maxlen: 24
208.122.44.0/22 maxlen: 24
208.122.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:62:a9:f9:f5:f2:3b:c6:5d:f1:a6:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
Validity
Not Before: Jul 4 09:00:11 2026 GMT
Not After : Oct 2 09:00:11 2026 GMT
Subject: CN=9077cd8d-4f4a-43c3-b364-5475727446a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:10:78:23:41:2e:ed:d6:98:d7:e9:9e:30:
4c:6b:b9:2d:6f:c2:b6:9e:9a:e8:08:db:38:91:23:
83:bd:4e:6f:13:ed:10:17:67:44:e6:ea:94:3c:f0:
f5:53:ed:bc:08:83:f9:ad:03:45:04:f0:ce:69:db:
b8:ef:07:fc:4f:6a:ff:1a:c5:69:a6:43:8f:a6:51:
7a:80:c9:ca:29:6f:95:42:04:68:49:87:16:ad:a7:
6b:c1:56:44:fd:de:af:a3:9f:2c:b8:33:79:49:57:
52:1a:63:70:8d:7b:a5:58:21:6a:40:57:b5:e3:57:
ca:90:1a:12:f8:d7:37:18:a6:99:cd:fe:c1:8b:39:
05:7b:20:a1:c7:c0:ec:4a:b6:4c:1d:b4:11:3b:9c:
32:e6:45:fa:95:34:10:21:93:c9:76:27:a0:fb:07:
dd:45:57:7d:31:00:76:92:f4:47:d4:4e:83:f7:cc:
18:96:40:49:2c:cc:ce:fe:48:30:77:4e:c2:97:70:
7e:ac:95:fb:23:2c:94:f0:84:14:8a:4e:12:45:8c:
40:66:d7:67:55:fd:30:89:3f:fd:cd:52:64:e1:f8:
3f:62:5d:72:b9:3d:1c:c5:35:a8:1a:57:ca:28:05:
d6:cc:21:b1:a7:54:54:4b:ec:37:5e:10:c9:3b:08:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:59:F0:DA:BD:CB:8A:78:DD:50:EA:21:5B:E8:DB:AE:18:99:3F:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
X509v3 Authority Key Identifier:
keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
sbgp-ipAddrBlock: critical
IPv4:
208.122.43.0-208.122.48.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:ea:d7:db:49:d9:53:b9:19:08:d1:82:4d:68:67:38:b3:84:
57:ac:81:df:77:5e:08:63:70:87:5b:e5:a3:92:45:e0:c3:1c:
fd:fe:30:4b:2f:9e:58:96:fb:d1:e0:60:41:27:44:55:cb:04:
61:7b:d2:63:4a:78:b0:ad:22:9d:9b:c6:46:75:31:36:f8:dc:
87:55:44:94:c3:fe:fa:91:c7:17:66:f9:3a:df:d5:67:44:46:
10:20:ed:94:a5:70:d9:b9:4a:a2:9b:7e:1b:6f:10:f6:7b:59:
1e:4e:2a:f9:f0:8d:f8:34:1a:9f:6d:12:08:97:5e:70:ae:4b:
4f:c5:cf:62:36:f1:9f:a9:6b:83:4d:30:5b:10:0d:c1:02:25:
df:47:23:e1:73:23:36:94:d9:da:47:be:e2:56:bf:00:e4:e5:
59:82:97:d6:75:51:48:3b:8c:44:bb:06:4a:3a:25:29:e6:bf:
72:68:90:24:34:94:ce:37:8f:19:e7:b9:b6:77:4d:f0:86:fb:
59:fa:cb:65:4b:72:d0:a8:06:13:0d:bb:c2:4b:f2:73:4e:4b:
92:50:3d:b4:1f:c1:f3:69:eb:1b:f8:db:fe:30:5b:eb:37:5e:
3d:2e:e1:8f:f1:8c:cf:96:42:c3:c8:34:93:01:8d:e6:26:e6:
12:47:d1:3a
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5iqfn18jvGXfGmU+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi
YjQ4MB4XDTI2MDcwNDA5MDAxMVoXDTI2MTAwMjA5MDAxMVowLzEtMCsGA1UEAxMk
OTA3N2NkOGQtNGY0YS00M2MzLWIzNjQtNTQ3NTcyNzQ0NmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRoQeCNBLu3WmNfpnjBMa7ktb8K2nproCNs4
kSODvU5vE+0QF2dE5uqUPPD1U+28CIP5rQNFBPDOadu47wf8T2r/GsVppkOPplF6
gMnKKW+VQgRoSYcWradrwVZE/d6vo58suDN5SVdSGmNwjXulWCFqQFe141fKkBoS
+Nc3GKaZzf7BizkFeyChx8DsSrZMHbQRO5wy5kX6lTQQIZPJdieg+wfdRVd9MQB2
kvRH1E6D98wYlkBJLMzO/kgwd07Cl3B+rJX7IyyU8IQUik4SRYxAZtdnVf0wiT/9
zVJk4fg/Yl1yuT0cxTWoGlfKKAXWzCGxp1RUS+w3XhDJOwhZ2wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKpZ8Nq9y4p43VDqIVvo264YmT98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy
NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvM2RhMTdkMGYtN2MwMC0z
N2M3LTlkZTMtY2JkODAxZjZkYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5
NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm
YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3
NzNhZmJiNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQeisD
BADQejAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAo+rX20nZU7kZCNGCTWhnOLOEV6yB33deCGNwh1vlo5JF
4MMc/f4wSy+eWJb70eBgQSdEVcsEYXvSY0p4sK0inZvGRnUxNvjch1VElMP++pHH
F2b5Ot/VZ0RGECDtlKVw2blKopt+G28Q9ntZHk4q+fCN+DQan20SCJdecK5LT8XP
Yjbxn6lrg00wWxANwQIl30cj4XMjNpTZ2ke+4la/AOTlWYKX1nVRSDuMRLsGSjol
Kea/cmiQJDSUzjePGee5tndN8Ib7WfrLZUty0KgGEw27wkvyc05LklA9tB/B82nr
G/jb/jBb6zdePS7hj/GMz5ZCw8g0kwGN5ibmEkfROg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:24 2026 by rpki-client