
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
File: 301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json)
Hash identifier: CLtR/jp08uYcNRROuhjZf9pkUezDq4F/KdYmD5UPGSc=
Subject key identifier: B1:3E:B7:60:D8:0A:3A:F2:10:0F:E9:3F:48:8B:FB:1E:4E:01:50:1F
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F4328584E296F0FFC01F0D76550AD1A80
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
Signing time: Sat 13 Jun 2026 21:00:12 +0000
ROA not before: Sat 13 Jun 2026 21:00:12 +0000
ROA not after: Fri 11 Sep 2026 21:00:12 +0000
asID: 14618
IP address blocks: 209.114.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:6f:0f:fc:01:f0:d7:65:50:ad:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Sep 11 21:00:12 2026 GMT
Subject: CN=d7f70c0a-2078-49b1-9569-dfb903bd5b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:b6:86:ad:d1:7b:2b:f8:d2:16:63:90:20:
98:7a:da:21:c9:3c:e2:de:8c:05:28:38:df:3f:28:
2c:2c:84:d4:3d:0a:d5:0e:a1:b4:b0:b9:29:93:af:
5a:dc:60:0d:73:46:a7:ee:1f:b4:1e:3e:27:aa:c2:
af:a9:0b:32:78:26:f4:f7:59:db:37:17:16:d3:e5:
68:84:44:e9:50:a3:a7:51:30:ac:60:04:97:c7:ce:
a4:76:01:da:b2:a2:7a:02:8c:32:a0:6f:47:44:90:
ce:a6:3f:bf:4e:5f:75:6c:ea:1c:52:f5:cd:36:48:
0c:55:cd:ba:78:ad:90:12:a9:46:c4:4c:85:ba:d0:
68:9f:85:14:7b:45:90:c4:3f:01:f0:3f:2f:59:c3:
c6:c0:29:23:57:d7:0b:31:e1:3f:ca:14:61:df:6a:
2d:20:30:08:1b:47:cf:88:61:aa:bd:14:b8:45:71:
82:bc:45:6c:16:e0:19:ef:8b:66:ab:4b:95:af:ec:
ca:d1:ae:c8:e6:fa:f3:d8:9a:7f:7b:ba:3b:1f:dd:
49:f1:ec:73:d1:d9:ff:9e:c8:96:15:02:63:7a:71:
6d:e6:42:f0:ea:03:cd:9c:34:7c:2c:50:e0:b0:a4:
ef:39:85:09:69:9d:d5:06:28:bc:a1:4d:e0:49:b4:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3E:B7:60:D8:0A:3A:F2:10:0F:E9:3F:48:8B:FB:1E:4E:01:50:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:be:27:60:54:51:69:ac:45:30:47:cb:33:8f:20:ab:d4:85:
81:c9:c4:56:ad:51:fd:dc:3c:62:3b:0b:47:ca:da:85:d1:d2:
ac:c9:c0:5e:7c:5a:0f:90:d6:a2:b3:aa:22:39:c0:47:02:6a:
ab:73:4a:af:e8:40:bf:67:54:84:5b:1c:b3:f8:78:3e:82:4b:
68:4b:b0:e6:c7:12:79:f0:62:e3:52:1e:e1:8f:4d:16:68:91:
e9:91:b8:52:ac:60:b8:96:f9:68:3b:30:04:cb:45:a8:a5:ba:
be:a9:48:a4:b7:48:45:96:a2:be:24:f0:ac:76:a3:75:32:58:
78:03:f9:5a:24:ee:7a:77:43:b2:ab:f8:44:ff:c7:39:b6:f1:
8b:88:4c:0b:fe:4c:00:5e:57:df:82:e3:cf:7f:b0:d1:a2:2c:
23:6c:25:93:21:ee:8d:8d:7f:da:98:e3:4b:71:c8:66:1e:39:
3e:51:44:d2:88:19:ad:6a:92:ab:89:de:11:d1:e8:06:b7:0f:
24:ac:85:b6:39:f4:d8:91:ca:e1:92:b7:81:03:67:d4:fc:de:
c8:67:73:8e:84:69:6e:bd:6f:a3:35:3d:49:3f:66:96:09:40:
24:02:52:ad:76:40:8a:e9:86:11:99:0f:2d:e7:c7:03:b7:d4:
a9:3f:77:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbw/8AfDXZVCtGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz
MjVhMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDdmNzBjMGEtMjA3OC00OWIxLTk1NjktZGZiOTAzYmQ1YjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSS2hq3Reyv40hZjkCCYetohyTzi3owFKDjf
PygsLITUPQrVDqG0sLkpk69a3GANc0an7h+0Hj4nqsKvqQsyeCb091nbNxcW0+Vo
hETpUKOnUTCsYASXx86kdgHasqJ6AowyoG9HRJDOpj+/Tl91bOocUvXNNkgMVc26
eK2QEqlGxEyFutBon4UUe0WQxD8B8D8vWcPGwCkjV9cLMeE/yhRh32otIDAIG0fP
iGGqvRS4RXGCvEVsFuAZ74tmq0uVr+zK0a7I5vrz2Jp/e7o7H91J8exz0dn/nsiW
FQJjenFt5kLw6gPNnDR8LFDgsKTvOYUJaZ3VBii8oU3gSbRv4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLE+t2DYCjryEA/pP0iL+x5OAVAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1
NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMzAxNjg1ZjktZWIzMC0z
NDZkLWE5OGMtNmY2NTMxNDEyMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh
NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj
MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz
MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAES+J2BUUWmsRTBHyzOPIKvUhYHJxFatUf3cPGI7C0fK2oXR0qzJwF58
Wg+Q1qKzqiI5wEcCaqtzSq/oQL9nVIRbHLP4eD6CS2hLsObHEnnwYuNSHuGPTRZo
kemRuFKsYLiW+Wg7MATLRailur6pSKS3SEWWor4k8Kx2o3UyWHgD+Vok7np3Q7Kr
+ET/xzm28YuITAv+TABeV9+C489/sNGiLCNsJZMh7o2Nf9qY40txyGYeOT5RRNKI
Ga1qkquJ3hHR6Aa3DySshbY59NiRyuGSt4EDZ9T83shnc46EaW69b6M1PUk/ZpYJ
QCQCUq12QIrphhGZDy3nxwO31Kk/dzg=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:37:59 2026 by rpki-client