
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d299807-0bb5-34f0-a515-3b2eea946675.roa
File: 8d299807-0bb5-34f0-a515-3b2eea946675.roa (raw, json)
Hash identifier: MW1/3OKQ3U6JWUdm9UH9z1IU3oza4gE4kB7kOVc5Gd0=
Subject key identifier: A0:20:C7:A7:E4:8C:CA:97:B3:89:1D:15:07:EE:E8:26:5B:7E:FB:34
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E8F7598DF2E61D85F6C638130
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d299807-0bb5-34f0-a515-3b2eea946675.roa
Signing time: Mon 20 Jul 2026 10:06:03 +0000
ROA not before: Mon 20 Jul 2026 10:06:03 +0000
ROA not after: Sun 18 Oct 2026 10:06:03 +0000
asID: 402665
IP address blocks: 68.166.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8f:75:98:df:2e:61:d8:5f:6c:63:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 20 10:06:03 2026 GMT
Not After : Oct 18 10:06:03 2026 GMT
Subject: CN=866d3e18-04ff-43ea-914d-e25e3f02c6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:39:59:b7:e0:f8:95:f2:1e:47:b1:ee:65:
e9:c3:af:a2:c6:ff:4c:d6:73:d6:2b:ad:08:c9:82:
33:ce:96:4c:d5:8d:0d:90:19:cc:e8:1b:52:3a:74:
2b:db:d8:5b:10:fb:35:32:85:31:48:78:2d:a6:4b:
54:96:0c:37:fb:e1:81:64:0b:94:ba:0a:47:ac:3e:
f7:9e:69:42:f7:79:b5:3b:d1:55:ed:29:cc:75:d2:
89:a8:e6:6a:de:e3:29:51:c0:87:87:e9:ae:c5:c6:
52:74:1f:08:a1:63:2f:0b:54:40:35:d4:02:ec:ef:
34:b1:39:71:5b:b1:77:63:1a:90:52:ba:51:ab:cf:
8e:d7:5a:9e:d6:de:74:22:43:ba:41:18:c5:53:22:
c0:c9:25:87:2b:52:ee:91:0d:fb:44:13:98:c3:76:
13:31:5c:c8:6e:e3:66:c1:ee:ca:68:86:f9:8b:9e:
c1:2e:0c:e0:75:69:34:f0:be:8b:d0:2e:af:b9:de:
29:27:30:60:81:f7:d5:df:ca:ad:d4:0e:5e:eb:e9:
35:f1:6a:33:12:36:ff:99:b9:72:12:ec:9b:37:67:
1e:79:eb:b5:90:d6:1e:97:cf:0c:cb:7d:e1:00:26:
f8:1a:85:5c:56:7d:49:bf:76:ce:f6:05:19:32:8b:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:20:C7:A7:E4:8C:CA:97:B3:89:1D:15:07:EE:E8:26:5B:7E:FB:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d299807-0bb5-34f0-a515-3b2eea946675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.166.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:11:fd:a8:dd:70:3d:77:0b:ee:40:1e:a1:13:29:f2:d4:7d:
69:6d:0c:31:f7:10:82:cf:f3:92:cc:2c:49:da:05:ea:79:64:
fd:5e:a4:08:80:51:b5:52:b0:ef:99:33:40:82:d9:42:7d:48:
a3:9a:b4:6f:53:93:15:a2:74:0d:cf:ed:d0:33:a2:d7:ec:d0:
13:cd:1b:25:6c:32:6b:5c:4c:93:69:d0:83:22:d0:ec:90:75:
b7:4a:5f:bd:d1:a6:bd:1b:a7:16:2b:2b:f6:02:2d:6e:eb:05:
9a:da:b0:9f:3c:bd:14:a0:30:84:6a:f4:54:cd:67:ea:59:66:
97:9e:8b:3d:ed:12:f2:23:fb:a3:d6:2c:ee:f8:91:fb:cf:ee:
47:e1:44:eb:a8:a3:9f:48:be:78:30:86:2f:38:12:c4:7f:5f:
54:a8:da:c0:e4:06:4b:55:8d:79:73:35:44:28:1d:a9:4b:9c:
0c:c2:6d:0e:15:6c:43:2a:be:62:70:e0:28:6f:41:88:41:7c:
a3:41:da:ec:a1:57:84:f5:88:29:3f:b2:95:92:7c:85:f7:65:
4a:1a:67:ff:d4:27:b8:b7:d7:b9:b1:13:69:03:72:1c:af:da:
80:4f:c3:ab:e1:57:8e:d3:77:32:75:1c:53:7e:5b:8b:95:bb:
50:be:a8:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PdZjfLmHYX2xjgTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcyMDEwMDYwM1oXDTI2MTAxODEwMDYwM1owLzEtMCsGA1UEAxMk
ODY2ZDNlMTgtMDRmZi00M2VhLTkxNGQtZTI1ZTNmMDJjNmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1so5Wbfg+JXyHkex7mXpw6+ixv9M1nPWK60I
yYIzzpZM1Y0NkBnM6BtSOnQr29hbEPs1MoUxSHgtpktUlgw3++GBZAuUugpHrD73
nmlC93m1O9FV7SnMddKJqOZq3uMpUcCHh+muxcZSdB8IoWMvC1RANdQC7O80sTlx
W7F3YxqQUrpRq8+O11qe1t50IkO6QRjFUyLAySWHK1LukQ37RBOYw3YTMVzIbuNm
we7KaIb5i57BLgzgdWk08L6L0C6vud4pJzBggffV38qt1A5e6+k18WozEjb/mbly
EuybN2ceeeu1kNYel88My33hACb4GoVcVn1Jv3bO9gUZMosmcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAgx6fkjMqXs4kdFQfu6CZbfvs0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGQyOTk4MDctMGJiNS0z
NGYwLWE1MTUtM2IyZWVhOTQ2Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKb8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoR/ajdcD13C+5AHqETKfLUfWltDDH3EILP85LMLEnaBep5ZP1epAiA
UbVSsO+ZM0CC2UJ9SKOatG9TkxWidA3P7dAzotfs0BPNGyVsMmtcTJNp0IMi0OyQ
dbdKX73Rpr0bpxYrK/YCLW7rBZrasJ88vRSgMIRq9FTNZ+pZZpeeiz3tEvIj+6PW
LO74kfvP7kfhROuoo59Ivngwhi84EsR/X1So2sDkBktVjXlzNUQoHalLnAzCbQ4V
bEMqvmJw4ChvQYhBfKNB2uyhV4T1iCk/spWSfIX3ZUoaZ//UJ7i317mxE2kDchyv
2oBPw6vhV47TdzJ1HFN+W4uVu1C+qNU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:07 2026 by rpki-client