
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa
File: 3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa (raw, json)
Hash identifier: /+DJYQ+qSPswcvUQmc7PkMDUrnQuAV6Ue4p+C1AzFlY=
Subject key identifier: 56:0F:79:74:BE:92:DD:F8:AE:95:59:DE:D0:EF:9B:2F:A0:73:46:11
Certificate issuer: /CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86
Certificate serial: 010D0C9F4328584E7204CCA301485F94ECE9B400
Authority key identifier: AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 21512
IP address blocks: 199.248.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:cc:a3:01:48:5f:94:ec:e9:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=9ac056e1-2c69-4926-9f9f-3d22564f740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:32:0f:21:ca:8f:ac:8e:02:a9:ec:db:02:
90:7f:bc:a8:bd:6b:cc:f6:32:b9:1c:18:61:a0:26:
ae:82:10:d1:19:3e:d9:d6:ec:30:56:e4:48:f1:8e:
ef:c2:f4:a7:17:91:42:02:3e:2a:14:7f:3a:1f:cd:
b3:74:d6:2b:53:2d:e6:8c:ff:0a:e6:66:1b:e2:08:
69:5b:c9:b4:65:30:30:a9:e1:bd:e0:59:ea:81:ee:
82:b0:d9:10:57:71:18:80:73:7c:5d:b3:32:86:12:
df:42:32:3e:f5:73:78:bd:12:59:76:c1:5c:6f:27:
aa:1d:dd:99:60:a7:1e:37:b2:b4:ea:28:3d:e9:51:
2b:9e:43:17:af:b6:83:f9:5a:d1:35:6c:88:21:84:
65:1e:c8:86:b2:b3:08:de:1e:22:87:ce:b9:3d:3e:
57:ad:cc:3e:9a:fc:85:3b:f6:c3:1a:f8:d3:1c:f6:
0e:81:c2:a4:f8:46:15:72:9d:fb:3c:97:21:6a:30:
f8:f3:28:94:6d:3d:4a:37:ab:6f:a7:fe:30:01:92:
3b:21:67:0b:a8:c0:eb:91:ee:4f:6e:47:09:4a:c4:
90:f3:83:22:4c:17:93:ec:dc:15:92:47:71:9d:48:
2b:af:40:51:ce:9b:cf:c0:4d:3f:93:7d:ac:60:32:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:79:74:BE:92:DD:F8:AE:95:59:DE:D0:EF:9B:2F:A0:73:46:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl
X509v3 Authority Key Identifier:
keyid:AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer
sbgp-ipAddrBlock: critical
IPv4:
199.248.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:48:58:5d:df:a1:a4:c9:1c:c8:fb:d3:f7:09:97:59:3e:8a:
3c:ec:dd:91:3d:c6:1c:0c:0a:ab:33:99:fd:71:23:ac:ed:d1:
b2:77:7e:34:81:a2:55:59:71:b0:a5:d9:64:bc:96:95:1a:a8:
0d:21:4e:27:df:1e:e9:45:cb:bb:bf:ce:54:bb:b6:2a:0b:2f:
99:76:fb:b4:fe:e9:24:41:3a:56:90:fd:98:b8:6d:eb:6b:da:
ed:9c:9a:84:9b:cf:81:b1:ca:db:9c:59:fd:b8:96:3b:fb:9b:
28:32:c7:f4:10:05:a9:1f:77:55:75:01:ad:5e:a4:cb:99:6d:
ef:9d:7a:08:1c:5c:cf:93:29:21:c8:5f:ad:20:d2:c1:2f:56:
13:86:d3:c0:22:f7:d9:79:3c:7c:05:01:bc:24:a6:56:ed:5e:
87:c4:bd:80:7e:3c:88:87:5a:c8:b1:2a:66:12:0f:7c:04:c8:
bb:48:8b:de:ee:57:ab:91:56:89:fb:fb:d1:c1:f7:b2:18:d6:
7a:3d:a1:5d:9c:34:1b:90:45:a5:93:ce:78:e4:c3:f0:cd:46:
12:0d:ff:64:95:1c:ea:2e:1a:86:4d:de:69:ff:a4:76:cb:0c:
db:6b:5a:4d:aa:6f:6a:83:5f:1a:b8:82:14:9d:65:61:04:37:
f9:39:48:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMyjAUhflOzptAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBmZTllNDQtYjQ0MS00ZGU0LTlmZDEtOWYzYjZmOTc1
Yzg2MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
OWFjMDU2ZTEtMmM2OS00OTI2LTlmOWYtM2QyMjU2NGY3NDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrQyDyHKj6yOAqns2wKQf7yovWvM9jK5HBhh
oCaughDRGT7Z1uwwVuRI8Y7vwvSnF5FCAj4qFH86H82zdNYrUy3mjP8K5mYb4ghp
W8m0ZTAwqeG94Fnqge6CsNkQV3EYgHN8XbMyhhLfQjI+9XN4vRJZdsFcbyeqHd2Z
YKceN7K06ig96VErnkMXr7aD+VrRNWyIIYRlHsiGsrMI3h4ih865PT5Xrcw+mvyF
O/bDGvjTHPYOgcKk+EYVcp37PJchajD48yiUbT1KN6tvp/4wAZI7IWcLqMDrke5P
bkcJSsSQ84MiTBeT7NwVkkdxnUgrr0BRzpvPwE0/k32sYDJf6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYPeXS+kt34rpVZ3tDvmy+gc0YRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMGZl
OWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNiNmY5NzVjODYvM2Y3ZWNiOWUtYzZlMi0z
MWFlLWI1OWMtN2IxMGJkNDYyODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDBmZTllNDQtYjQ0MS00ZGU0LTlm
ZDEtOWYzYjZmOTc1Yzg2LzAwZmU5ZTQ0LWI0NDEtNGRlNC05ZmQxLTlmM2I2Zjk3
NWM4Ni5jcmwwHwYDVR0jBBgwFoAUrUt7f6ZAv9X4Mv1uIcCBQjQ9chAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMGZlOWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNi
NmY5NzVjODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/jhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtIWF3foaTJHMj70/cJl1k+ijzs3ZE9xhwMCqszmf1xI6zt0bJ3fjSB
olVZcbCl2WS8lpUaqA0hTiffHulFy7u/zlS7tioLL5l2+7T+6SRBOlaQ/Zi4betr
2u2cmoSbz4GxytucWf24ljv7mygyx/QQBakfd1V1Aa1epMuZbe+deggcXM+TKSHI
X60g0sEvVhOG08Ai99l5PHwFAbwkplbtXofEvYB+PIiHWsixKmYSD3wEyLtIi97u
V6uRVon7+9HB97IY1no9oV2cNBuQRaWTznjkw/DNRhIN/2SVHOouGoZN3mn/pHbL
DNtrWk2qb2qDXxq4ghSdZWEEN/k5SMc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:00 2026 by rpki-client