
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/f3097be5-6d5c-3f57-a4fd-20bf21330945.roa
File: f3097be5-6d5c-3f57-a4fd-20bf21330945.roa (raw, json)
Hash identifier: v406Rzg7O65zmxiQAXDWjKk1qNsQvquak1hkgb32TUw=
Subject key identifier: D6:6E:E4:C1:D1:34:75:C2:81:ED:96:8A:26:5D:98:BF:E3:17:26:16
Certificate issuer: /CN=418536e3-a238-4d5c-85de-f77873e419af
Certificate serial: 010D0C9F4328584DDBBB22535022A9A6854EFEA0
Authority key identifier: 86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/f3097be5-6d5c-3f57-a4fd-20bf21330945.roa
Signing time: Sun 17 May 2026 01:00:24 +0000
ROA not before: Sun 17 May 2026 01:00:24 +0000
ROA not after: Sat 15 Aug 2026 01:00:24 +0000
asID: 21777
IP address blocks: 199.189.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:db:bb:22:53:50:22:a9:a6:85:4e:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418536e3-a238-4d5c-85de-f77873e419af
Validity
Not Before: May 17 01:00:24 2026 GMT
Not After : Aug 15 01:00:24 2026 GMT
Subject: CN=9b9a13ad-b2de-42a0-9f70-3fbe5e10e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:7b:db:00:49:b8:c0:be:99:82:03:34:e8:
ee:89:d4:fd:67:85:e5:72:cd:9f:7e:21:73:f5:22:
9e:15:4a:6b:f9:55:d2:53:ed:7d:db:a8:98:69:42:
f6:cf:b5:34:9a:81:9f:54:89:d7:e2:20:55:4c:33:
67:35:97:5a:5d:f1:27:87:1c:f6:73:79:2c:6e:46:
0a:00:9b:a2:28:06:8f:90:4e:a5:22:02:64:eb:9c:
ff:11:a6:63:39:23:48:2b:3c:0c:be:6c:68:f6:d3:
56:8b:bc:bc:63:69:4e:c2:d8:2d:be:c0:11:83:a4:
c7:20:68:e7:73:d7:a5:b6:91:60:e9:6a:a9:ac:d5:
bc:90:7d:1e:7d:c9:2b:f7:68:01:f7:49:fe:fc:e6:
9c:40:f1:04:5c:bd:9a:f5:8e:b4:95:8f:f3:fb:44:
a2:72:b9:84:44:a1:23:ba:5c:ee:64:10:01:0d:d1:
d1:b8:25:ac:f5:65:4d:01:cb:32:3c:67:82:08:a7:
61:de:f1:91:c9:0c:c6:e7:41:23:a1:26:4c:66:35:
54:29:cc:19:2c:5b:5f:54:57:fe:9e:a9:0b:4a:d2:
aa:a3:ca:79:05:98:86:9b:32:00:89:38:53:be:66:
a2:42:4d:a8:69:c8:36:d5:a9:11:40:7d:a4:ed:40:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:E4:C1:D1:34:75:C2:81:ED:96:8A:26:5D:98:BF:E3:17:26:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/f3097be5-6d5c-3f57-a4fd-20bf21330945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl
X509v3 Authority Key Identifier:
keyid:86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:c0:07:98:3c:51:d0:86:e1:e4:28:f3:3b:8a:43:62:d0:97:
45:82:64:f0:89:99:a6:fb:91:45:7e:fb:87:db:8c:b0:a9:92:
3d:fe:fb:6d:c2:a8:f0:ea:87:d5:7b:03:8e:88:23:3a:ef:74:
c4:9e:db:d5:dc:86:48:1e:be:36:7b:ef:38:54:af:9b:f7:a6:
8a:a5:f7:1c:ea:16:00:39:5d:6f:42:16:b1:79:8e:dd:fb:06:
ec:aa:14:ff:6a:87:7e:54:6a:14:ae:00:7b:63:f3:27:1c:eb:
2c:04:72:22:f6:d2:21:58:af:db:16:c9:95:c2:4d:80:71:2c:
f9:eb:30:0e:2d:b4:ae:30:e5:ed:df:b2:7a:9c:5c:49:b1:de:
4f:a0:fe:25:ef:3e:77:56:66:11:28:ef:34:0a:d1:95:87:b4:
be:fb:0d:6f:1a:18:d8:e4:af:f5:c5:36:61:57:73:08:ff:3e:
58:be:2c:a4:4e:09:75:9f:2b:30:95:94:3f:af:3d:37:b9:87:
53:71:dc:82:c3:0f:91:77:73:2e:aa:da:9f:d5:d2:17:0a:d7:
ea:f2:20:b8:3b:f9:88:18:59:51:15:3f:05:cf:e8:62:cc:40:
7b:05:19:f9:c7:8e:f2:a4:af:6f:27:09:dc:1f:a6:43:2f:7b:
da:b6:a5:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3buyJTUCKppoVO/qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE4NTM2ZTMtYTIzOC00ZDVjLTg1ZGUtZjc3ODczZTQx
OWFmMB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk
OWI5YTEzYWQtYjJkZS00MmEwLTlmNzAtM2ZiZTVlMTBlNGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjZ72wBJuMC+mYIDNOjuidT9Z4Xlcs2ffiFz
9SKeFUpr+VXSU+1926iYaUL2z7U0moGfVInX4iBVTDNnNZdaXfEnhxz2c3ksbkYK
AJuiKAaPkE6lIgJk65z/EaZjOSNIKzwMvmxo9tNWi7y8Y2lOwtgtvsARg6THIGjn
c9eltpFg6WqprNW8kH0efckr92gB90n+/OacQPEEXL2a9Y60lY/z+0SicrmERKEj
ulzuZBABDdHRuCWs9WVNAcsyPGeCCKdh3vGRyQzG50EjoSZMZjVUKcwZLFtfVFf+
nqkLStKqo8p5BZiGmzIAiThTvmaiQk2oacg21akRQH2k7UDWHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZu5MHRNHXCge2WiiZdmL/jFyYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1
MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4NzNlNDE5YWYvZjMwOTdiZTUtNmQ1Yy0z
ZjU3LWE0ZmQtMjBiZjIxMzMwOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDE4NTM2ZTMtYTIzOC00ZDVjLTg1
ZGUtZjc3ODczZTQxOWFmLzQxODUzNmUzLWEyMzgtNGQ1Yy04NWRlLWY3Nzg3M2U0
MTlhZi5jcmwwHwYDVR0jBBgwFoAUhjAIR5YIkb8ZXILef1JZwTB2/i4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4
NzNlNDE5YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx70eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnAB5g8UdCG4eQo8zuKQ2LQl0WCZPCJmab7kUV++4fbjLCpkj3++23C
qPDqh9V7A46IIzrvdMSe29XchkgevjZ77zhUr5v3poql9xzqFgA5XW9CFrF5jt37
BuyqFP9qh35UahSuAHtj8ycc6ywEciL20iFYr9sWyZXCTYBxLPnrMA4ttK4w5e3f
snqcXEmx3k+g/iXvPndWZhEo7zQK0ZWHtL77DW8aGNjkr/XFNmFXcwj/Pli+LKRO
CXWfKzCVlD+vPTe5h1Nx3ILDD5F3cy6q2p/V0hcK1+ryILg7+YgYWVEVPwXP6GLM
QHsFGfnHjvKkr28nCdwfpkMve9q2pRQ=
-----END CERTIFICATE-----
Generated at Mon Jun 1 22:04:27 2026 by rpki-client