
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa
File: 0254b60b-a409-3e5d-beee-47898507d1b4.roa (raw, json)
Hash identifier: oVpjByJci2ENNbI2pBox0FlT3lG30P+Fje5KJy6tbtI=
Subject key identifier: 52:F1:B1:FD:EE:02:61:63:72:9A:51:34:82:C0:C6:81:B1:E8:4A:35
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E736A39704C2035FF65470580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa
Signing time: Fri 10 Jul 2026 09:00:12 +0000
ROA not before: Fri 10 Jul 2026 09:00:12 +0000
ROA not after: Thu 08 Oct 2026 09:00:12 +0000
asID: 3855
IP address blocks: 199.172.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:73:6a:39:70:4c:20:35:ff:65:47:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jul 10 09:00:12 2026 GMT
Not After : Oct 8 09:00:12 2026 GMT
Subject: CN=3601265a-5639-4770-876f-a8c87e0791fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:9a:b8:a2:fc:da:db:54:c3:2f:2f:56:38:
96:c7:0e:ea:78:e2:9e:37:03:2c:8c:f5:38:70:64:
11:97:5f:5c:5f:66:67:9d:4a:ca:a8:7f:d7:7c:b8:
96:00:8a:ef:88:d8:71:a5:36:7f:19:a8:eb:3e:e6:
08:24:df:f4:2c:ef:a1:fc:42:72:32:b4:93:ef:98:
fc:87:a8:86:10:3e:a6:a9:20:78:37:9f:f4:92:42:
7a:73:e7:46:08:fe:ac:e7:95:f3:d7:cb:4a:42:c7:
be:08:45:ec:05:74:24:6f:1a:d4:90:18:7f:19:f7:
38:1c:57:4e:b0:cd:93:71:e3:4a:b7:7e:fe:d1:83:
e9:b9:5c:84:d6:52:69:b1:05:cd:28:5a:4c:48:ad:
52:22:d0:c4:70:db:1f:ac:0e:23:a6:73:8f:db:95:
f9:d0:ba:3b:42:a6:71:d6:c0:8f:9e:b3:93:65:30:
c2:91:e9:bf:19:d7:e8:a2:5d:7a:1b:10:62:a6:51:
34:15:7d:df:89:ca:8a:31:6d:93:4c:82:40:eb:eb:
6d:82:32:f1:fe:5e:ca:28:32:aa:4b:95:32:99:14:
ef:72:3f:b8:50:e3:33:7a:e5:fd:ed:17:dd:03:6c:
40:07:e3:7a:a8:d4:c1:d5:7d:8a:4e:df:65:c7:2f:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F1:B1:FD:EE:02:61:63:72:9A:51:34:82:C0:C6:81:B1:E8:4A:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:b7:fe:ff:a4:38:5b:cd:57:ed:7e:f9:5a:6f:b9:4e:ca:a0:
27:1f:16:94:f6:87:f2:d3:1c:3e:c3:8f:3c:06:30:3b:f1:72:
aa:fc:d2:5c:71:9e:a1:47:09:94:ea:c9:50:85:5b:a8:b4:b1:
41:4e:c1:67:52:e4:33:37:65:5f:a4:08:21:04:f1:8b:a7:6a:
f4:4f:20:54:c9:d6:f3:90:86:19:8e:95:e5:79:2b:29:de:8c:
81:db:24:b8:b1:61:08:71:7b:13:86:0a:bf:59:bb:61:25:f6:
51:d4:1e:b3:60:39:60:93:a7:b7:7c:6d:76:eb:48:ac:36:76:
29:d9:cf:69:87:11:85:93:7c:f0:ce:ef:1e:e2:31:62:9e:20:
c0:b7:52:50:d5:7e:b9:d5:ad:ee:88:82:35:77:80:a2:2a:e4:
d7:49:2b:55:ab:60:6c:35:e9:77:b2:46:77:82:fe:c6:1b:96:
85:a6:a1:a0:54:c9:87:cc:a5:b8:47:6c:9e:5c:86:50:d9:7b:
3f:a0:c0:68:02:87:09:70:42:bd:dd:79:50:82:c1:ab:ae:e9:
0a:9a:9b:08:bf:b3:05:d9:f8:3e:da:5d:22:b1:1e:00:f8:b3:
00:d1:9d:ab:56:ff:3e:5f:37:5f:9c:7b:b6:a1:2e:b0:27:b1:
7f:65:a5:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajlwTCA1/2VHBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
MzYwMTI2NWEtNTYzOS00NzcwLTg3NmYtYThjODdlMDc5MWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPaauKL82ttUwy8vVjiWxw7qeOKeNwMsjPU4
cGQRl19cX2ZnnUrKqH/XfLiWAIrviNhxpTZ/GajrPuYIJN/0LO+h/EJyMrST75j8
h6iGED6mqSB4N5/0kkJ6c+dGCP6s55Xz18tKQse+CEXsBXQkbxrUkBh/Gfc4HFdO
sM2TceNKt37+0YPpuVyE1lJpsQXNKFpMSK1SItDEcNsfrA4jpnOP25X50Lo7QqZx
1sCPnrOTZTDCkem/Gdfool16GxBiplE0FX3ficqKMW2TTIJA6+ttgjLx/l7KKDKq
S5UymRTvcj+4UOMzeuX97RfdA2xAB+N6qNTB1X2KTt9lxy9xoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLxsf3uAmFjcppRNILAxoGx6Eo1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDI1NGI2MGItYTQwOS0z
ZTVkLWJlZWUtNDc4OTg1MDdkMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJi3/v+kOFvNV+1++VpvuU7KoCcfFpT2h/LTHD7DjzwGMDvxcqr80lxx
nqFHCZTqyVCFW6i0sUFOwWdS5DM3ZV+kCCEE8YunavRPIFTJ1vOQhhmOleV5Kyne
jIHbJLixYQhxexOGCr9Zu2El9lHUHrNgOWCTp7d8bXbrSKw2dinZz2mHEYWTfPDO
7x7iMWKeIMC3UlDVfrnVre6IgjV3gKIq5NdJK1WrYGw16XeyRneC/sYbloWmoaBU
yYfMpbhHbJ5chlDZez+gwGgChwlwQr3deVCCwauu6Qqamwi/swXZ+D7aXSKxHgD4
swDRnatW/z5fN1+ce7ahLrAnsX9lpec=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:36:42 2026 by rpki-client