
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa
File: 305a652b-8f6d-3a59-84d7-290880080ccf.roa (raw, json)
Hash identifier: D1sdINR0kruMIo2G4/NCtYl+oe88kP4+oScQbJDXNkI=
Subject key identifier: 06:76:08:A0:46:CB:2B:83:B8:3E:0E:67:12:82:6A:95:95:E6:42:1A
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F4328584ECD3725CFB5178C322E36D440
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa
Signing time: Tue 11 Aug 2026 13:00:11 +0000
ROA not before: Tue 11 Aug 2026 13:00:11 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 396259
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:37:25:cf:b5:17:8c:32:2e:36:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Aug 11 13:00:11 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=25868a06-400b-4654-a8ab-7b903d88543e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:12:05:9b:a4:bf:5d:de:b0:25:65:99:c0:
27:9b:c0:c4:4e:eb:ae:49:a7:86:6e:ce:2c:85:7a:
ff:6b:59:32:fd:4e:18:cb:2f:46:ca:d4:df:d1:9a:
1f:41:81:66:56:06:85:d8:23:d1:28:51:6c:fe:65:
40:53:82:3d:d0:7e:b6:c0:5f:da:97:da:16:2e:98:
cd:09:0c:83:1e:3b:39:36:80:fe:58:3b:02:34:1c:
cb:8b:aa:fa:2e:eb:7d:47:ff:cf:57:f9:75:18:16:
fc:43:43:0f:d9:12:20:74:5c:54:af:87:87:77:c7:
13:96:63:66:82:c8:aa:ee:4d:8d:4a:ca:3f:e4:ff:
5e:43:02:16:94:4e:ed:8f:a8:bf:ee:da:b7:7b:c1:
92:35:0e:37:f8:9c:b6:ef:3a:4d:e8:96:3e:c5:0b:
42:9f:9b:4d:d7:0b:cf:be:d4:95:e5:3b:7a:eb:6d:
47:a5:47:76:9d:fa:31:58:3f:48:eb:29:bb:b6:6c:
45:9d:2a:2e:79:9e:69:62:3b:00:cd:03:e6:ad:3a:
67:0f:a7:72:c3:eb:8a:7d:53:86:a8:2a:49:6b:b0:
fd:39:5e:82:46:b6:8c:83:aa:6a:66:ea:4f:66:d8:
e9:66:8c:c9:7d:d8:49:d8:fb:7e:bd:1a:44:18:c2:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:08:A0:46:CB:2B:83:B8:3E:0E:67:12:82:6A:95:95:E6:42:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:8c:22:e9:be:d5:70:00:45:70:24:a7:92:40:13:48:2b:fb:
28:75:fd:7c:0f:7c:fd:90:97:3e:4c:32:ab:8a:58:a6:a7:93:
56:de:a4:40:dd:b9:7b:32:80:40:ac:ed:a8:1e:6e:25:d7:89:
41:e1:87:cd:e1:4a:fc:b0:a6:cf:51:32:f5:2e:8a:29:ce:6b:
b1:9f:a9:11:dc:39:ea:5d:61:22:e8:9a:0c:65:16:28:d1:ea:
eb:82:02:43:87:d3:69:bc:b3:65:b4:a4:4f:a7:b0:6b:7a:fd:
88:76:ad:fe:bb:78:d7:c2:89:c8:4c:8a:9b:01:08:a3:69:32:
6f:52:33:da:29:31:5e:81:49:82:9b:f4:ec:f9:0f:8f:08:f1:
87:ef:90:93:84:f5:95:56:c0:04:d5:77:b6:1e:cf:fc:2f:33:
21:7c:ca:3e:a0:2a:c6:ee:76:88:68:0e:c6:af:96:27:e9:21:
3d:44:bf:7c:29:c3:81:38:37:d0:03:e9:2b:cf:91:7a:fe:09:
9d:da:49:61:81:7f:da:0d:58:dc:41:6d:ad:31:ec:82:18:d3:
6f:87:56:86:03:89:01:c7:6b:ca:a7:c2:a3:4a:cf:53:73:84:
ea:da:9b:ce:4a:9d:b1:dd:2b:f4:03:3b:fa:c5:07:bd:76:5f:
2e:6e:a7:bb
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7NNyXPtReMMi421EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm
NDdkMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
MjU4NjhhMDYtNDAwYi00NjU0LWE4YWItN2I5MDNkODg1NDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ0SBZukv13esCVlmcAnm8DETuuuSaeGbs4s
hXr/a1ky/U4Yyy9GytTf0ZofQYFmVgaF2CPRKFFs/mVAU4I90H62wF/al9oWLpjN
CQyDHjs5NoD+WDsCNBzLi6r6Lut9R//PV/l1GBb8Q0MP2RIgdFxUr4eHd8cTlmNm
gsiq7k2NSso/5P9eQwIWlE7tj6i/7tq3e8GSNQ43+Jy27zpN6JY+xQtCn5tN1wvP
vtSV5Tt6621HpUd2nfoxWD9I6ym7tmxFnSoueZ5pYjsAzQPmrTpnD6dyw+uKfVOG
qCpJa7D9OV6CRraMg6pqZupPZtjpZozJfdhJ2Pt+vRpEGMJjAQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAZ2CKBGyyuDuD4OZxKCapWV5kIaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh
NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMzA1YTY1MmItOGY2ZC0z
YTU5LTg0ZDctMjkwODgwMDgwY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk
MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5
ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5
MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD
izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGOMIum+1XAARXAkp5JAE0gr+yh1/XwPfP2Qlz5MMquKWKan
k1bepEDduXsygECs7agebiXXiUHhh83hSvywps9RMvUuiinOa7GfqRHcOepdYSLo
mgxlFijR6uuCAkOH02m8s2W0pE+nsGt6/Yh2rf67eNfCichMipsBCKNpMm9SM9op
MV6BSYKb9Oz5D48I8YfvkJOE9ZVWwATVd7Yez/wvMyF8yj6gKsbudohoDsavlifp
IT1Ev3wpw4E4N9AD6SvPkXr+CZ3aSWGBf9oNWNxBba0x7IIY02+HVoYDiQHHa8qn
wqNKz1NzhOram85KnbHdK/QDO/rFB712Xy5up7s=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:26:12 2026 by rpki-client