
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa
File: 339c2a74-2946-3eea-b96c-e0a5daeb337d.roa (raw, json)
Hash identifier: UUIT9n6/mn0pEDC00TF8swjd60ze3jzJFFAfc4MiQ0E=
Subject key identifier: 28:4D:78:56:B3:8C:43:06:F4:D4:BF:DB:4A:F7:0C:1D:36:65:F9:98
Certificate issuer: /CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
Certificate serial: 010D0C9F4328584AB693CB7B68EF26C49D688980
Authority key identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa
Signing time: Fri 01 Aug 2025 14:00:28 +0000
ROA not before: Fri 01 Aug 2025 14:00:28 +0000
ROA not after: Thu 30 Oct 2025 14:00:28 +0000
asID: 15830
IP address blocks: 209.196.248.0/24 maxlen: 24
209.196.249.0/24 maxlen: 24
209.196.250.0/24 maxlen: 24
209.196.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 22 Aug 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:b6:93:cb:7b:68:ef:26:c4:9d:68:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
Validity
Not Before: Aug 1 14:00:28 2025 GMT
Not After : Oct 30 14:00:28 2025 GMT
Subject: CN=0fe0e497-6d9e-4c27-b1dc-edf2136516d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:28:ad:cf:36:08:8c:95:3f:da:1a:a0:0e:
59:0d:76:53:a4:df:58:bb:58:06:06:0d:ce:bd:83:
4d:00:20:ce:96:1e:a1:2d:68:f0:71:45:0d:dc:70:
2f:c9:59:2b:94:ca:d2:36:c0:7b:ea:1e:6c:c8:d8:
ac:c6:4c:25:eb:4c:ce:47:e1:b4:d0:b2:72:09:22:
ab:bb:72:56:b0:30:f2:58:7e:03:91:8c:d6:21:8f:
68:31:ca:1f:9b:5b:f0:18:28:d4:f9:04:2c:81:58:
b0:cb:dc:75:22:b1:39:11:9b:1d:df:75:20:2c:31:
15:39:07:c0:5c:e7:5c:01:e2:e6:77:26:89:72:40:
2d:8b:19:a5:95:e4:16:2b:f1:60:88:00:e0:43:e6:
c3:f2:50:4a:5e:0f:48:76:93:85:25:e2:0e:f8:cf:
9d:22:f7:cf:b9:c9:ee:ab:a5:c1:68:f1:08:84:fa:
18:db:35:ba:07:6f:29:4f:54:bd:f9:e8:47:29:32:
f1:ee:bc:2a:a7:25:96:34:a1:07:21:05:dc:57:ef:
f0:82:99:53:2e:d9:ce:c7:cc:ad:c1:d0:5b:3f:8f:
00:4a:03:da:69:80:04:e5:aa:00:59:27:c2:9f:a9:
db:b6:d0:aa:9f:7a:00:0e:95:51:28:04:89:c5:17:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:78:56:B3:8C:43:06:F4:D4:BF:DB:4A:F7:0C:1D:36:65:F9:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl
X509v3 Authority Key Identifier:
keyid:08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
sbgp-ipAddrBlock: critical
IPv4:
209.196.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:3d:73:35:f7:b6:73:00:d9:a7:3c:0c:77:41:89:c0:c4:68:
90:18:5b:0a:a0:40:ec:3b:ce:f8:fc:91:32:86:9a:3d:6c:4e:
c7:7f:39:29:7c:7d:a9:0c:82:ba:cd:37:94:a1:a4:80:e8:38:
e2:76:3a:45:9b:07:b4:41:3e:6e:06:ea:bf:47:7d:94:21:fd:
70:1a:73:bb:1b:52:a0:67:82:3b:e3:f4:7f:b2:cd:0a:cf:34:
89:34:88:5e:3f:8d:2c:1b:70:36:c5:ed:c0:09:ec:83:25:cd:
bf:05:69:03:f4:6a:0f:2f:33:fb:c7:aa:2a:67:a6:b1:af:65:
6f:9c:41:2b:e4:de:83:81:1a:f4:24:33:ae:16:34:74:30:1b:
de:fa:18:32:ad:86:95:e5:38:36:98:d2:98:69:b2:76:ef:c2:
1c:1f:53:8e:e8:c3:5f:47:24:dc:df:e1:15:e1:a9:66:86:b1:
23:9d:a2:1b:74:12:cb:a8:49:c8:d5:45:03:bd:09:24:20:b2:
3c:7b:d9:e3:e5:5f:c8:ef:20:e0:5d:a3:5f:de:0f:6e:5a:80:
f2:11:91:d4:16:60:15:1e:19:f6:20:d3:e5:c0:04:94:30:4d:
50:7a:30:fa:e8:08:3d:40:bc:20:77:e4:9c:39:62:7f:5d:6f:
b3:2f:21:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2k8t7aO8mxJ1oiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM0OTBhZTMtNDFjZC00ZTlhLThkY2UtM2M5YzdmN2Ex
MGVlMB4XDTI1MDgwMTE0MDAyOFoXDTI1MTAzMDE0MDAyOFowLzEtMCsGA1UEAxMk
MGZlMGU0OTctNmQ5ZS00YzI3LWIxZGMtZWRmMjEzNjUxNmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Iorc82CIyVP9oaoA5ZDXZTpN9Yu1gGBg3O
vYNNACDOlh6hLWjwcUUN3HAvyVkrlMrSNsB76h5syNisxkwl60zOR+G00LJyCSKr
u3JWsDDyWH4DkYzWIY9oMcofm1vwGCjU+QQsgViwy9x1IrE5EZsd33UgLDEVOQfA
XOdcAeLmdyaJckAtixmlleQWK/FgiADgQ+bD8lBKXg9IdpOFJeIO+M+dIvfPucnu
q6XBaPEIhPoY2zW6B28pT1S9+ehHKTLx7rwqpyWWNKEHIQXcV+/wgplTLtnOx8yt
wdBbP48ASgPaaYAE5aoAWSfCn6nbttCqn3oADpVRKASJxRfp3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChNeFazjEMG9NS/20r3DB02ZfmYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMzQ5
MGFlMy00MWNkLTRlOWEtOGRjZS0zYzljN2Y3YTEwZWUvMzM5YzJhNzQtMjk0Ni0z
ZWVhLWI5NmMtZTBhNWRhZWIzMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDM0OTBhZTMtNDFjZC00ZTlhLThk
Y2UtM2M5YzdmN2ExMGVlLzAzNDkwYWUzLTQxY2QtNGU5YS04ZGNlLTNjOWM3Zjdh
MTBlZS5jcmwwHwYDVR0jBBgwFoAUCMgdkTMaTG77iXh1OLCvLiuV+wswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wMzQ5MGFlMy00MWNkLTRlOWEtOGRjZS0zYzlj
N2Y3YTEwZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0cT4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIc9czX3tnMA2ac8DHdBicDEaJAYWwqgQOw7zvj8kTKGmj1sTsd/OSl8
fakMgrrNN5ShpIDoOOJ2OkWbB7RBPm4G6r9HfZQh/XAac7sbUqBngjvj9H+yzQrP
NIk0iF4/jSwbcDbF7cAJ7IMlzb8FaQP0ag8vM/vHqipnprGvZW+cQSvk3oOBGvQk
M64WNHQwG976GDKthpXlODaY0phpsnbvwhwfU47ow19HJNzf4RXhqWaGsSOdoht0
EsuoScjVRQO9CSQgsjx72ePlX8jvIOBdo1/eD25agPIRkdQWYBUeGfYg0+XABJQw
TVB6MProCD1AvCB35Jw5Yn9db7MvIfc=
-----END CERTIFICATE-----
Generated at Wed Aug 20 02:46:06 2025 by rpki-client