
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa
File: 2d0999fc-6ff4-35a6-93fa-3979f0432902.roa (raw, json)
Hash identifier: DqOgwQaxeCJW5AtTSyA+GF99ProVfQiKk/T7tIRQ2rs=
Subject key identifier: 4C:5E:65:E0:90:94:65:C5:77:D8:3B:9F:07:F0:E4:62:9E:3C:0A:33
Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial: 010D0C9F4328584E5FDF5E0ACD96AB3651BD1080
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa
Signing time: Fri 03 Jul 2026 09:00:12 +0000
ROA not before: Fri 03 Jul 2026 09:00:12 +0000
ROA not after: Thu 01 Oct 2026 09:00:12 +0000
asID: 16509
IP address blocks: 208.81.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5f:df:5e:0a:cd:96:ab:36:51:bd:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
Validity
Not Before: Jul 3 09:00:12 2026 GMT
Not After : Oct 1 09:00:12 2026 GMT
Subject: CN=dfe42889-0964-4680-bf3c-c0baecb5b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:53:d9:e5:62:5d:7f:0d:db:c8:c6:6b:83:fa:
c3:e0:17:c7:a1:a4:a0:f5:c6:fc:5b:aa:8c:50:e3:
54:66:01:2f:81:c4:fd:eb:9a:2f:7a:00:c4:bb:94:
55:02:c8:30:ed:b7:69:a1:b3:bb:43:6a:34:d4:58:
3a:b2:79:24:1d:a6:50:3c:2f:42:d8:06:b6:cc:f3:
43:c9:6c:85:77:d0:43:f3:31:8e:a2:d0:2a:fc:b6:
85:34:20:55:e7:64:23:e2:c1:f0:87:7d:f9:45:c3:
db:ba:85:9e:a4:3b:c3:28:e3:b1:ec:d3:16:b5:4d:
87:5c:60:19:2d:94:00:3f:06:ef:0a:a7:70:a5:e9:
ed:51:3e:3b:54:76:11:11:12:f4:d4:fb:b7:a5:76:
c6:d0:2f:ba:c0:56:67:a4:30:b1:bf:83:0b:47:47:
de:48:d4:f9:75:00:13:07:bd:d2:3f:ec:d7:da:41:
55:14:dd:79:05:3c:1c:d4:6c:99:18:66:c4:99:f2:
ec:66:fc:73:38:38:8f:e9:24:a0:f3:44:e3:e8:a3:
b3:fb:69:ce:77:62:82:db:b8:71:15:69:ad:51:2b:
c5:74:fa:d0:46:a7:94:a2:3a:8c:99:08:6c:9e:72:
4b:ba:be:6c:ed:1a:67:c7:12:13:00:58:6c:50:c4:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:65:E0:90:94:65:C5:77:D8:3B:9F:07:F0:E4:62:9E:3C:0A:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
X509v3 Authority Key Identifier:
keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.81.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f8:00:8f:e3:52:98:5e:dd:3d:9b:56:b5:c5:11:9b:4e:b5:
8b:36:73:d5:1b:cb:aa:8a:f3:ab:79:8a:6c:31:78:2d:5a:60:
6d:bf:ab:dc:39:ef:0f:c0:cc:7c:33:ed:50:26:4c:0b:77:97:
8c:7d:db:37:fc:66:a2:15:83:c9:25:53:26:45:6d:a0:ac:e3:
e0:8e:76:4b:7d:a0:95:92:18:7f:30:f2:8b:17:2a:04:39:b5:
82:3c:f0:b3:89:9e:9a:9d:62:18:80:6c:7a:bf:4a:3e:6b:d0:
1e:dc:55:a7:f5:ca:9c:4f:19:36:e3:2a:87:a4:d2:1d:c6:0a:
91:21:3e:6e:27:e3:85:90:be:ae:84:77:91:50:e3:96:11:ba:
6e:0c:20:df:39:a1:66:4f:38:63:c8:1f:65:3e:43:0c:11:d4:
54:1f:20:cc:c7:b5:56:15:c2:1e:8c:c6:6f:a9:e4:bc:7c:0c:
eb:90:62:63:8a:cf:1e:4e:c7:ab:bf:80:b8:a6:80:52:24:d6:
51:ac:5a:28:48:a5:92:60:05:9d:2f:a9:27:0d:0e:eb:95:45:
ac:5a:42:8d:91:00:25:1e:37:06:56:06:d1:82:3d:13:60:20:
80:c2:53:09:45:3f:ec:bd:8f:b5:e9:f7:f1:ee:71:93:6f:a4:
4c:7f:3e:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f314KzZarNlG9EIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1
ZjNkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
ZGZlNDI4ODktMDk2NC00NjgwLWJmM2MtYzBiYWVjYjViNTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VPZ5WJdfw3byMZrg/rD4BfHoaSg9cb8W6qM
UONUZgEvgcT965ovegDEu5RVAsgw7bdpobO7Q2o01Fg6snkkHaZQPC9C2Aa2zPND
yWyFd9BD8zGOotAq/LaFNCBV52Qj4sHwh335RcPbuoWepDvDKOOx7NMWtU2HXGAZ
LZQAPwbvCqdwpentUT47VHYRERL01Pu3pXbG0C+6wFZnpDCxv4MLR0feSNT5dQAT
B73SP+zX2kFVFN15BTwc1GyZGGbEmfLsZvxzODiP6SSg80Tj6KOz+2nOd2KC27hx
FWmtUSvFdPrQRqeUojqMmQhsnnJLur5s7RpnxxITAFhsUMQoJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExeZeCQlGXFd9g7nwfw5GKePAozMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky
NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMmQwOTk5ZmMtNmZmNC0z
NWE2LTkzZmEtMzk3OWYwNDMyOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0
NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3
NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm
NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf4AI/jUphe3T2bVrXFEZtOtYs2c9Uby6qK86t5imwxeC1aYG2/q9w5
7w/AzHwz7VAmTAt3l4x92zf8ZqIVg8klUyZFbaCs4+COdkt9oJWSGH8w8osXKgQ5
tYI88LOJnpqdYhiAbHq/Sj5r0B7cVaf1ypxPGTbjKoek0h3GCpEhPm4n44WQvq6E
d5FQ45YRum4MIN85oWZPOGPIH2U+QwwR1FQfIMzHtVYVwh6Mxm+p5Lx8DOuQYmOK
zx5Ox6u/gLimgFIk1lGsWihIpZJgBZ0vqScNDuuVRaxaQo2RACUeNwZWBtGCPRNg
IIDCUwlFP+y9j7Xp9/HucZNvpEx/PkA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:19 2026 by rpki-client