
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa
File: f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa (raw, json)
Hash identifier: iuadPpRDpkGX+Frq1ggdvc/LkQAXlaN74mI7v7zd5SU=
Subject key identifier: F5:FF:DD:80:C9:01:6A:B6:2B:EB:53:4B:CF:04:05:0C:23:D7:34:28
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584E577F459CF621511BFCBCCE80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa
Signing time: Tue 30 Jun 2026 09:00:12 +0000
ROA not before: Tue 30 Jun 2026 09:00:12 +0000
ROA not after: Mon 28 Sep 2026 09:00:12 +0000
asID: 3561
IP address blocks: 208.138.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:57:7f:45:9c:f6:21:51:1b:fc:bc:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Jun 30 09:00:12 2026 GMT
Not After : Sep 28 09:00:12 2026 GMT
Subject: CN=c96fcff8-cb6e-417e-9289-ae2fdfed844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:a7:1a:1c:1f:61:80:37:ba:50:07:4b:74:
60:71:52:98:7b:b6:e5:d6:ea:83:aa:1e:71:db:84:
71:6c:5e:41:1f:2b:49:cc:63:59:92:6e:fb:08:83:
98:d7:4b:bc:9c:bc:dc:73:1b:ab:87:70:57:39:3b:
63:d3:df:87:cb:e1:d8:26:17:a4:4b:67:ef:31:26:
9f:53:49:9a:7c:02:0a:c9:63:04:71:1d:62:39:f1:
fe:ab:a4:b9:47:de:34:e8:4d:78:4a:27:8b:d8:0a:
2b:42:d1:e6:ab:2d:c9:97:7c:9e:c7:52:87:a5:72:
f9:3d:64:f8:9c:94:fe:a8:b0:e7:a9:69:b2:de:f8:
60:69:b1:23:ac:c5:bc:a3:fe:be:93:65:1e:d9:ac:
81:1c:71:9b:06:92:1a:73:ff:97:a8:b4:99:31:6d:
e0:23:d1:f0:35:65:1b:6f:5d:3c:0b:63:a3:47:e6:
34:02:a8:79:66:b3:fe:d8:c8:49:8c:21:86:21:3d:
4f:6e:a3:d6:d7:56:4d:9a:d9:9b:21:f1:6e:01:90:
62:2c:98:05:75:c4:8d:da:3b:20:04:0b:a8:4c:67:
90:59:52:d2:4f:7f:14:81:82:29:22:48:7a:79:c4:
45:86:33:0a:22:a3:76:21:29:8d:60:a0:7b:79:e0:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FF:DD:80:C9:01:6A:B6:2B:EB:53:4B:CF:04:05:0C:23:D7:34:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
208.138.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:5a:76:70:65:28:6e:0b:3e:0a:0e:a9:a0:22:e7:a2:0e:af:
f6:a9:fc:ab:9c:89:49:1c:8e:85:ef:d8:21:e5:17:7a:88:ae:
cd:40:31:a0:6a:1e:77:ae:e4:02:ea:d8:c4:e9:3c:8c:c4:64:
73:4f:44:a3:0e:d2:37:1f:0d:38:1e:0d:14:39:20:5d:02:bb:
a8:28:41:61:2a:3b:9d:31:a4:18:9b:86:87:b6:f4:0f:ec:13:
18:54:c3:dd:3b:65:f8:5c:68:bd:45:23:62:61:15:19:57:20:
29:cf:87:e2:b4:d5:ac:de:f7:f1:cb:69:ec:02:d1:3b:de:7b:
4b:3c:41:29:59:5d:a9:77:6c:56:ab:65:9c:ff:61:5c:21:e3:
31:11:6b:66:ba:57:eb:0b:bb:e0:1b:62:a3:4c:18:0d:e1:d0:
93:0d:cf:ce:5d:54:17:eb:9a:c9:74:12:be:5f:23:80:a8:70:
f6:17:73:f7:0a:a3:c5:6c:d7:41:f0:8e:a8:f9:de:e3:ff:76:
9a:73:4b:46:e4:1c:72:c3:0d:35:7c:9b:7e:fe:82:5e:87:f4:
9f:68:1f:02:37:66:77:76:98:04:99:b8:bf:84:dc:75:79:b2:
c4:d7:ff:c8:38:76:74:97:28:b3:5c:dd:a0:d1:b5:b2:96:08:
66:9c:21:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0Wc9iFRG/y8zoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
Yzk2ZmNmZjgtY2I2ZS00MTdlLTkyODktYWUyZmRmZWQ4NDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TGnGhwfYYA3ulAHS3RgcVKYe7bl1uqDqh5x
24RxbF5BHytJzGNZkm77CIOY10u8nLzccxurh3BXOTtj09+Hy+HYJhekS2fvMSaf
U0mafAIKyWMEcR1iOfH+q6S5R9406E14SieL2AorQtHmqy3Jl3yex1KHpXL5PWT4
nJT+qLDnqWmy3vhgabEjrMW8o/6+k2Ue2ayBHHGbBpIac/+XqLSZMW3gI9HwNWUb
b108C2OjR+Y0Aqh5ZrP+2MhJjCGGIT1PbqPW11ZNmtmbIfFuAZBiLJgFdcSN2jsg
BAuoTGeQWVLST38UgYIpIkh6ecRFhjMKIqN2ISmNYKB7eeAvcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPX/3YDJAWq2K+tTS88EBQwj1zQoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZjIyNmJhOWItNDJiZi0z
MjMxLWI0MDQtNWYxYTNhOGExMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0IqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxadnBlKG4LPgoOqaAi56IOr/ap/KuciUkcjoXv2CHlF3qIrs1AMaBq
Hneu5ALq2MTpPIzEZHNPRKMO0jcfDTgeDRQ5IF0Cu6goQWEqO50xpBibhoe29A/s
ExhUw907ZfhcaL1FI2JhFRlXICnPh+K01aze9/HLaewC0Tvee0s8QSlZXal3bFar
ZZz/YVwh4zERa2a6V+sLu+AbYqNMGA3h0JMNz85dVBfrmsl0Er5fI4CocPYXc/cK
o8Vs10Hwjqj53uP/dppzS0bkHHLDDTV8m37+gl6H9J9oHwI3Znd2mASZuL+E3HV5
ssTX/8g4dnSXKLNc3aDRtbKWCGacIb8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:57 2026 by rpki-client