
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/570d0da5-fb6e-3308-ad7a-3da4d082c573.roa
File: 570d0da5-fb6e-3308-ad7a-3da4d082c573.roa (raw, json)
Hash identifier: LDadHNKTqWhcpsI9IFqy4IFucjLQ9XJA1CyogKlJFcM=
Subject key identifier: 05:52:98:59:27:6C:0C:32:3A:9E:53:EC:51:06:CF:49:E6:26:52:9A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F03A8484B6866DD30C471EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/570d0da5-fb6e-3308-ad7a-3da4d082c573.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 396593
IP address blocks: 199.7.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:48:4b:68:66:dd:30:c4:71:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=2fa4be30-9ea6-45e4-b56a-c48512290289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:12:d2:0b:fa:44:52:53:54:33:b0:d1:06:
f4:1d:5a:1d:c8:e0:f6:d0:7d:ef:f3:85:76:58:76:
f2:d3:f1:4e:f2:ec:a8:5d:63:57:98:70:d9:ee:21:
85:d4:d6:4f:51:45:d7:79:ff:c6:16:2c:f5:ae:cf:
55:77:c8:12:82:a8:2f:51:a1:0b:f4:6f:4f:99:57:
4b:5c:98:37:16:a9:22:fa:80:bc:40:c1:e9:29:01:
20:76:80:71:74:c7:33:05:20:cb:5f:8c:99:57:70:
ff:e4:5f:ce:36:56:08:91:68:b8:4c:66:58:e2:05:
7c:45:3d:65:16:e8:14:c3:bd:58:b2:d5:92:59:86:
97:40:bc:86:ba:0e:e7:fe:52:b4:95:13:f3:0f:0e:
82:74:37:9f:41:4a:fe:fc:e7:a4:d9:2e:a8:f3:0b:
26:db:75:27:68:d2:3d:42:f0:58:49:27:5b:1e:15:
95:9d:86:61:d7:20:47:ef:58:6a:04:1c:a4:69:3c:
a6:10:9a:ea:bd:b0:8f:d4:14:f0:97:b0:1e:ac:10:
1f:13:a4:80:ec:24:ee:75:0f:ea:fe:e4:a7:fa:b7:
fb:e3:8b:3f:58:1e:d7:12:a6:d2:3d:b0:38:58:a5:
4c:f6:3b:a1:0a:eb:f4:fd:76:25:36:79:02:0d:a4:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:98:59:27:6C:0C:32:3A:9E:53:EC:51:06:CF:49:E6:26:52:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/570d0da5-fb6e-3308-ad7a-3da4d082c573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:d5:4d:22:24:5f:8c:ae:b1:63:04:63:9c:ee:60:1f:24:55:
68:bf:8b:1a:7f:01:f1:b9:b6:23:e3:f6:b4:e9:ee:c0:c9:65:
d2:9a:87:32:8f:ac:bc:c1:1f:36:0b:fa:26:4a:4f:ae:be:95:
b7:a3:ec:13:12:39:1c:02:73:4d:d9:73:06:77:03:30:e2:e3:
98:1d:e3:27:c9:09:38:59:5a:86:8c:ca:df:e1:47:2e:b6:04:
23:eb:38:16:2a:d2:8c:0b:90:cc:1c:a4:bc:d9:c5:b7:cf:a6:
1e:13:67:ea:4f:66:64:b9:0b:38:bd:9c:9b:27:9e:b3:76:5c:
dd:5a:55:78:a1:06:c6:33:4d:b0:84:e4:3d:2b:76:56:87:fb:
75:c7:5a:d1:85:e5:c4:d6:08:58:38:e0:cd:57:41:b7:78:6b:
5a:26:b2:07:69:19:8d:ea:47:54:2c:a7:56:b9:88:9d:4a:04:
b2:a1:3b:32:26:a5:81:1b:d5:66:28:79:89:d5:58:1e:be:84:
ab:c0:d8:bb:24:57:5b:5c:24:63:66:48:be:8c:e9:2e:93:95:
d9:21:19:49:b7:fe:3d:d4:e3:14:db:e6:ed:6a:0d:a6:4d:ff:
2d:b6:91:e7:b6:b8:ec:ff:13:4f:64:b3:53:b0:1c:c1:10:51:
79:8d:f0:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqEhLaGbdMMRx7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
MmZhNGJlMzAtOWVhNi00NWU0LWI1NmEtYzQ4NTEyMjkwMjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+AS0gv6RFJTVDOw0Qb0HVodyOD20H3v84V2
WHby0/FO8uyoXWNXmHDZ7iGF1NZPUUXXef/GFiz1rs9Vd8gSgqgvUaEL9G9PmVdL
XJg3Fqki+oC8QMHpKQEgdoBxdMczBSDLX4yZV3D/5F/ONlYIkWi4TGZY4gV8RT1l
FugUw71YstWSWYaXQLyGug7n/lK0lRPzDw6CdDefQUr+/Oek2S6o8wsm23UnaNI9
QvBYSSdbHhWVnYZh1yBH71hqBBykaTymEJrqvbCP1BTwl7AerBAfE6SA7CTudQ/q
/uSn+rf744s/WB7XEqbSPbA4WKVM9juhCuv0/XYlNnkCDaSrBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVSmFknbAwyOp5T7FEGz0nmJlKaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTcwZDBkYTUtZmI2ZS0z
MzA4LWFkN2EtM2RhNGQwODJjNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbVTSIkX4yusWMEY5zuYB8kVWi/ixp/AfG5tiPj9rTp7sDJZdKahzKP
rLzBHzYL+iZKT66+lbej7BMSORwCc03ZcwZ3AzDi45gd4yfJCThZWoaMyt/hRy62
BCPrOBYq0owLkMwcpLzZxbfPph4TZ+pPZmS5Czi9nJsnnrN2XN1aVXihBsYzTbCE
5D0rdlaH+3XHWtGF5cTWCFg44M1XQbd4a1omsgdpGY3qR1Qsp1a5iJ1KBLKhOzIm
pYEb1WYoeYnVWB6+hKvA2LskV1tcJGNmSL6M6S6TldkhGUm3/j3U4xTb5u1qDaZN
/y22kee2uOz/E09ks1OwHMEQUXmN8Pc=
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:39:05 2026 by rpki-client