
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afb1258-d377-3e00-9ce1-8655846fe4dd.roa
File: 0afb1258-d377-3e00-9ce1-8655846fe4dd.roa (raw, json)
Hash identifier: Nk/zVD5/p95I2E0lw9f/TD+knOzqlPt1BYPc/VMjr10=
Subject key identifier: 50:11:A6:CD:00:A0:D5:0A:78:2F:43:D0:DB:9E:0E:E1:DC:ED:0F:6E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E74CF79598F82B3EB42538340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afb1258-d377-3e00-9ce1-8655846fe4dd.roa
Signing time: Fri 10 Jul 2026 21:00:12 +0000
ROA not before: Fri 10 Jul 2026 21:00:12 +0000
ROA not after: Thu 08 Oct 2026 21:00:12 +0000
asID: 396574
IP address blocks: 216.87.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:74:cf:79:59:8f:82:b3:eb:42:53:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 10 21:00:12 2026 GMT
Not After : Oct 8 21:00:12 2026 GMT
Subject: CN=0767f5ab-c013-438c-a791-308687f6155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:d3:5c:fc:e5:cf:c7:7d:bb:5a:5a:f2:8e:
ca:72:bf:86:cc:3d:c7:a4:fe:e9:b5:56:09:ac:73:
64:ec:0f:67:10:67:1d:db:a8:a3:51:5e:a8:08:10:
ee:c8:c8:38:9e:33:c0:4a:22:15:b9:11:ab:87:6c:
b5:e4:11:ee:15:07:bc:09:d5:07:2c:89:e4:f3:fd:
71:ca:fe:c4:a6:27:77:16:b6:82:ae:02:84:3a:e6:
04:fb:2c:89:19:6d:3d:11:81:a1:e6:d7:49:d6:71:
d6:a5:3f:16:1d:80:ca:90:d8:00:28:37:d4:f7:b3:
79:fb:21:d0:e2:9d:10:99:be:4d:2f:b8:44:90:10:
a9:42:0b:8c:4d:40:da:15:9b:a4:8c:c3:f2:ee:7a:
c3:fe:6d:ca:84:93:d8:b7:01:07:59:cd:4b:ac:ad:
8c:1e:e4:25:9f:db:a7:88:e8:53:32:41:bd:56:80:
5e:44:c6:e8:dd:c2:95:b8:25:75:ea:a7:76:68:e1:
d7:8c:64:3f:09:2a:19:4c:34:6f:f2:da:77:99:14:
10:0f:9e:f4:55:57:6d:c7:0a:81:38:fb:ce:e6:33:
a6:3d:6f:d3:dd:cc:f2:44:f8:32:da:38:00:0d:a1:
63:ab:fd:23:f6:07:21:d3:12:f8:a7:d3:68:61:26:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:A6:CD:00:A0:D5:0A:78:2F:43:D0:DB:9E:0E:E1:DC:ED:0F:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afb1258-d377-3e00-9ce1-8655846fe4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:1e:bf:63:96:7c:83:7a:8d:f1:ba:39:19:79:f1:ca:6b:cc:
f3:4d:b4:30:0d:38:2f:59:1c:74:36:df:f7:f2:e1:b0:c1:f3:
fc:85:20:08:01:d9:26:9b:b7:29:a1:fe:a2:db:ba:59:57:c9:
dc:46:3d:aa:82:9e:bd:99:fc:c0:d8:39:db:14:1f:d0:17:13:
77:9e:c9:e5:b9:e2:d0:40:54:93:10:e8:17:ed:45:22:7b:6d:
0b:10:79:19:c7:33:ae:fc:5d:9d:41:a1:ed:ee:f1:88:89:0e:
af:70:36:cb:92:b3:bb:04:02:a6:77:22:b9:ff:da:33:b1:c4:
b6:d1:5a:0e:f4:0f:c3:4d:5a:8c:2a:e9:ad:b8:68:57:b4:13:
76:92:31:d1:b4:1d:ac:f3:be:69:e2:a8:c0:25:1f:cc:83:48:
b9:e6:59:ef:26:c7:08:48:26:a6:25:10:e9:25:ec:7d:42:1a:
ba:0f:f8:5b:b5:b1:95:b6:02:9e:b4:9f:05:bf:56:a3:1c:eb:
2f:58:ff:c6:b0:2b:7a:5b:c8:cd:09:bd:55:61:9f:02:16:39:
39:9b:1d:15:87:70:4b:70:23:58:41:9f:af:34:fa:e6:a4:de:
a5:5d:48:95:21:45:bc:bb:7a:00:41:6f:7d:2b:28:3f:bd:1a:
70:52:ad:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3lZj4Kz60JTg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk
MDc2N2Y1YWItYzAxMy00MzhjLWE3OTEtMzA4Njg3ZjYxNTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+jTXPzlz8d9u1pa8o7Kcr+GzD3HpP7ptVYJ
rHNk7A9nEGcd26ijUV6oCBDuyMg4njPASiIVuRGrh2y15BHuFQe8CdUHLInk8/1x
yv7Epid3FraCrgKEOuYE+yyJGW09EYGh5tdJ1nHWpT8WHYDKkNgAKDfU97N5+yHQ
4p0Qmb5NL7hEkBCpQguMTUDaFZukjMPy7nrD/m3KhJPYtwEHWc1LrK2MHuQln9un
iOhTMkG9VoBeRMbo3cKVuCV16qd2aOHXjGQ/CSoZTDRv8tp3mRQQD570VVdtxwqB
OPvO5jOmPW/T3czyRPgy2jgADaFjq/0j9gch0xL4p9NoYSZy2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFARps0AoNUKeC9D0NueDuHc7Q9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFmYjEyNTgtZDM3Ny0z
ZTAwLTljZTEtODY1NTg0NmZlNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEev2OWfIN6jfG6ORl58cprzPNNtDANOC9ZHHQ23/fy4bDB8/yFIAgB
2Sabtymh/qLbullXydxGPaqCnr2Z/MDYOdsUH9AXE3eeyeW54tBAVJMQ6BftRSJ7
bQsQeRnHM678XZ1Boe3u8YiJDq9wNsuSs7sEAqZ3Irn/2jOxxLbRWg70D8NNWowq
6a24aFe0E3aSMdG0HazzvmniqMAlH8yDSLnmWe8mxwhIJqYlEOkl7H1CGroP+Fu1
sZW2Ap60nwW/VqMc6y9Y/8awK3pbyM0JvVVhnwIWOTmbHRWHcEtwI1hBn680+uak
3qVdSJUhRby7egBBb30rKD+9GnBSrek=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:52 2026 by rpki-client