
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa
File: 324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa (raw, json)
Hash identifier: K3yGA8gzW4DMM8HrCiS7oqIbGkK83S777UGWZbr6WzQ=
Subject key identifier: 86:5A:56:39:BF:03:47:AC:BF:5F:6B:52:14:94:11:DA:FE:77:C8:68
Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial: 010D0C9F4328584D905AA4785D7161410FD09E60
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa
Signing time: Mon 20 Apr 2026 01:00:24 +0000
ROA not before: Mon 20 Apr 2026 01:00:24 +0000
ROA not after: Sun 19 Jul 2026 01:00:24 +0000
asID: 15296
IP address blocks: 199.216.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:90:5a:a4:78:5d:71:61:41:0f:d0:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Validity
Not Before: Apr 20 01:00:24 2026 GMT
Not After : Jul 19 01:00:24 2026 GMT
Subject: CN=2f77bc14-f867-4c45-9a33-200892c71df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:4f:34:b5:1d:b3:67:b7:1c:ff:28:fa:24:
57:12:7a:be:4a:bf:49:a9:59:bf:f8:57:b8:86:c9:
a1:c5:f1:af:7f:55:b4:5f:22:86:a2:a1:24:bc:a9:
5b:cf:e1:16:58:23:19:45:9f:8a:d5:df:e2:e5:76:
6b:5b:42:e7:8a:4a:48:7d:61:5d:27:8b:a6:ce:fe:
f2:93:41:8b:05:f0:b9:d3:0d:ed:d5:7c:c8:00:55:
ba:b3:1e:b6:db:df:b6:66:0a:1f:3e:6c:45:50:e7:
8a:e0:f1:46:7a:e5:94:04:aa:26:a5:ca:f1:df:2b:
b4:83:51:32:00:d6:db:cd:70:99:74:7d:eb:d3:03:
81:4c:ce:14:48:69:9f:44:ca:93:2a:b5:74:57:7d:
ce:31:08:75:9c:5d:d6:82:d7:c3:87:2d:d5:31:b2:
e3:07:fa:2d:52:e2:3b:1c:73:a3:c4:ec:77:2d:28:
80:b3:a4:e4:07:6a:f2:0e:a1:0a:b0:f7:d4:fc:07:
5e:e9:b1:f7:20:ae:00:3c:a5:71:88:99:3d:7d:47:
f7:ea:01:0c:2c:cb:30:10:17:3c:1a:e0:30:96:bb:
21:ef:02:e9:23:51:78:39:ea:d6:32:15:84:67:3c:
67:01:26:f2:fd:d1:97:a5:a2:40:ed:d6:59:0d:ca:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:56:39:BF:03:47:AC:BF:5F:6B:52:14:94:11:DA:FE:77:C8:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
X509v3 Authority Key Identifier:
keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
sbgp-ipAddrBlock: critical
IPv4:
199.216.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:83:30:ae:5c:86:ce:f5:be:8f:a9:75:d0:2f:b4:e5:ef:4a:
02:4d:0f:0a:3a:c7:37:43:e4:00:74:6c:3d:2e:44:31:60:5d:
72:d8:d6:42:83:f5:1e:26:5c:8a:90:50:b0:00:e7:e7:44:87:
0b:a8:92:a1:ff:ad:f1:b7:23:37:d5:d9:02:39:2c:fb:fb:ec:
66:20:9a:f5:5f:4a:20:3a:00:f0:20:c1:7e:09:9a:da:e8:d7:
7c:cc:9d:ea:48:90:30:77:b9:77:f1:c2:25:b9:08:c1:72:56:
7e:fd:91:67:5b:86:5f:4b:67:a5:83:14:b5:14:98:a7:ca:4d:
b8:49:60:9e:4c:aa:6f:e2:3b:d7:de:10:79:f5:ff:f8:11:61:
8f:34:e1:24:30:fc:ac:e9:62:cd:31:88:f4:d3:57:52:3e:56:
94:45:87:7d:19:c5:6b:a9:22:65:fa:32:b5:f4:51:6c:8a:0a:
24:99:28:d2:ec:e6:37:da:47:f8:cf:b9:a5:c3:d5:5f:7c:42:
82:51:03:9b:f2:c4:ce:78:4f:68:42:fb:c5:c1:55:d9:fb:18:
01:b7:0f:4a:ad:65:0a:e5:3f:6a:ae:7e:c9:cf:38:78:4f:6c:
ec:9e:b9:5f:05:28:77:a2:37:47:6a:e3:0f:69:ec:fa:86:31:
0e:81:54:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqR4XXFhQQ/QnmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk
MmY3N2JjMTQtZjg2Ny00YzQ1LTlhMzMtMjAwODkyYzcxZGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaFPNLUds2e3HP8o+iRXEnq+Sr9JqVm/+Fe4
hsmhxfGvf1W0XyKGoqEkvKlbz+EWWCMZRZ+K1d/i5XZrW0LnikpIfWFdJ4umzv7y
k0GLBfC50w3t1XzIAFW6sx6229+2ZgofPmxFUOeK4PFGeuWUBKompcrx3yu0g1Ey
ANbbzXCZdH3r0wOBTM4USGmfRMqTKrV0V33OMQh1nF3WgtfDhy3VMbLjB/otUuI7
HHOjxOx3LSiAs6TkB2ryDqEKsPfU/Ade6bH3IK4APKVxiJk9fUf36gEMLMswEBc8
GuAwlrsh7wLpI1F4OerWMhWEZzxnASby/dGXpaJA7dZZDcp2zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZaVjm/A0esv19rUhSUEdr+d8hoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMzI0ZjllNGQtNmNmNS0z
NzYzLWJkMGEtNzBkZWYzMmU1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9hwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGDMK5chs71vo+pddAvtOXvSgJNDwo6xzdD5AB0bD0uRDFgXXLY1kKD
9R4mXIqQULAA5+dEhwuokqH/rfG3IzfV2QI5LPv77GYgmvVfSiA6APAgwX4Jmtro
13zMnepIkDB3uXfxwiW5CMFyVn79kWdbhl9LZ6WDFLUUmKfKTbhJYJ5Mqm/iO9fe
EHn1//gRYY804SQw/KzpYs0xiPTTV1I+VpRFh30ZxWupImX6MrX0UWyKCiSZKNLs
5jfaR/jPuaXD1V98QoJRA5vyxM54T2hC+8XBVdn7GAG3D0qtZQrlP2qufsnPOHhP
bOyeuV8FKHeiN0dq4w9p7PqGMQ6BVKQ=
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:48 2026 by rpki-client