
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa
File: 2ddea806-81f0-34de-aed2-4e3ace1914b0.roa (raw, json)
Hash identifier: K7kK1JHgd/7Xf6ykMQ4x8MdAHqQ71GtqiwSx4EIpLMY=
Subject key identifier: 0B:95:86:D0:B2:EF:43:A6:0A:A3:A8:57:B6:B0:D1:93:BB:24:21:B7
Certificate issuer: /CN=b59f0cf0-b1db-4139-bfc6-e624159d7343
Certificate serial: 010D0C9F4328584E7634DE68F1CE22B70C5CF000
Authority key identifier: AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa
Signing time: Sat 11 Jul 2026 09:00:12 +0000
ROA not before: Sat 11 Jul 2026 09:00:12 +0000
ROA not after: Fri 09 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 168.151.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:76:34:de:68:f1:ce:22:b7:0c:5c:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59f0cf0-b1db-4139-bfc6-e624159d7343
Validity
Not Before: Jul 11 09:00:12 2026 GMT
Not After : Oct 9 09:00:12 2026 GMT
Subject: CN=8b24fb52-449f-48c3-898b-60bddb2b9f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:f3:86:43:6c:ea:3c:2f:7e:9c:f4:2b:26:
14:bc:28:4f:cc:ea:fa:dc:2f:3f:16:3f:34:24:02:
4c:d2:85:2f:29:7b:ba:b4:ff:31:25:30:7c:fc:b2:
5a:2c:2a:0a:9b:20:7f:d5:36:51:5f:be:4c:67:b5:
9b:92:66:d8:5f:00:06:4a:7a:d4:20:64:e4:c5:c6:
04:d0:b7:2f:d9:e9:c3:61:53:71:59:99:d6:52:61:
c9:28:92:39:23:ff:09:a8:c9:ac:25:ce:58:77:e5:
b2:fa:92:43:00:0b:9b:cc:e6:1b:ed:03:cd:16:c5:
36:b7:e5:a3:1e:87:f7:33:5e:dc:2d:82:7c:69:f1:
ee:44:43:27:54:9f:09:99:36:68:68:61:5a:f4:b4:
cb:04:60:6e:eb:75:cf:55:2f:23:60:7e:3a:7f:db:
ec:c6:1c:4b:00:19:a0:b7:a3:2b:c0:7c:37:aa:13:
6d:06:69:56:4c:b8:cb:90:e6:ae:c2:5e:95:5c:1d:
97:76:aa:22:b7:81:3c:f7:e8:7f:e1:e9:4f:46:b4:
cc:5a:17:32:24:c2:15:6a:43:3a:d0:3e:45:32:5f:
13:14:89:87:45:20:3c:3e:ae:53:d2:4f:18:ca:9f:
d6:e4:dd:9c:57:48:b9:65:9c:dd:26:bb:60:04:e6:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:86:D0:B2:EF:43:A6:0A:A3:A8:57:B6:B0:D1:93:BB:24:21:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl
X509v3 Authority Key Identifier:
keyid:AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer
sbgp-ipAddrBlock: critical
IPv4:
168.151.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ec:d3:c6:aa:68:f2:de:89:9e:2d:fb:1e:9a:59:99:48:c9:
39:b5:b1:48:fa:fe:65:69:3d:35:52:5b:57:81:b4:30:57:02:
97:40:e1:f7:4e:c2:e4:db:36:da:3b:aa:ff:9b:c8:c5:f3:42:
17:6c:30:a7:bb:82:7c:3c:b2:eb:92:95:93:ad:17:94:42:25:
d4:11:66:83:8a:29:22:1c:80:25:7e:3c:c7:2d:46:5a:89:2d:
78:d8:4d:a9:46:45:53:c3:c6:3a:fd:c6:e6:6a:5e:31:7a:f5:
6f:8f:db:40:cf:e5:a3:5c:ee:ff:44:4e:93:31:34:31:ab:61:
ec:5d:5b:9d:b5:9f:f5:a2:51:9e:d3:15:58:f4:c9:e6:21:c4:
2b:a4:62:b1:ec:d6:79:c2:dd:03:b3:e4:d7:27:42:11:d1:9a:
99:05:6e:11:3f:ad:de:6d:29:ee:14:5b:d8:f2:4f:29:f7:f6:
4a:13:7c:ed:a8:f3:d2:40:eb:1e:12:c8:53:b4:5b:cb:7d:38:
ba:50:3d:68:b6:9b:da:7e:26:cd:50:de:1b:5b:99:e4:b8:68:
da:1e:71:06:65:c6:c2:6e:6c:6b:6a:84:a3:28:6f:13:c0:1d:
f3:2f:d7:64:55:b9:c5:58:f1:c7:e8:47:54:36:d3:a3:87:b8:
55:c5:00:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NN5o8c4itwxc8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU5ZjBjZjAtYjFkYi00MTM5LWJmYzYtZTYyNDE1OWQ3
MzQzMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
OGIyNGZiNTItNDQ5Zi00OGMzLTg5OGItNjBiZGRiMmI5ZjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXDzhkNs6jwvfpz0KyYUvChPzOr63C8/Fj80
JAJM0oUvKXu6tP8xJTB8/LJaLCoKmyB/1TZRX75MZ7WbkmbYXwAGSnrUIGTkxcYE
0Lcv2enDYVNxWZnWUmHJKJI5I/8JqMmsJc5Yd+Wy+pJDAAubzOYb7QPNFsU2t+Wj
Hof3M17cLYJ8afHuREMnVJ8JmTZoaGFa9LTLBGBu63XPVS8jYH46f9vsxhxLABmg
t6MrwHw3qhNtBmlWTLjLkOauwl6VXB2Xdqoit4E89+h/4elPRrTMWhcyJMIVakM6
0D5FMl8TFImHRSA8Pq5T0k8Yyp/W5N2cV0i5ZZzdJrtgBOZYJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuVhtCy70OmCqOoV7aw0ZO7JCG3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlm
MGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0MTU5ZDczNDMvMmRkZWE4MDYtODFmMC0z
NGRlLWFlZDItNGUzYWNlMTkxNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjU5ZjBjZjAtYjFkYi00MTM5LWJm
YzYtZTYyNDE1OWQ3MzQzL2I1OWYwY2YwLWIxZGItNDEzOS1iZmM2LWU2MjQxNTlk
NzM0My5jcmwwHwYDVR0jBBgwFoAUqvHU4NNuFDrX637PeSGpAaKpEIwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlmMGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0
MTU5ZDczNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArs08aqaPLeiZ4t+x6aWZlIyTm1sUj6/mVpPTVSW1eBtDBXApdA4fdO
wuTbNto7qv+byMXzQhdsMKe7gnw8suuSlZOtF5RCJdQRZoOKKSIcgCV+PMctRlqJ
LXjYTalGRVPDxjr9xuZqXjF69W+P20DP5aNc7v9ETpMxNDGrYexdW521n/WiUZ7T
FVj0yeYhxCukYrHs1nnC3QOz5NcnQhHRmpkFbhE/rd5tKe4UW9jyTyn39koTfO2o
89JA6x4SyFO0W8t9OLpQPWi2m9p+Js1Q3htbmeS4aNoecQZlxsJubGtqhKMobxPA
HfMv12RVucVY8cfoR1Q206OHuFXFADk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:31 2026 by rpki-client