
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa
File: d44d9355-ca16-3f84-adcc-d72f435dc27f.roa (raw, json)
Hash identifier: PVn/1T3v/mj03PN52O4I2r8IDeDuyGFnO0aWxaqBkgw=
Subject key identifier: E1:93:78:86:B6:BD:78:8C:9A:33:E7:20:9F:71:67:D4:5C:EA:D2:CA
Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial: 010D0C9F4328584F49740FC55D93B8406181A540
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395391
IP address blocks: 216.230.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:0f:c5:5d:93:b8:40:61:81:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d35dcc13-a7e9-438f-9b2c-9699c8d10fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:c1:94:a0:d6:1f:10:bc:44:6d:6b:ec:50:
3d:48:36:03:e0:46:f0:cf:1d:54:89:9d:3a:76:a0:
28:8f:58:41:d8:fa:33:3b:2a:0e:c1:3b:53:6c:d3:
0e:d2:99:74:63:72:f8:2b:b4:4f:5b:9b:bb:73:74:
35:9c:0b:fe:6d:c5:83:93:77:f0:97:2b:e0:6d:c8:
70:34:87:f3:5a:1e:56:ae:ad:54:f9:40:82:60:dc:
1e:62:81:f5:c7:0f:53:bc:4a:69:a4:2b:7f:5a:be:
98:26:54:50:6b:96:8a:0b:b4:df:eb:4d:ff:d0:e7:
fe:bc:3d:42:5b:d4:f0:e7:a1:3f:19:78:97:60:20:
a0:8f:ca:52:b0:23:b2:21:5b:02:8b:d7:8a:8e:01:
c0:d7:c8:96:31:03:20:8c:91:dd:9a:9d:69:39:6f:
f3:5f:c9:1e:00:5c:4e:14:dc:d8:85:66:0d:e0:3c:
04:b8:a9:d4:8c:07:fe:0a:d3:0e:9d:6a:7f:16:61:
22:58:68:bd:40:67:13:12:bc:ab:d8:73:9f:7c:02:
9d:3f:c5:6c:a5:60:56:a0:84:55:de:56:0c:02:44:
1d:ae:68:75:56:93:2f:3f:f2:03:19:ea:34:1a:8c:
c1:46:10:ce:a7:7a:0d:2f:a7:d3:de:de:f6:49:d3:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:93:78:86:B6:BD:78:8C:9A:33:E7:20:9F:71:67:D4:5C:EA:D2:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
X509v3 Authority Key Identifier:
keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
sbgp-ipAddrBlock: critical
IPv4:
216.230.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:30:ac:bb:60:ba:21:0f:a6:99:3e:1e:9c:e8:15:79:42:04:
1d:0e:67:db:33:e3:06:b5:7e:96:b5:3d:44:a8:59:7f:e0:d3:
90:be:cb:1d:e3:09:92:5d:b0:93:51:aa:6f:d3:7a:9b:52:f5:
e9:0c:d6:1e:ec:7f:d1:60:d0:9a:81:2d:bd:e8:8e:4b:41:91:
4f:25:8f:06:49:b9:ba:ad:69:b1:71:a6:5f:ff:39:3b:25:2b:
ca:e0:ff:db:cc:ba:28:91:0d:e0:81:30:c3:61:bb:78:8d:ed:
16:aa:ff:e7:8d:05:36:1f:a2:a3:dc:21:b8:6f:c1:d2:91:36:
1f:7b:14:e9:4a:98:e8:5e:1d:1a:e7:01:43:1e:79:88:85:57:
71:da:86:11:b5:10:01:17:ab:90:de:bd:cc:90:cf:98:02:7f:
2f:d1:bd:55:1e:7d:52:ca:97:96:6f:58:38:5d:85:12:76:4c:
b4:03:85:9e:f9:e4:ee:e4:db:31:b3:15:48:88:4c:e6:10:37:
84:00:bf:68:99:6e:e8:1e:56:1e:78:7c:11:71:45:3f:d5:99:
4a:95:19:f9:9c:b9:8d:3b:70:de:6c:1a:86:76:d3:12:cd:78:
d2:ea:cc:e2:af:de:d3:f2:9a:67:c9:82:6b:bb:2c:b0:15:38:
3e:a9:79:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA/FXZO4QGGBpUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy
NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDM1ZGNjMTMtYTdlOS00MzhmLTliMmMtOTY5OWM4ZDEwZmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCrBlKDWHxC8RG1r7FA9SDYD4Ebwzx1UiZ06
dqAoj1hB2PozOyoOwTtTbNMO0pl0Y3L4K7RPW5u7c3Q1nAv+bcWDk3fwlyvgbchw
NIfzWh5Wrq1U+UCCYNweYoH1xw9TvEpppCt/Wr6YJlRQa5aKC7Tf603/0Of+vD1C
W9Tw56E/GXiXYCCgj8pSsCOyIVsCi9eKjgHA18iWMQMgjJHdmp1pOW/zX8keAFxO
FNzYhWYN4DwEuKnUjAf+CtMOnWp/FmEiWGi9QGcTEryr2HOffAKdP8VspWBWoIRV
3lYMAkQdrmh1VpMvP/IDGeo0GozBRhDOp3oNL6fT3t72SdP9nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGTeIa2vXiMmjPnIJ9xZ9Rc6tLKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk
M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZDQ0ZDkzNTUtY2ExNi0z
Zjg0LWFkY2MtZDcyZjQzNWRjMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl
MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1
MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1
MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OZjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4wrLtguiEPppk+HpzoFXlCBB0OZ9sz4wa1fpa1PUSoWX/g05C+yx3j
CZJdsJNRqm/TeptS9ekM1h7sf9Fg0JqBLb3ojktBkU8ljwZJubqtabFxpl//OTsl
K8rg/9vMuiiRDeCBMMNhu3iN7Raq/+eNBTYfoqPcIbhvwdKRNh97FOlKmOheHRrn
AUMeeYiFV3HahhG1EAEXq5DevcyQz5gCfy/RvVUefVLKl5ZvWDhdhRJ2TLQDhZ75
5O7k2zGzFUiITOYQN4QAv2iZbugeVh54fBFxRT/VmUqVGfmcuY07cN5sGoZ20xLN
eNLqzOKv3tPymmfJgmu7LLAVOD6peSw=
-----END CERTIFICATE-----
Generated at Tue Sep 29 10:50:39 2026 by rpki-client