
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/14a07018-19e8-3200-8023-9fa519279bef.roa
File: 14a07018-19e8-3200-8023-9fa519279bef.roa (raw, json)
Hash identifier: 9NjEFNZdT7aHKlKl8zlNXY2qkPUjWovixQJaYpi/Nqg=
Subject key identifier: B1:FC:7C:BB:4D:CC:8C:6F:2C:43:23:B2:B7:8C:8B:15:45:D2:4E:62
Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial: 010D0C9F4328584D6AAA8C3815C4EF26AD980190
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/14a07018-19e8-3200-8023-9fa519279bef.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 211373
IP address blocks: 199.7.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:8c:38:15:c4:ef:26:ad:98:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=23d61a8a-c1a6-4af3-97cb-77855ab30e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:3e:fa:5e:7e:e7:e6:74:bf:17:71:61:b5:
af:04:37:38:eb:b1:04:a5:c0:23:05:48:68:46:42:
cc:c8:14:f1:17:e6:51:8d:32:5c:a8:66:bd:ad:7b:
7d:f8:e1:a3:93:2f:72:d3:d2:cf:cd:f0:a2:d5:e6:
a0:4f:9f:c1:be:b8:4a:6d:8b:53:3a:7a:c0:e9:8f:
29:91:00:48:c0:ce:9a:6a:90:85:b9:61:7e:c1:18:
c3:af:26:62:ff:0d:85:e8:23:c3:10:74:72:7b:ff:
b5:ed:a5:80:67:e9:e4:ea:50:29:45:f6:83:d5:62:
5b:71:13:53:9b:a5:7b:17:2a:4a:93:48:4a:62:09:
a8:75:91:b3:27:00:92:3e:36:31:91:5d:db:03:c6:
6e:64:32:36:67:f2:3d:f5:31:c9:51:72:83:ee:e7:
30:35:4e:e7:78:bc:af:59:76:e9:45:56:51:2b:7b:
e0:6b:c6:0b:44:fd:aa:f2:59:a5:82:c9:5c:e6:45:
06:06:6d:70:a2:f6:ae:04:f6:1f:10:f5:da:17:92:
4f:9d:8e:fd:86:30:dd:ea:8e:fa:dd:be:20:4b:26:
d6:9d:fb:1e:a8:0e:ac:eb:3a:9e:d6:31:9d:9f:14:
2c:dc:c4:58:ec:15:b5:42:3b:5e:36:3c:0c:e3:76:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:7C:BB:4D:CC:8C:6F:2C:43:23:B2:B7:8C:8B:15:45:D2:4E:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/14a07018-19e8-3200-8023-9fa519279bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
X509v3 Authority Key Identifier:
keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:19:3b:9a:66:18:1a:68:b1:dc:bb:3f:14:ef:a1:f1:a3:dd:
c7:fd:05:fa:d3:df:ee:c1:3e:bc:05:34:19:8d:30:91:3e:34:
59:4c:f5:a3:8b:03:ca:b1:c7:dd:b3:39:ff:59:58:0e:9c:59:
52:06:20:94:f0:10:58:7a:f1:d5:02:4e:44:22:fa:1c:66:84:
2b:ef:52:a2:f9:30:1b:be:22:44:0c:03:8d:40:eb:3e:c7:3c:
8a:15:df:a6:82:b4:50:c9:04:a2:ad:27:41:8e:97:3c:f6:bc:
4f:21:6c:07:09:0c:77:98:f2:b6:73:de:71:06:54:66:f3:24:
14:4e:0e:35:fd:dd:3c:1e:2e:59:02:88:57:7a:83:c5:f8:55:
4a:ce:cb:6d:ed:9e:6b:81:31:e9:f6:82:af:ce:c3:58:33:2b:
ae:7d:e7:fe:28:7b:17:f5:ab:cf:6a:e8:55:cc:1a:6a:d7:ea:
58:71:31:99:b4:32:7b:59:ff:14:48:80:f5:66:cf:33:67:7a:
4d:23:2e:d6:1b:ec:68:59:0c:61:93:1f:de:09:8c:5b:42:b9:
ab:23:77:c1:ad:81:6f:e0:2a:5c:e2:15:41:e4:f5:35:4d:db:
83:81:9f:18:60:37:f6:74:1d:b2:7a:79:52:ad:f9:91:08:0e:
6b:53:47:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqow4FcTvJq2YAZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy
ZDg1MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
MjNkNjFhOGEtYzFhNi00YWYzLTk3Y2ItNzc4NTVhYjMwZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+c++l5+5+Z0vxdxYbWvBDc467EEpcAjBUho
RkLMyBTxF+ZRjTJcqGa9rXt9+OGjky9y09LPzfCi1eagT5/BvrhKbYtTOnrA6Y8p
kQBIwM6aapCFuWF+wRjDryZi/w2F6CPDEHRye/+17aWAZ+nk6lApRfaD1WJbcRNT
m6V7FypKk0hKYgmodZGzJwCSPjYxkV3bA8ZuZDI2Z/I99THJUXKD7ucwNU7neLyv
WXbpRVZRK3vga8YLRP2q8lmlgslc5kUGBm1wovauBPYfEPXaF5JPnY79hjDd6o76
3b4gSybWnfseqA6s6zqe1jGdnxQs3MRY7BW1QjteNjwM43ZmrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLH8fLtNzIxvLEMjsreMixVF0k5iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk
NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvMTRhMDcwMTgtMTllOC0z
MjAwLTgwMjMtOWZhNTE5Mjc5YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2
NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj
MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz
OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwePMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAZO5pmGBposdy7PxTvofGj3cf9BfrT3+7BPrwFNBmNMJE+NFlM9aOL
A8qxx92zOf9ZWA6cWVIGIJTwEFh68dUCTkQi+hxmhCvvUqL5MBu+IkQMA41A6z7H
PIoV36aCtFDJBKKtJ0GOlzz2vE8hbAcJDHeY8rZz3nEGVGbzJBRODjX93TweLlkC
iFd6g8X4VUrOy23tnmuBMen2gq/Ow1gzK6595/4oexf1q89q6FXMGmrX6lhxMZm0
MntZ/xRIgPVmzzNnek0jLtYb7GhZDGGTH94JjFtCuasjd8GtgW/gKlziFUHk9TVN
24OBnxhgN/Z0HbJ6eVKt+ZEIDmtTR3I=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:08 2026 by rpki-client