
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
File: 995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa (raw, json)
Hash identifier: F2qj8X0e7qbyW1bt5cPXC5otzL3hwGdh79RdpwiXEOE=
Subject key identifier: D1:35:C1:15:2B:5C:D1:82:3C:A6:6C:B0:5C:FA:BC:78:59:D5:6A:3B
Certificate issuer: /CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
Certificate serial: 010D0C9F4328584E9BE50BAD8DC4D63FE6BC2980
Authority key identifier: 6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 60011
IP address blocks: 198.199.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:0b:ad:8d:c4:d6:3f:e6:bc:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=fc9fbdc2-1e14-4371-921f-c996bb948adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:d6:a2:9c:b4:d6:b5:75:d1:6d:a3:d0:ff:
43:28:61:aa:ca:00:ca:f7:bd:9e:fa:dc:34:53:d4:
61:57:d4:d8:8b:cf:8d:d4:21:f0:be:d5:2c:47:7f:
06:82:1a:6d:ad:1e:85:5e:a4:dd:62:3a:a5:9b:7d:
74:9f:5e:2f:10:3a:80:f6:e2:7b:82:b3:88:0b:ba:
fe:61:76:b6:65:9d:be:06:1b:50:32:04:26:f5:51:
22:16:8d:fb:bc:af:04:74:61:88:f8:cc:be:41:eb:
e4:b8:a7:9b:73:83:00:af:fc:88:6e:26:00:ea:c0:
5d:f9:9d:0e:dc:33:5a:84:3f:82:98:2c:87:aa:d7:
b8:dd:93:0c:3c:1a:b0:47:18:be:01:d7:ed:ee:7c:
2f:f3:cd:0b:88:87:76:af:2f:e8:20:26:96:56:a9:
ff:c5:34:2c:a6:04:d7:8f:1e:cd:96:03:48:8d:75:
b7:aa:b1:b0:94:22:fe:15:3c:c7:67:62:50:71:22:
1b:e5:80:82:80:7e:60:76:1e:28:1d:6d:fd:e8:6f:
08:47:95:d4:92:f2:db:db:ec:51:e8:20:86:6d:66:
0f:93:f9:6c:e7:8c:d4:86:bd:f6:e3:6a:8d:26:ea:
a3:39:f4:d9:75:e3:d2:f9:aa:7a:6c:b3:70:92:c3:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:C1:15:2B:5C:D1:82:3C:A6:6C:B0:5C:FA:BC:78:59:D5:6A:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl
X509v3 Authority Key Identifier:
keyid:6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
sbgp-ipAddrBlock: critical
IPv4:
198.199.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:2b:be:80:58:bf:b9:87:50:d2:e3:32:57:46:73:71:a1:54:
0e:77:d5:eb:5b:8f:ca:0e:34:18:54:d3:dd:23:ec:e4:34:45:
56:32:b2:85:c9:d5:2d:bc:4d:e7:95:61:d6:5f:ec:4c:51:67:
12:34:c3:cc:3b:62:c9:71:d0:c2:7a:ca:2a:18:45:90:17:5d:
bb:db:ff:7f:13:50:32:14:77:18:c4:c4:3b:f0:2c:24:7a:d7:
b5:92:44:cf:67:d5:57:8e:11:fd:7a:b4:23:b1:97:3c:a5:a6:
24:57:7e:57:29:5e:e7:a1:36:07:c9:14:28:c2:92:09:46:4d:
1e:0c:71:a7:d8:aa:b6:d7:d0:c4:28:96:ab:6f:19:ba:6b:0a:
81:56:6f:7c:71:c0:92:30:1b:1d:04:78:d7:a8:d1:2b:27:75:
bc:67:08:88:f8:60:1e:0a:59:63:0a:8a:a8:c5:8c:e2:b8:3b:
87:c9:f6:ac:a6:26:52:3e:f2:55:08:c1:4f:2c:e0:a2:c3:65:
e2:e3:53:dc:82:18:26:9a:d7:92:a5:6f:55:b9:92:93:57:73:
5c:81:94:ae:7d:06:a4:6f:7e:b9:13:99:fc:3d:bb:00:94:18:
46:38:35:9b:34:27:62:c9:dd:ae:f9:85:41:e9:00:1d:25:1e:
f5:f9:0f:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QutjcTWP+a8KYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDg0OWM2MmQtNTBlNC00ZmNiLTlkZmUtODYzNGQ0MDlm
ZTY1MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZmM5ZmJkYzItMWUxNC00MzcxLTkyMWYtYzk5NmJiOTQ4YWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUnWopy01rV10W2j0P9DKGGqygDK972e+tw0
U9RhV9TYi8+N1CHwvtUsR38GghptrR6FXqTdYjqlm310n14vEDqA9uJ7grOIC7r+
YXa2ZZ2+BhtQMgQm9VEiFo37vK8EdGGI+My+QevkuKebc4MAr/yIbiYA6sBd+Z0O
3DNahD+CmCyHqte43ZMMPBqwRxi+Adft7nwv880LiId2ry/oICaWVqn/xTQspgTX
jx7NlgNIjXW3qrGwlCL+FTzHZ2JQcSIb5YCCgH5gdh4oHW396G8IR5XUkvLb2+xR
6CCGbWYPk/ls54zUhr3242qNJuqjOfTZdePS+ap6bLNwksMFlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNE1wRUrXNGCPKZssFz6vHhZ1Wo7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kODQ5
YzYyZC01MGU0LTRmY2ItOWRmZS04NjM0ZDQwOWZlNjUvOTk1ZDYwOGQtOGE3Ni0z
NTYyLWJkNGYtZWIwZTkyZjM2YzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDg0OWM2MmQtNTBlNC00ZmNiLTlk
ZmUtODYzNGQ0MDlmZTY1L2Q4NDljNjJkLTUwZTQtNGZjYi05ZGZlLTg2MzRkNDA5
ZmU2NS5jcmwwHwYDVR0jBBgwFoAUa0Z3YIBpaPMhTWH5ch5VmWyup0EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kODQ5YzYyZC01MGU0LTRmY2ItOWRmZS04NjM0
ZDQwOWZlNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsebMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYrvoBYv7mHUNLjMldGc3GhVA531etbj8oONBhU090j7OQ0RVYysoXJ
1S28TeeVYdZf7ExRZxI0w8w7Yslx0MJ6yioYRZAXXbvb/38TUDIUdxjExDvwLCR6
17WSRM9n1VeOEf16tCOxlzylpiRXflcpXuehNgfJFCjCkglGTR4McafYqrbX0MQo
lqtvGbprCoFWb3xxwJIwGx0EeNeo0SsndbxnCIj4YB4KWWMKiqjFjOK4O4fJ9qym
JlI+8lUIwU8s4KLDZeLjU9yCGCaa15Klb1W5kpNXc1yBlK59BqRvfrkTmfw9uwCU
GEY4NZs0J2LJ3a75hUHpAB0lHvX5D7s=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:26 2026 by rpki-client