
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
File: 40385235-f792-3e3f-8a68-b1affa65f084.roa (raw, json)
Hash identifier: RRBHx5lJn4RqwTDg7DzI6zUKyAvO9V+S+FAxDPV0Hx4=
Subject key identifier: F2:E1:F9:4B:FB:40:56:EC:B7:AE:25:E1:3B:94:C6:E1:B4:38:50:B4
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584E18AEEE56CD7317C2402D7400
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 397422
IP address blocks: 209.237.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:ae:ee:56:cd:73:17:c2:40:2d:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=32fe736c-0618-4899-8ca0-528dab3d47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:06:60:6c:15:dc:8d:08:a4:f8:5b:4d:b4:
62:28:ec:6e:4d:24:d9:06:e0:79:98:9d:2f:b5:37:
f7:24:e8:3d:66:2e:3d:3b:e9:fc:49:09:db:82:3d:
ad:c1:9f:24:70:82:e9:86:1d:0f:7a:71:75:fd:a5:
5f:b5:78:35:6f:86:24:15:10:50:10:9a:9c:d3:28:
21:2c:bc:d1:51:04:b5:16:51:f3:98:f2:61:bb:9f:
7e:5b:e3:dd:0c:1f:6b:b6:4a:77:52:13:3d:ca:ff:
85:b3:2f:e7:76:61:03:81:6a:49:63:25:92:96:e6:
b5:07:77:12:1c:7e:09:37:f8:15:dd:b7:cc:3d:15:
41:35:bc:33:33:47:a9:24:5b:64:a2:1b:af:a7:1a:
6c:ae:e3:93:43:0f:ee:89:a8:2c:bf:a8:9e:f2:c6:
a7:4a:e1:4e:4f:1f:58:74:78:78:fe:1c:15:d2:2e:
9e:36:9f:ac:13:33:5b:7c:5c:93:bc:19:34:dc:37:
2c:af:bb:8f:1d:84:fb:b5:2b:65:d6:1f:b6:ed:6d:
00:7e:54:28:bc:33:ab:93:9d:cd:7e:fc:2a:cb:26:
9c:02:93:6e:d8:bb:b3:93:3a:16:6a:52:1f:2a:fd:
03:0e:57:9d:f0:a9:2a:56:77:a5:41:e0:17:2b:6d:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:F9:4B:FB:40:56:EC:B7:AE:25:E1:3B:94:C6:E1:B4:38:50:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ef:dc:60:d7:49:97:df:2d:69:c6:0d:ae:52:fa:27:29:4b:
bf:db:79:78:9d:da:70:3e:5f:db:10:6d:41:59:23:ef:46:8a:
8b:06:99:21:04:90:52:7b:cb:d7:41:f0:d7:d3:5d:a1:cc:1a:
ed:93:46:13:e3:8e:96:6c:6c:a2:88:f5:8e:0a:c6:32:0f:56:
01:9f:2c:43:d0:75:69:3b:f9:46:f5:a6:d1:1f:ef:95:5b:99:
5f:32:6a:87:b5:0b:c6:93:1e:b1:0a:56:46:70:00:cc:f6:89:
48:75:dc:15:a5:48:51:71:2d:0b:bc:c8:86:7e:38:da:0b:84:
92:59:00:e5:c7:fe:b7:3d:b3:e2:74:52:50:55:4d:9b:e6:2b:
f1:82:e2:17:6c:69:b3:77:59:b7:5e:db:6c:f1:80:49:0f:0a:
a2:2c:b1:93:9a:ac:96:ca:b5:26:8a:72:2b:70:d1:77:c2:d3:
93:1a:a5:5d:ed:1f:88:f0:6f:9d:ae:4c:af:de:0e:4c:02:f2:
ed:5d:22:6b:37:03:51:d2:2a:78:c3:5d:07:c0:8b:9c:33:b6:
25:23:4a:d2:67:7a:42:98:57:28:dc:eb:08:51:ff:49:ab:d2:
10:38:3e:dd:85:51:71:98:6d:18:d3:6e:47:c0:d0:dc:cf:87:
73:33:16:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Yru5WzXMXwkAtdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
MzJmZTczNmMtMDYxOC00ODk5LThjYTAtNTI4ZGFiM2Q0N2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy4GYGwV3I0IpPhbTbRiKOxuTSTZBuB5mJ0v
tTf3JOg9Zi49O+n8SQnbgj2twZ8kcILphh0PenF1/aVftXg1b4YkFRBQEJqc0ygh
LLzRUQS1FlHzmPJhu59+W+PdDB9rtkp3UhM9yv+Fsy/ndmEDgWpJYyWSlua1B3cS
HH4JN/gV3bfMPRVBNbwzM0epJFtkohuvpxpsruOTQw/uiagsv6ie8sanSuFOTx9Y
dHh4/hwV0i6eNp+sEzNbfFyTvBk03Dcsr7uPHYT7tStl1h+27W0AflQovDOrk53N
fvwqyyacApNu2LuzkzoWalIfKv0DDled8KkqVnelQeAXK23tXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLh+Uv7QFbst64l4TuUxuG0OFC0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDAzODUyMzUtZjc5Mi0z
ZTNmLThhNjgtYjFhZmZhNjVmMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/v3GDXSZffLWnGDa5S+icpS7/beXid2nA+X9sQbUFZI+9GiosGmSEE
kFJ7y9dB8NfTXaHMGu2TRhPjjpZsbKKI9Y4KxjIPVgGfLEPQdWk7+Ub1ptEf75Vb
mV8yaoe1C8aTHrEKVkZwAMz2iUh13BWlSFFxLQu8yIZ+ONoLhJJZAOXH/rc9s+J0
UlBVTZvmK/GC4hdsabN3Wbde22zxgEkPCqIssZOarJbKtSaKcitw0XfC05MapV3t
H4jwb52uTK/eDkwC8u1dIms3A1HSKnjDXQfAi5wztiUjStJnekKYVyjc6whR/0mr
0hA4Pt2FUXGYbRjTbkfA0NzPh3MzFlA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:57 2026 by rpki-client