
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa
File: 0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa (raw, json)
Hash identifier: kksRdFMPnLHqIQnJQLZ+1GhXNDxqk40aI1e9iBX+7UE=
Subject key identifier: 2C:B3:47:0E:73:3B:2F:40:76:95:8B:E6:AC:B8:84:C7:E8:5F:32:FE
Certificate issuer: /CN=801cf9d8-8773-413d-855b-20e5fb7f350d
Certificate serial: 010D0C9F4328584EA794216A63498915AF7A9290
Authority key identifier: 3B:14:4E:C7:E3:61:F3:86:50:6B:5F:C7:8F:13:9E:48:5A:07:49:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 53925
IP address blocks: 67.159.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:21:6a:63:49:89:15:af:7a:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=801cf9d8-8773-413d-855b-20e5fb7f350d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ddfd95f3-9063-49fb-88f5-b8b11ed6ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:d4:62:62:5a:7a:f6:09:11:70:28:76:08:
ed:ca:bb:84:ae:58:5c:af:fe:b8:f3:f7:cc:ca:5e:
0e:37:6a:56:ab:24:6d:92:32:54:92:40:4a:82:9a:
0b:93:21:c8:b4:6d:0d:d6:6d:1e:96:27:3b:7a:6d:
ae:68:e8:96:d9:fb:82:d4:b0:2f:1e:42:d2:bf:28:
af:8f:2a:14:cd:41:10:e7:94:24:b7:e0:45:d8:a2:
95:a7:53:75:58:91:7f:2c:2d:94:1e:29:7a:3a:61:
91:ef:c5:c0:38:10:a6:b2:57:97:41:1c:99:77:23:
97:14:76:d1:4f:b5:bf:77:db:85:b2:15:78:2b:0a:
fd:28:34:26:b7:7d:58:cc:5f:ac:64:9c:27:67:6c:
f6:d6:2a:90:ac:aa:99:be:f8:34:59:c6:8b:f4:0c:
35:bb:47:fd:90:ed:ed:ee:68:ea:b3:f9:d5:0f:1f:
db:42:23:0e:d9:02:c0:cf:de:94:16:85:33:ed:17:
99:39:8b:9b:2a:76:83:54:48:7a:a6:e9:76:de:a6:
46:d6:50:a1:0f:c7:61:9b:a9:fb:d4:33:ec:f0:1d:
a7:c9:2c:15:90:b6:1e:6c:d0:94:cc:39:45:0e:07:
f0:be:1b:71:23:4d:ad:ad:58:ca:f7:35:8e:67:1d:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:47:0E:73:3B:2F:40:76:95:8B:E6:AC:B8:84:C7:E8:5F:32:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.crl
X509v3 Authority Key Identifier:
keyid:3B:14:4E:C7:E3:61:F3:86:50:6B:5F:C7:8F:13:9E:48:5A:07:49:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:6e:61:0c:aa:87:7d:7a:c7:b3:3e:9e:ab:58:00:87:13:74:
c1:39:b7:19:4c:6b:f3:6c:64:00:38:5c:b4:ab:7d:f5:c2:1b:
d6:ca:9e:3f:16:51:ae:04:3d:41:62:f4:da:73:28:da:fd:41:
4c:c8:06:05:de:bc:5c:1f:33:5e:7d:2f:f6:6c:35:75:04:0a:
1f:ce:aa:e3:ca:2a:ee:fa:fd:34:20:c4:52:b1:22:85:92:3b:
01:2c:19:fb:03:41:7a:72:82:29:a6:13:1d:3d:be:d5:b4:95:
3f:5a:99:4c:52:ab:a3:6c:19:f2:91:14:70:a7:98:40:83:3c:
e2:ad:5c:0d:71:18:53:c8:81:62:11:be:5f:54:02:48:67:54:
1e:45:ba:6c:f8:5e:00:03:d9:7b:cd:37:2a:88:6b:da:a3:0c:
75:97:3f:df:31:25:1d:8f:88:a5:01:69:f0:d8:77:6c:28:15:
fe:47:67:e8:90:81:38:68:20:e9:6f:19:cf:a7:0f:cf:25:21:
7f:c9:f9:24:07:7d:b4:fb:74:9e:7f:f4:4e:ad:79:26:27:3c:
d7:25:8a:bd:6d:86:2a:42:78:4d:61:8c:1a:ec:e0:9b:ff:3e:
f5:79:a5:ae:10:52:96:58:aa:5e:73:91:12:63:e7:9d:a2:7a:
01:c3:56:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlCFqY0mJFa96kpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAxY2Y5ZDgtODc3My00MTNkLTg1NWItMjBlNWZiN2Yz
NTBkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGRmZDk1ZjMtOTA2My00OWZiLTg4ZjUtYjhiMTFlZDZhYzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopPUYmJaevYJEXAodgjtyruErlhcr/648/fM
yl4ON2pWqyRtkjJUkkBKgpoLkyHItG0N1m0elic7em2uaOiW2fuC1LAvHkLSvyiv
jyoUzUEQ55Qkt+BF2KKVp1N1WJF/LC2UHil6OmGR78XAOBCmsleXQRyZdyOXFHbR
T7W/d9uFshV4Kwr9KDQmt31YzF+sZJwnZ2z21iqQrKqZvvg0WcaL9Aw1u0f9kO3t
7mjqs/nVDx/bQiMO2QLAz96UFoUz7ReZOYubKnaDVEh6pul23qZG1lChD8dhm6n7
1DPs8B2nySwVkLYebNCUzDlFDgfwvhtxI02trVjK9zWOZx27aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyzRw5zOy9AdpWL5qy4hMfoXzL+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDFj
ZjlkOC04NzczLTQxM2QtODU1Yi0yMGU1ZmI3ZjM1MGQvMGMwNmY4NGItMDQ5YS0z
Y2FiLWFlZjAtNDQwYjNiOGQ4N2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAxY2Y5ZDgtODc3My00MTNkLTg1
NWItMjBlNWZiN2YzNTBkLzgwMWNmOWQ4LTg3NzMtNDEzZC04NTViLTIwZTVmYjdm
MzUwZC5jcmwwHwYDVR0jBBgwFoAUOxROx+Nh84ZQa1/HjxOeSFoHSbAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84MDFjZjlkOC04NzczLTQxM2QtODU1Yi0yMGU1
ZmI3ZjM1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChuYQyqh316x7M+nqtYAIcTdME5txlMa/NsZAA4XLSrffXCG9bKnj8W
Ua4EPUFi9NpzKNr9QUzIBgXevFwfM159L/ZsNXUECh/OquPKKu76/TQgxFKxIoWS
OwEsGfsDQXpygimmEx09vtW0lT9amUxSq6NsGfKRFHCnmECDPOKtXA1xGFPIgWIR
vl9UAkhnVB5Fumz4XgAD2XvNNyqIa9qjDHWXP98xJR2PiKUBafDYd2woFf5HZ+iQ
gThoIOlvGc+nD88lIX/J+SQHfbT7dJ5/9E6teSYnPNclir1thipCeE1hjBrs4Jv/
PvV5pa4QUpZYql5zkRJj552iegHDVq8=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:51 2026 by rpki-client