
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
File: 5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa (raw, json)
Hash identifier: H6jtpgTIVa1Fu+gfR8jE2ev92FzluVfrjOBMcDU3E7o=
Subject key identifier: D6:42:A8:89:22:9A:2C:2F:24:EB:73:4F:A5:2F:7D:93:DF:AC:2E:FF
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584D07ACEFD2EE747BC210ACE378
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
Signing time: Mon 02 Mar 2026 02:00:31 +0000
ROA not before: Mon 02 Mar 2026 02:00:31 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 396253
IP address blocks: 136.228.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:ac:ef:d2:ee:74:7b:c2:10:ac:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=2d6b9dfe-8995-4063-b2b8-a4813f1b8026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:75:98:5d:46:28:3d:84:8b:b0:77:1f:ac:
71:1d:c7:c9:00:66:f7:57:a1:f0:66:82:38:e7:74:
f2:6f:5e:17:ec:e6:ef:cc:38:e7:2a:4a:57:79:79:
73:f4:c5:07:93:f5:50:b8:6b:e7:07:c9:69:93:18:
df:94:39:ed:04:3d:62:35:1d:28:fd:d0:7c:78:2c:
39:0b:45:75:43:5e:ba:68:6d:f9:21:79:99:23:f3:
c1:e2:1c:57:dd:26:44:17:54:0d:31:9d:31:ab:2a:
57:66:2b:02:27:0d:c3:db:c5:21:eb:0c:c7:14:eb:
69:c6:eb:a9:f2:e0:ff:6f:1b:05:6c:e7:9a:85:7b:
c9:f4:59:05:5c:12:08:94:45:73:b0:bf:5d:d8:a2:
e8:ea:5d:1f:f9:34:96:fe:a5:81:b0:f4:b7:ff:cc:
fc:8e:6d:25:aa:20:0c:bf:17:1d:d1:87:86:d4:ce:
29:95:cf:7c:85:a5:81:93:84:44:9d:53:05:fa:85:
16:e5:60:87:89:87:34:9e:aa:ca:b2:63:5c:78:44:
e9:70:b6:4e:b0:d0:fa:4d:e7:76:a7:48:7f:de:18:
97:bd:f6:d5:ec:2f:97:c1:2b:0e:e4:41:d2:ae:95:
da:fb:e4:f2:c3:12:77:ef:30:64:41:89:39:67:92:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:42:A8:89:22:9A:2C:2F:24:EB:73:4F:A5:2F:7D:93:DF:AC:2E:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:2c:b5:be:56:4e:e4:af:ba:7b:7f:bc:7a:8d:38:61:3f:d5:
51:9c:6b:76:ba:36:b5:52:18:1f:81:fa:17:ff:f5:de:14:69:
a2:4e:15:a5:da:33:5d:57:13:9a:f4:b8:1e:83:4a:02:54:ca:
e7:e9:c6:1c:1f:e8:e2:25:43:85:49:e6:87:bf:e9:e8:e3:81:
70:c0:ab:8d:41:34:5e:cd:45:4a:59:d5:b8:49:b8:ee:90:08:
da:34:ec:94:80:8d:50:b2:66:5a:7a:c3:4f:19:fb:4d:03:eb:
77:f0:7e:c7:d7:b2:94:56:ca:d6:94:0c:d9:6a:68:66:8d:f5:
21:67:12:93:0e:bb:97:f3:ea:8c:b1:e8:db:1a:77:8d:8d:61:
10:27:f8:a0:46:f6:98:8e:36:7c:db:d3:50:76:57:f6:77:dc:
cd:b7:ea:c5:ff:b7:c4:85:bf:2f:05:c9:87:2f:60:4f:36:fe:
77:c7:9a:1c:22:c7:a6:16:c1:0e:43:f5:95:94:22:32:7a:78:
d2:26:a3:00:18:c7:c5:73:d8:3a:a6:20:38:5a:55:c2:04:6b:
5e:02:84:cb:f2:ad:a1:d2:e2:6f:b1:b1:da:aa:53:4b:00:17:
5a:f4:e4:82:57:f5:0f:c1:85:a9:71:aa:26:f4:30:fb:e3:c0:
51:15:e4:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrO/S7nR7whCs43gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
MmQ2YjlkZmUtODk5NS00MDYzLWIyYjgtYTQ4MTNmMWI4MDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWx1mF1GKD2Ei7B3H6xxHcfJAGb3V6HwZoI4
53Tyb14X7ObvzDjnKkpXeXlz9MUHk/VQuGvnB8lpkxjflDntBD1iNR0o/dB8eCw5
C0V1Q166aG35IXmZI/PB4hxX3SZEF1QNMZ0xqypXZisCJw3D28Uh6wzHFOtpxuup
8uD/bxsFbOeahXvJ9FkFXBIIlEVzsL9d2KLo6l0f+TSW/qWBsPS3/8z8jm0lqiAM
vxcd0YeG1M4plc98haWBk4REnVMF+oUW5WCHiYc0nqrKsmNceETpcLZOsND6Ted2
p0h/3hiXvfbV7C+XwSsO5EHSrpXa++TywxJ37zBkQYk5Z5JA0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZCqIkimiwvJOtzT6UvfZPfrC7/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNWEwN2ZkNDEtNDk5NC0z
YmYwLTg5NzktYzBiOWVhMzQxYmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOT7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGostb5WTuSvunt/vHqNOGE/1VGca3a6NrVSGB+B+hf/9d4UaaJOFaXa
M11XE5r0uB6DSgJUyufpxhwf6OIlQ4VJ5oe/6ejjgXDAq41BNF7NRUpZ1bhJuO6Q
CNo07JSAjVCyZlp6w08Z+00D63fwfsfXspRWytaUDNlqaGaN9SFnEpMOu5fz6oyx
6Nsad42NYRAn+KBG9piONnzb01B2V/Z33M236sX/t8SFvy8FyYcvYE82/nfHmhwi
x6YWwQ5D9ZWUIjJ6eNImowAYx8Vz2DqmIDhaVcIEa14ChMvyraHS4m+xsdqqU0sA
F1r05IJX9Q/Bhalxqib0MPvjwFEV5Po=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:25 2026 by rpki-client