
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/503e5196-a575-3501-a5f0-fce1aaf560eb.roa
File: 503e5196-a575-3501-a5f0-fce1aaf560eb.roa (raw, json)
Hash identifier: ehq/MOMQLSdsG1cJdfWxbo8QvPkepVxa5PdWWFe4W+k=
Subject key identifier: 5B:68:D1:DA:79:DC:25:FA:D9:CC:5D:B3:2B:80:83:FD:63:BA:53:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78E702A5664A27BEDF5A900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/503e5196-a575-3501-a5f0-fce1aaf560eb.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33491
IP address blocks: 107.0.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8e:70:2a:56:64:a2:7b:ed:f5:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1a7816a3-913a-4486-8c9d-fbfac61d22da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:27:60:4d:cd:77:74:59:a0:d9:72:e9:65:
fc:fa:e0:49:7c:e8:e0:8f:98:62:5d:27:d1:18:ec:
de:e7:fd:73:07:f1:41:d8:9b:1c:51:1f:8d:aa:0b:
71:23:d9:ae:b6:e1:10:9e:a3:a0:35:84:07:a3:0c:
43:5f:8d:9f:e6:8f:d9:63:07:17:c2:35:05:10:0e:
26:a6:62:51:fd:dc:0b:36:00:f9:64:e1:ab:45:ab:
11:30:86:97:ed:50:2b:f8:92:15:30:13:82:31:83:
21:24:2a:42:e4:66:cc:fc:35:2f:14:1e:c9:ef:6d:
fc:02:69:ae:4b:53:40:39:91:4f:59:5e:54:b8:ce:
5d:c1:30:23:fd:34:f2:10:f5:26:9f:7f:3c:64:51:
56:12:83:46:61:b4:30:80:24:5e:3b:96:77:73:6d:
90:5a:d6:bd:5e:da:36:65:cb:38:89:33:ef:39:f0:
d2:a3:a2:e0:cf:88:2a:a7:99:b4:29:49:60:d4:1d:
b7:cd:21:a3:de:d7:c3:64:f0:3c:0c:50:72:a5:b6:
b2:f6:ee:10:07:eb:f8:e6:54:2b:4e:39:09:3e:5d:
7d:a3:69:95:85:1b:46:0f:6e:c2:49:dd:0d:a9:09:
fe:9d:c0:2c:1b:f4:35:30:13:80:bf:96:78:33:76:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:68:D1:DA:79:DC:25:FA:D9:CC:5D:B3:2B:80:83:FD:63:BA:53:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/503e5196-a575-3501-a5f0-fce1aaf560eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.0.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:c5:ea:b0:bf:bc:71:87:96:eb:f9:e1:25:5b:14:9a:42:15:
58:4a:3d:bd:e8:7e:5d:b2:f3:07:95:70:88:20:8b:76:d1:34:
61:5a:cb:0e:49:c7:22:87:52:59:fe:ce:7a:36:b6:60:1d:54:
8e:f0:08:33:1b:ae:4d:da:dc:7a:40:5a:62:d1:77:4f:46:43:
3e:a0:11:61:2f:0a:ec:14:65:49:40:e0:dc:66:73:9e:df:3b:
38:0a:34:08:6a:33:ed:a6:45:21:d8:d7:7f:cb:87:cf:fa:b8:
46:9a:f9:02:89:5c:31:ca:27:9d:e6:ba:57:f4:a7:15:28:f0:
56:19:cd:ca:27:0e:af:34:0c:72:49:d3:3d:d7:2b:f0:71:39:
73:30:3d:3e:a3:00:55:b7:ca:00:79:6a:98:b2:ea:51:fb:de:
c8:10:f7:3e:1a:60:16:e6:01:47:cf:68:99:e0:b8:24:21:25:
55:81:9e:9b:56:c4:79:1d:a9:e7:97:e2:4c:8f:72:d5:e8:0c:
9d:e9:d2:22:7c:14:91:60:b6:62:c8:69:2e:59:79:ce:12:d1:
c6:cd:7e:11:df:e9:68:27:29:32:4c:70:f3:4f:39:5a:d1:e0:
0e:3d:45:79:fe:16:eb:5a:b2:ec:7d:84:33:58:73:39:37:e2:
de:3a:8d:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njnAqVmSie+31qQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWE3ODE2YTMtOTEzYS00NDg2LThjOWQtZmJmYWM2MWQyMmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H4nYE3Nd3RZoNly6WX8+uBJfOjgj5hiXSfR
GOze5/1zB/FB2JscUR+NqgtxI9mutuEQnqOgNYQHowxDX42f5o/ZYwcXwjUFEA4m
pmJR/dwLNgD5ZOGrRasRMIaX7VAr+JIVMBOCMYMhJCpC5GbM/DUvFB7J7238Ammu
S1NAOZFPWV5UuM5dwTAj/TTyEPUmn388ZFFWEoNGYbQwgCReO5Z3c22QWta9Xto2
Zcs4iTPvOfDSo6Lgz4gqp5m0KUlg1B23zSGj3tfDZPA8DFBypbay9u4QB+v45lQr
TjkJPl19o2mVhRtGD27CSd0NqQn+ncAsG/Q1MBOAv5Z4M3YmvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFto0dp53CX62cxdsyuAg/1julPtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTAzZTUxOTYtYTU3NS0z
NTAxLWE1ZjAtZmNlMWFhZjU2MGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawCKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7F6rC/vHGHluv54SVbFJpCFVhKPb3ofl2y8weVcIggi3bRNGFayw5J
xyKHUln+zno2tmAdVI7wCDMbrk3a3HpAWmLRd09GQz6gEWEvCuwUZUlA4Nxmc57f
OzgKNAhqM+2mRSHY13/Lh8/6uEaa+QKJXDHKJ53mulf0pxUo8FYZzconDq80DHJJ
0z3XK/BxOXMwPT6jAFW3ygB5apiy6lH73sgQ9z4aYBbmAUfPaJnguCQhJVWBnptW
xHkdqeeX4kyPctXoDJ3p0iJ8FJFgtmLIaS5Zec4S0cbNfhHf6WgnKTJMcPNPOVrR
4A49RXn+Futasux9hDNYczk34t46jTk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:00:39 2026 by rpki-client