
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
File: f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa (raw, json)
Hash identifier: zth3BFzNHy+PD9xByu68omCiERPhv0CSe5zNmRajrYA=
Subject key identifier: D6:B0:84:B7:84:DD:1F:8A:39:B6:25:90:BE:18:80:65:BC:6E:27:58
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584D5E1A729BB66DAE29C4F6ACC0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 398101
IP address blocks: 148.72.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:72:9b:b6:6d:ae:29:c4:f6:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=4e840726-79cb-4055-8239-0e21b0d3b735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:96:5b:e0:ce:c4:d9:a1:e6:d7:27:0a:46:
37:2c:ab:97:c0:f1:d2:b4:fd:99:fc:f5:33:50:62:
f9:69:15:75:8c:37:8e:2b:66:33:a8:d5:5d:49:09:
b5:a7:66:4a:11:f9:08:04:5d:d2:a5:51:b5:0f:17:
c6:50:86:45:39:29:e0:15:2c:f8:6c:aa:ed:d9:ef:
64:cd:17:03:56:f0:f3:66:e6:fb:67:cb:3d:da:6b:
56:df:ec:00:d7:0a:1a:78:bd:af:0a:87:06:ba:f7:
a5:37:7f:67:f3:81:09:3e:ae:f0:f1:bb:57:c2:ee:
e8:9f:6b:3a:7e:f7:09:e8:e8:b3:2d:3e:8c:46:4d:
d4:82:64:66:5c:34:82:4d:d4:fa:e5:d2:a0:16:7d:
78:9f:c4:e3:ee:cb:48:34:a5:cd:64:14:57:29:ec:
3f:1a:0f:4d:d5:8f:3a:b3:2f:7b:d8:c2:95:5b:93:
9b:34:2a:c7:3d:3b:fa:3d:80:25:7d:6b:e3:e1:5c:
9a:d3:bc:2e:47:4d:5a:51:50:bb:20:3c:03:bb:14:
4d:64:4c:eb:5d:51:86:75:79:18:4d:42:85:fb:e3:
bb:99:94:62:4f:9d:26:dd:0b:7c:16:4e:e0:ba:18:
d5:1b:eb:b2:3c:f4:99:5b:f6:a1:4c:fa:1e:01:a0:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:84:B7:84:DD:1F:8A:39:B6:25:90:BE:18:80:65:BC:6E:27:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
148.72.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:66:00:a1:f3:ca:b4:2e:d0:65:4a:23:2a:b1:7a:20:40:7a:
90:d5:bf:05:53:1d:8c:8f:ab:90:7e:39:08:2a:d8:67:fe:f0:
d6:27:82:2e:44:5a:2a:58:b0:5c:73:12:47:9f:79:f0:23:a3:
41:ef:a4:1e:e1:e2:e4:78:f6:bf:f2:f0:3b:57:ec:9c:06:9d:
30:ad:36:f5:12:13:1d:d7:ee:0e:e3:fa:14:5e:41:cf:95:28:
b0:03:af:73:39:fa:c0:75:68:0c:21:c6:72:ce:af:cb:36:05:
ac:fa:15:0f:ca:5d:c5:f9:73:59:75:48:b7:12:47:a6:11:51:
ed:c9:9c:7e:4d:25:8d:64:8d:21:43:f7:64:4a:2d:2a:a0:89:
31:19:21:cb:13:f5:f6:4b:2e:2c:ee:b6:05:7a:be:15:a6:33:
2b:d3:1f:8c:c8:15:c7:1c:56:87:36:8c:b1:0d:12:f1:21:82:
f6:a7:a2:36:1e:9f:4c:0d:25:22:f0:41:35:fb:d9:cd:67:a1:
d1:06:03:22:16:b0:eb:de:2f:f3:e5:1c:b0:a9:ea:ee:f6:60:
59:1c:0e:5b:51:8a:25:b1:b4:27:b5:55:52:67:3e:b5:49:de:
68:7f:d6:b3:91:36:20:26:e8:f2:a2:e5:0f:af:aa:21:bd:79:
38:8c:4c:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnKbtm2uKcT2rMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NGU4NDA3MjYtNzljYi00MDU1LTgyMzktMGUyMWIwZDNiNzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBCWW+DOxNmh5tcnCkY3LKuXwPHStP2Z/PUz
UGL5aRV1jDeOK2YzqNVdSQm1p2ZKEfkIBF3SpVG1DxfGUIZFOSngFSz4bKrt2e9k
zRcDVvDzZub7Z8s92mtW3+wA1woaeL2vCocGuvelN39n84EJPq7w8btXwu7on2s6
fvcJ6OizLT6MRk3UgmRmXDSCTdT65dKgFn14n8Tj7stINKXNZBRXKew/Gg9N1Y86
sy972MKVW5ObNCrHPTv6PYAlfWvj4Vya07wuR01aUVC7IDwDuxRNZEzrXVGGdXkY
TUKF++O7mZRiT50m3Qt8Fk7guhjVG+uyPPSZW/ahTPoeAaBUaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNawhLeE3R+KObYlkL4YgGW8bidYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvZjc0YzkwNzAtYmM3Zi0z
ZGI4LWEwMDAtMmY2NWQ2YmY0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlEhoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1mAKHzyrQu0GVKIyqxeiBAepDVvwVTHYyPq5B+OQgq2Gf+8NYngi5E
WipYsFxzEkefefAjo0HvpB7h4uR49r/y8DtX7JwGnTCtNvUSEx3X7g7j+hReQc+V
KLADr3M5+sB1aAwhxnLOr8s2Baz6FQ/KXcX5c1l1SLcSR6YRUe3JnH5NJY1kjSFD
92RKLSqgiTEZIcsT9fZLLizutgV6vhWmMyvTH4zIFcccVoc2jLENEvEhgvanojYe
n0wNJSLwQTX72c1nodEGAyIWsOveL/PlHLCp6u72YFkcDltRiiWxtCe1VVJnPrVJ
3mh/1rORNiAm6PKi5Q+vqiG9eTiMTAE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:21 2026 by rpki-client