
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa
File: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (raw, json)
Hash identifier: g8OxfZ7gd3un8voUSDEeNNNBHSsjvc2yVAFzsHNja7Y=
Subject key identifier: E4:E5:9E:85:B3:C8:E2:BC:64:41:93:85:EE:8E:2E:E1:F4:B5:45:A8
Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49
Certificate serial: 010D0C9F4328584DE84B42955D55BC87511D84E0
Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa
Signing time: Thu 21 May 2026 13:00:32 +0000
ROA not before: Thu 21 May 2026 13:00:32 +0000
ROA not after: Wed 19 Aug 2026 13:00:32 +0000
asID: 3152
IP address blocks: 131.225.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e8:4b:42:95:5d:55:bc:87:51:1d:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49
Validity
Not Before: May 21 13:00:32 2026 GMT
Not After : Aug 19 13:00:32 2026 GMT
Subject: CN=95066b33-207d-4d1b-a296-8835115180bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:ad:f7:72:fa:58:8d:81:84:44:ba:2d:05:
5f:94:28:a1:cf:7f:84:b2:25:3b:c7:f9:b7:15:8f:
e5:c5:1b:77:f6:93:e0:fa:c0:74:56:0a:58:f6:80:
48:e3:4b:ef:fc:d0:b6:93:7f:73:d4:ff:21:d8:31:
35:d5:bb:4d:81:8d:31:99:4c:eb:17:a2:88:ab:2b:
2e:0a:cb:82:51:be:5a:2f:d7:55:12:5f:df:18:b0:
73:f9:8a:a1:f9:6c:34:1c:a5:c6:87:04:0f:14:e6:
3d:51:5e:9e:b4:d5:17:ee:73:b4:f5:23:d8:4f:4c:
6e:59:a1:fd:68:87:d6:49:47:bb:30:b9:40:93:2a:
3d:a7:66:3a:54:60:78:28:a6:89:5b:f2:57:26:23:
8f:1f:b8:c7:9d:39:03:fa:90:dc:32:f7:f6:6b:25:
da:f4:c7:ef:38:5c:9f:41:46:74:6d:54:35:16:9f:
4a:8a:82:83:90:31:d8:61:c3:d0:e9:d1:22:44:30:
64:c8:bf:77:5b:31:2c:92:02:5c:1b:76:0e:6d:2b:
71:dc:08:d8:5e:b1:2d:04:e4:9e:e6:2f:9c:11:77:
9d:92:d8:d3:67:0b:e3:c6:d9:6b:95:43:15:6d:09:
dc:b3:86:81:22:a7:39:cc:c4:a3:67:0b:f5:ea:b0:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:9E:85:B3:C8:E2:BC:64:41:93:85:EE:8E:2E:E1:F4:B5:45:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl
X509v3 Authority Key Identifier:
keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
sbgp-ipAddrBlock: critical
IPv4:
131.225.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:9e:eb:c9:d8:be:04:22:c6:53:9d:66:26:e5:9d:76:c5:b3:
53:0a:d9:7a:70:8f:0e:66:12:69:49:02:fe:be:74:46:cc:b7:
23:ca:f0:71:dd:11:69:ae:58:3c:c5:e6:65:97:5d:f8:8e:cb:
b1:58:fb:f5:df:69:f6:25:c3:12:9f:30:eb:ea:fb:6e:b1:b5:
0c:c6:6a:9a:9d:59:9a:66:51:08:ab:58:b4:54:91:80:8e:de:
03:73:0f:00:b0:b5:3c:36:78:55:a5:f1:2e:98:c5:1a:11:8e:
55:23:69:da:3a:77:35:28:15:e1:32:16:5b:5b:95:13:4d:f6:
64:91:13:de:ce:d0:74:dc:51:f6:3e:a3:d3:c6:d4:70:8e:af:
d5:e0:52:b4:8f:20:44:0a:25:bd:b0:55:d1:21:ac:8c:e0:ef:
e1:55:00:bb:8f:65:a9:4c:d4:58:c1:92:cf:36:5d:c4:90:d4:
0b:28:15:9c:ba:33:dc:7a:33:be:17:65:26:94:b7:e4:45:36:
dc:b2:7c:16:26:de:7c:19:4d:d4:9e:c8:95:69:88:8d:f1:14:
30:61:eb:76:14:98:e3:89:52:3d:a9:3f:eb:d0:5f:6f:e2:15:
93:b1:3c:82:38:db:6c:47:31:91:e3:41:1f:de:28:20:68:a0:
55:25:f2:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3oS0KVXVW8h1EdhOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx
ZTQ5MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
OTUwNjZiMzMtMjA3ZC00ZDFiLWEyOTYtODgzNTExNTE4MGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTet93L6WI2BhES6LQVflCihz3+EsiU7x/m3
FY/lxRt39pPg+sB0VgpY9oBI40vv/NC2k39z1P8h2DE11btNgY0xmUzrF6KIqysu
CsuCUb5aL9dVEl/fGLBz+Yqh+Ww0HKXGhwQPFOY9UV6etNUX7nO09SPYT0xuWaH9
aIfWSUe7MLlAkyo9p2Y6VGB4KKaJW/JXJiOPH7jHnTkD+pDcMvf2ayXa9MfvOFyf
QUZ0bVQ1Fp9KioKDkDHYYcPQ6dEiRDBkyL93WzEskgJcG3YObStx3AjYXrEtBOSe
5i+cEXedktjTZwvjxtlrlUMVbQncs4aBIqc5zMSjZwv16rB8DQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOTlnoWzyOK8ZEGThe6OLuH0tUWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj
NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvYTY0YmYzOGYtOTI1YS0z
NGJiLWIyMTMtOWFiYWMyMzhkMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1
NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy
MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk
N2FhMjFlNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg+EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAop7rydi+BCLGU51mJuWddsWzUwrZenCPDmYSaUkC/r50Rsy3I8rwcd0R
aa5YPMXmZZdd+I7LsVj79d9p9iXDEp8w6+r7brG1DMZqmp1ZmmZRCKtYtFSRgI7e
A3MPALC1PDZ4VaXxLpjFGhGOVSNp2jp3NSgV4TIWW1uVE032ZJET3s7QdNxR9j6j
08bUcI6v1eBStI8gRAolvbBV0SGsjODv4VUAu49lqUzUWMGSzzZdxJDUCygVnLoz
3HozvhdlJpS35EU23LJ8FibefBlN1J7IlWmIjfEUMGHrdhSY44lSPak/69Bfb+IV
k7E8gjjbbEcxkeNBH94oIGigVSXyxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:09 2026 by rpki-client