
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa
File: d99a1a8e-8070-330f-870d-379bea3a53c5.roa (raw, json)
Hash identifier: bpFKuDgBi2+LDG4MPgkcNCxZF5ZfRYu9Y4/shBjG+aA=
Subject key identifier: 8D:D5:80:CC:6A:1B:FC:5D:96:B2:EA:7B:E9:9D:83:25:03:A3:99:A3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DFA70A6A1655B802508F0CA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 396549
IP address blocks: 198.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:a6:a1:65:5b:80:25:08:f0:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=758cb29d-01e8-4cf3-a665-0b39fda23d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:1b:94:c7:11:e9:86:13:49:75:bf:e1:2d:
bc:8c:7b:09:d4:5b:0e:5a:40:0e:c0:82:a4:c7:5b:
54:ec:75:6e:60:44:c6:cc:9b:e1:aa:41:fd:86:49:
3b:39:f1:61:fa:5a:bd:63:5a:ea:18:64:d4:72:d2:
34:43:83:0a:af:61:ef:75:6c:28:73:36:ff:0e:3e:
da:01:95:fb:de:6b:ce:fa:85:5a:14:a2:98:d6:39:
df:20:d5:41:80:b8:c9:83:f1:21:1a:89:de:1f:41:
9d:96:10:02:d3:5c:cb:17:d8:8b:2f:f6:92:e9:1d:
04:18:a9:67:37:79:7d:67:8a:ff:33:bf:9a:dc:d8:
61:45:fd:43:1f:ae:79:14:ad:d3:0c:4c:e9:f9:3c:
57:80:70:7b:a4:d0:e4:bc:92:22:9d:22:0f:3b:0d:
87:84:49:43:3c:8a:8f:1b:f4:c7:67:1c:4e:fb:98:
d6:5c:ee:b1:24:a9:4a:d1:c9:6a:02:c2:ce:0d:c1:
31:06:84:17:8e:7f:c3:b4:7d:47:43:5d:66:a2:7b:
35:ce:c0:8e:17:a7:02:4f:a4:e0:c5:98:29:11:22:
30:f1:a4:c7:57:fb:70:d4:20:66:45:2f:7f:d4:77:
41:7f:f0:f2:d2:97:74:d1:88:6f:54:38:3e:ca:4c:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:80:CC:6A:1B:FC:5D:96:B2:EA:7B:E9:9D:83:25:03:A3:99:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:37:dc:78:f9:fc:5b:99:e4:c7:47:74:3d:ed:ff:29:6b:75:
04:8d:b0:f2:8c:3a:c3:e2:cb:f2:61:52:e3:81:85:bf:93:17:
c7:75:a9:5b:7f:1d:99:81:32:c7:83:8d:f9:19:1a:be:de:ba:
be:99:48:35:d4:ab:c4:ae:8e:5d:e6:a8:96:02:3e:e2:8f:75:
cb:75:5e:07:45:e6:30:de:e0:f8:4d:a4:7c:47:11:70:3f:af:
3e:44:e7:9d:5b:e6:24:f3:80:6b:4e:d9:85:96:0d:e9:c4:6c:
13:bc:18:75:d2:6c:02:90:3d:d3:1f:7a:74:b0:48:5d:4e:4e:
17:76:99:4b:98:2d:25:0a:64:35:a8:15:6d:94:91:f3:d4:99:
ff:39:8b:5e:f7:02:ba:20:86:79:57:2a:2e:1d:14:5f:6f:63:
1a:04:ac:ec:9c:8c:69:99:49:46:99:de:fa:7c:94:71:7a:47:
20:11:24:26:1d:f9:64:c4:66:74:78:c1:b8:fb:eb:f0:0f:cf:
f3:c6:98:8f:8a:f5:ac:bd:36:63:ea:e1:2e:76:15:cf:d6:f0:
26:13:d0:c0:14:9e:14:ae:f2:4c:0c:cd:80:c6:0e:e3:b0:e6:
51:d3:c9:8d:a4:14:ad:0c:78:3b:df:e9:e4:1e:e9:78:90:4d:
c5:02:94:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKahZVuAJQjwyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
NzU4Y2IyOWQtMDFlOC00Y2YzLWE2NjUtMGIzOWZkYTIzZDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK4blMcR6YYTSXW/4S28jHsJ1FsOWkAOwIKk
x1tU7HVuYETGzJvhqkH9hkk7OfFh+lq9Y1rqGGTUctI0Q4MKr2HvdWwoczb/Dj7a
AZX73mvO+oVaFKKY1jnfINVBgLjJg/EhGoneH0GdlhAC01zLF9iLL/aS6R0EGKln
N3l9Z4r/M7+a3NhhRf1DH655FK3TDEzp+TxXgHB7pNDkvJIinSIPOw2HhElDPIqP
G/THZxxO+5jWXO6xJKlK0clqAsLODcExBoQXjn/DtH1HQ11mons1zsCOF6cCT6Tg
xZgpESIw8aTHV/tw1CBmRS9/1HdBf/Dy0pd00YhvVDg+ykxxPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3VgMxqG/xdlrLqe+mdgyUDo5mjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDk5YTFhOGUtODA3MC0z
MzBmLTg3MGQtMzc5YmVhM2E1M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB033Hj5/FuZ5MdHdD3t/ylrdQSNsPKMOsPiy/JhUuOBhb+TF8d1qVt/
HZmBMseDjfkZGr7eur6ZSDXUq8Sujl3mqJYCPuKPdct1XgdF5jDe4PhNpHxHEXA/
rz5E551b5iTzgGtO2YWWDenEbBO8GHXSbAKQPdMfenSwSF1OThd2mUuYLSUKZDWo
FW2UkfPUmf85i173AroghnlXKi4dFF9vYxoErOycjGmZSUaZ3vp8lHF6RyARJCYd
+WTEZnR4wbj76/APz/PGmI+K9ay9NmPq4S52Fc/W8CYT0MAUnhSu8kwMzYDGDuOw
5lHTyY2kFK0MeDvf6eQe6XiQTcUClFw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:45 2026 by rpki-client