
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa
File: f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa (raw, json)
Hash identifier: pOoUccLGofANmCCTg5dgliCJJc7lU5vhCNR4BM/SCFg=
Subject key identifier: 00:38:36:BE:3C:05:33:DA:ED:96:EB:B6:88:07:A1:DA:DF:F4:F4:16
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DE2B5FA6A5F3C3324F0D34CC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 396599
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:fa:6a:5f:3c:33:24:f0:d3:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=64981c43-8896-41f2-94c0-cc4acdb476bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:6b:0c:ed:7f:8b:44:a0:19:5a:52:87:23:
2f:64:ec:0a:e8:20:ff:98:50:57:7d:60:2a:53:c9:
1c:d6:f7:f5:01:ab:9b:de:30:18:06:cc:91:29:ca:
0f:83:1b:9a:ee:c6:09:a8:a7:dd:4d:be:43:a8:0d:
08:aa:93:81:d7:08:72:0f:71:52:67:73:a7:00:e8:
28:9d:fe:17:c6:0b:d9:5a:bc:e3:1f:55:d0:8f:24:
b6:6f:dc:9d:be:c9:63:b4:03:a5:63:40:2d:d9:af:
b8:fa:cd:c5:94:19:13:c9:91:c3:b7:66:16:62:62:
f4:2b:f9:9e:a0:a7:8d:7b:0c:16:0e:a6:04:69:94:
99:98:e2:9f:68:8a:10:4f:2a:b9:c6:50:35:f9:3b:
f0:5d:a8:35:7e:75:3d:9f:89:82:14:61:02:ab:ed:
7f:98:92:ce:92:8c:50:af:dd:3c:b8:5f:a7:05:9c:
b7:44:6b:97:f8:c2:8d:91:7b:73:b8:74:18:9e:e5:
92:f1:a2:82:d0:8b:d7:13:eb:50:b1:2d:72:5a:f7:
64:69:b5:29:cc:34:31:09:79:7f:d6:f0:77:4e:67:
73:80:2e:9d:70:f9:75:a5:1e:4b:a4:5e:45:cf:df:
84:36:ea:a0:8a:03:c0:f9:d3:0a:e0:14:25:68:5d:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:36:BE:3C:05:33:DA:ED:96:EB:B6:88:07:A1:DA:DF:F4:F4:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ba:ae:f7:a9:6f:91:8c:62:c6:1d:bc:d0:51:46:db:62:30:
3c:1b:ac:ea:b6:a0:26:35:81:28:96:f6:6e:ca:0b:d3:98:32:
95:28:20:c0:5f:07:22:aa:33:0f:99:e3:d5:5d:b2:37:c2:05:
55:0b:b8:5a:f6:5f:45:ca:09:4d:75:7d:b1:ba:96:1a:95:e7:
df:8a:4a:5a:bf:04:16:de:88:32:c0:ad:23:d1:e6:3b:5f:ed:
27:82:58:a3:3d:c7:7a:51:d0:17:a5:41:b3:90:6d:10:e9:12:
c3:d5:9d:2c:45:51:4a:1b:db:af:0a:42:93:36:e3:7f:13:98:
73:5c:0b:53:43:a9:98:8b:fb:7e:9b:4b:79:92:2a:1c:b3:65:
84:3b:5a:36:da:35:f4:ca:52:92:f2:11:bd:48:ef:35:8d:da:
4b:16:ba:1a:65:34:ff:fa:bd:9e:8d:44:ed:00:75:51:de:d0:
1b:90:ec:a9:a5:a9:73:e1:ef:10:32:27:5a:b7:01:48:75:75:
72:56:a2:d8:7c:bb:58:90:07:38:1c:2a:48:8e:55:1c:ed:c2:
e7:7e:05:82:31:a3:10:35:a5:36:88:b9:73:21:6f:20:98:e4:
2c:70:e8:8d:a7:df:07:f6:62:da:b9:91:15:d3:e2:02:e9:e1:
53:cb:d2:79
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfpqXzwzJPDTTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
NjQ5ODFjNDMtODg5Ni00MWYyLTk0YzAtY2M0YWNkYjQ3NmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzdrDO1/i0SgGVpShyMvZOwK6CD/mFBXfWAq
U8kc1vf1Aaub3jAYBsyRKcoPgxua7sYJqKfdTb5DqA0IqpOB1whyD3FSZ3OnAOgo
nf4XxgvZWrzjH1XQjyS2b9ydvsljtAOlY0At2a+4+s3FlBkTyZHDt2YWYmL0K/me
oKeNewwWDqYEaZSZmOKfaIoQTyq5xlA1+TvwXag1fnU9n4mCFGECq+1/mJLOkoxQ
r908uF+nBZy3RGuX+MKNkXtzuHQYnuWS8aKC0IvXE+tQsS1yWvdkabUpzDQxCXl/
1vB3TmdzgC6dcPl1pR5LpF5Fz9+ENuqgigPA+dMK4BQlaF1cxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAA4Nr48BTPa7ZbrtogHodrf9PQWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU0ZTVhYTgtMzQwMi0z
ZWIwLTg0YzAtYzliOWQ1MmY5ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAPuq73qW+RjGLGHbzQUUbbYjA8G6zqtqAmNYEolvZuygvTmDKVKCDA
XwciqjMPmePVXbI3wgVVC7ha9l9FyglNdX2xupYaleffikpavwQW3ogywK0j0eY7
X+0nglijPcd6UdAXpUGzkG0Q6RLD1Z0sRVFKG9uvCkKTNuN/E5hzXAtTQ6mYi/t+
m0t5kiocs2WEO1o22jX0ylKS8hG9SO81jdpLFroaZTT/+r2ejUTtAHVR3tAbkOyp
palz4e8QMidatwFIdXVyVqLYfLtYkAc4HCpIjlUc7cLnfgWCMaMQNaU2iLlzIW8g
mOQscOiNp98H9mLauZEV0+IC6eFTy9J5
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:18 2026 by rpki-client