
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json)
Hash identifier: 6MrXlSWjj4I4HTJCx8gn6Xq965POEIi81rgVuKje980=
Subject key identifier: 9F:6B:51:D7:8B:41:25:B0:DB:08:CE:0C:A1:6E:D7:DA:81:78:C7:A0
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F4328584E18AEF03F395848AAE70C9580
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 23467
IP address blocks: 152.38.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:ae:f0:3f:39:58:48:aa:e7:0c:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=9f4d55cc-9d5b-452a-a2c0-f1527862aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dc:5c:16:a4:a5:4e:e4:2f:71:9e:9b:ce:30:
24:8c:16:44:5f:4a:7b:40:da:9b:2a:43:37:c7:fa:
20:5f:a2:63:97:df:b6:d2:f4:10:99:4f:3b:5f:13:
b1:ab:0c:fa:d9:0d:72:b4:a4:86:aa:90:3a:7c:ee:
de:77:e2:65:7e:a4:27:8e:3d:49:c7:51:97:96:de:
04:a8:17:90:6c:c5:d6:e3:db:09:46:26:13:d2:5a:
ad:7e:06:39:e3:33:e1:88:65:41:57:ba:88:74:60:
1a:23:9d:74:e6:17:b9:0d:ce:98:ac:b9:a3:b8:b4:
fc:a1:51:19:4d:a9:bd:d3:cf:2d:5e:ed:30:b8:5a:
66:f6:56:55:a0:97:76:15:ce:62:e9:66:0b:16:7e:
fb:85:45:9f:63:ad:d1:fd:08:58:ee:52:88:a4:15:
8f:8c:c5:b6:48:c0:35:3d:51:2f:9e:d1:58:06:45:
6b:a1:06:10:49:4b:e2:e8:3a:bf:fc:05:33:72:01:
37:91:7c:f9:dc:2f:77:67:7a:e5:d5:04:5a:13:cd:
d9:16:fd:e1:e8:af:4b:5d:67:ad:ec:6d:ce:87:2b:
03:b1:bf:ab:2e:05:54:96:a6:60:75:15:29:5d:17:
e9:e1:e6:0f:73:59:95:d1:23:a7:54:f7:2a:29:fa:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:51:D7:8B:41:25:B0:DB:08:CE:0C:A1:6E:D7:DA:81:78:C7:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:90:49:ae:7c:7a:97:48:42:e0:85:9a:9e:b0:20:56:c5:7a:
12:62:a6:f3:2f:fc:0f:cb:41:2f:5c:0a:5f:00:55:39:b0:11:
a9:59:1f:63:2d:3f:0f:f6:49:3a:bf:c8:99:0e:1a:73:2b:7a:
50:71:ec:df:79:b5:46:89:ba:a2:0e:9f:ee:01:90:42:04:3e:
93:e7:77:67:e5:02:a9:9c:84:79:fa:d1:09:cc:a9:be:bf:10:
6f:a9:1d:dd:df:ee:58:96:d6:96:1e:13:45:82:21:26:c7:d9:
7a:54:27:a2:90:d4:85:36:d3:1d:61:e2:c5:15:10:4d:de:8a:
61:cf:f4:4a:ed:97:bd:8e:1a:cf:86:59:cc:c5:23:5e:7b:1b:
b4:f5:3f:fa:6a:6c:19:06:a7:8b:65:bf:aa:b6:ba:67:3d:da:
cb:bb:87:7e:2f:59:63:07:a1:f6:a0:11:db:9f:33:92:9d:63:
82:0e:d9:a7:2e:93:7a:a0:4e:26:18:7b:bf:e4:78:b2:46:be:
9a:8d:e4:ef:29:e0:04:50:bf:b9:c8:b2:3c:28:27:19:f2:a2:
cc:4d:9c:de:3d:c5:71:c2:98:1a:e3:89:32:b7:32:f4:08:f5:
e9:9d:34:6a:8d:22:40:96:ed:df:8e:40:21:99:3a:19:8f:59:
c6:1a:87:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvA/OVhIqucMlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2
ZjIyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
OWY0ZDU1Y2MtOWQ1Yi00NTJhLWEyYzAtZjE1Mjc4NjJhYTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6txcFqSlTuQvcZ6bzjAkjBZEX0p7QNqbKkM3
x/ogX6Jjl9+20vQQmU87XxOxqwz62Q1ytKSGqpA6fO7ed+JlfqQnjj1Jx1GXlt4E
qBeQbMXW49sJRiYT0lqtfgY54zPhiGVBV7qIdGAaI5105he5Dc6YrLmjuLT8oVEZ
Tam9088tXu0wuFpm9lZVoJd2Fc5i6WYLFn77hUWfY63R/QhY7lKIpBWPjMW2SMA1
PVEvntFYBkVroQYQSUvi6Dq//AUzcgE3kXz53C93Z3rl1QRaE83ZFv3h6K9LXWet
7G3OhysDsb+rLgVUlqZgdRUpXRfp4eYPc1mV0SOnVPcqKfr9jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9rUdeLQSWw2wjODKFu19qBeMegMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx
NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z
ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk
YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi
NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl
NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWQSa58epdIQuCFmp6wIFbFehJipvMv/A/LQS9cCl8AVTmwEalZH2Mt
Pw/2STq/yJkOGnMrelBx7N95tUaJuqIOn+4BkEIEPpPnd2flAqmchHn60QnMqb6/
EG+pHd3f7liW1pYeE0WCISbH2XpUJ6KQ1IU20x1h4sUVEE3eimHP9Ertl72OGs+G
WczFI157G7T1P/pqbBkGp4tlv6q2umc92su7h34vWWMHofagEdufM5KdY4IO2acu
k3qgTiYYe7/keLJGvpqN5O8p4ARQv7nIsjwoJxnyosxNnN49xXHCmBrjiTK3MvQI
9emdNGqNIkCW7d+OQCGZOhmPWcYah7M=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:12 2026 by rpki-client