
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39e40b26-d005-3298-a66b-d37daa6aacda.roa
File: 39e40b26-d005-3298-a66b-d37daa6aacda.roa (raw, json)
Hash identifier: agXEQw1FBzw0f2ebsw25NHif13VZMZzFQKJNzjvjVyE=
Subject key identifier: 41:C2:40:93:37:E8:7C:A7:19:B2:5A:B1:47:C4:2A:78:32:90:23:EF
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D7F3621A7561C63BABFFE8000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39e40b26-d005-3298-a66b-d37daa6aacda.roa
Signing time: Mon 13 Apr 2026 21:38:18 +0000
ROA not before: Mon 13 Apr 2026 21:38:18 +0000
ROA not after: Sun 12 Jul 2026 21:38:18 +0000
asID: 210732
IP address blocks: 38.133.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:36:21:a7:56:1c:63:ba:bf:fe:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 13 21:38:18 2026 GMT
Not After : Jul 12 21:38:18 2026 GMT
Subject: CN=daca9271-b391-4e8b-8db7-80e76a5b07c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:ad:12:3e:c9:6b:d5:3c:56:45:b9:70:2b:
69:3c:23:3c:73:5b:3b:d2:e0:f3:e0:65:4f:10:43:
b1:c0:3c:2e:02:29:50:62:ec:12:18:54:d2:d2:24:
42:83:67:42:d1:48:90:2b:a5:ca:29:79:92:2b:c5:
3c:2e:fc:24:3c:c3:09:52:82:cb:e0:c8:c1:88:5f:
8c:e3:46:8e:d7:e4:5b:a4:a1:04:49:43:f3:be:6c:
1f:2e:1c:c5:3d:ed:a7:95:b9:25:96:05:7d:9b:30:
90:c1:7a:aa:c2:74:2c:1e:03:d6:7e:55:5e:06:df:
9f:29:5f:09:b7:2a:86:c4:b6:d8:83:a3:5c:1d:c9:
1c:27:d3:4a:77:d0:73:99:cc:41:02:79:0f:d8:dc:
11:7a:a1:2b:3d:eb:e6:f5:45:10:02:99:93:d3:e5:
96:99:e3:03:b8:07:34:d6:19:08:ac:7b:2c:a7:9c:
9e:98:0b:46:b0:9b:98:1c:bf:63:7d:c0:81:73:3d:
d2:58:32:e8:c6:6c:81:c7:ec:6b:15:83:6c:12:3d:
e6:30:d2:72:7f:e6:d7:c5:c1:19:a5:43:1f:5b:cb:
56:45:27:cc:89:95:d0:88:6c:98:97:84:76:ae:ea:
50:22:9d:1d:2e:a5:5c:c1:e7:15:e1:d1:71:3d:88:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:40:93:37:E8:7C:A7:19:B2:5A:B1:47:C4:2A:78:32:90:23:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39e40b26-d005-3298-a66b-d37daa6aacda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.133.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:c0:f3:58:35:fd:30:45:45:87:28:a6:73:d3:09:d0:30:c0:
0b:d8:83:1f:36:49:7b:94:cc:c9:08:98:c8:20:b5:e5:48:32:
26:61:d2:92:d4:d6:da:39:4d:ef:cf:c1:7d:80:e0:90:cd:c6:
57:2f:fa:71:9d:81:81:8f:37:7f:87:6c:19:39:f6:1a:bc:50:
59:e3:1c:ad:77:0a:12:a7:4c:84:ab:fa:d3:e2:d3:47:ee:55:
e1:c2:62:db:b5:15:26:0c:69:56:de:be:a1:18:5f:23:70:b6:
bc:9a:bb:90:9a:f9:1c:84:8d:b6:56:bd:79:ea:af:a3:47:9a:
c3:5e:5a:9e:86:33:a9:d0:9e:3d:0b:1c:2b:75:cf:05:ff:5b:
01:ee:72:94:4c:6b:d8:51:47:58:c0:0a:40:6c:1e:b6:ba:84:
fd:0a:f7:e1:27:98:f8:59:ff:5c:ee:77:c2:1f:4a:1f:1e:fe:
a5:73:78:b0:53:38:1b:bd:89:20:1d:e9:8f:06:9b:31:7a:95:
78:d5:ab:e9:3e:a7:ad:05:6d:14:e4:02:29:51:42:fe:55:3a:
94:e1:9e:9b:55:6a:1a:9b:76:d2:45:cc:c9:00:17:e6:00:dc:
9b:3d:78:37:3b:b3:c0:95:b9:42:46:99:9d:19:42:65:bb:17:
05:9c:0f:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/NiGnVhxjur/+gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQxMzIxMzgxOFoXDTI2MDcxMjIxMzgxOFowLzEtMCsGA1UEAxMk
ZGFjYTkyNzEtYjM5MS00ZThiLThkYjctODBlNzZhNWIwN2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGStEj7Ja9U8VkW5cCtpPCM8c1s70uDz4GVP
EEOxwDwuAilQYuwSGFTS0iRCg2dC0UiQK6XKKXmSK8U8LvwkPMMJUoLL4MjBiF+M
40aO1+RbpKEESUPzvmwfLhzFPe2nlbkllgV9mzCQwXqqwnQsHgPWflVeBt+fKV8J
tyqGxLbYg6NcHckcJ9NKd9BzmcxBAnkP2NwReqErPevm9UUQApmT0+WWmeMDuAc0
1hkIrHssp5yemAtGsJuYHL9jfcCBcz3SWDLoxmyBx+xrFYNsEj3mMNJyf+bXxcEZ
pUMfW8tWRSfMiZXQiGyYl4R2rupQIp0dLqVcwecV4dFxPYiUsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHCQJM36HynGbJasUfEKngykCPvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzllNDBiMjYtZDAwNS0z
Mjk4LWE2NmItZDM3ZGFhNmFhY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJoXTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPA81g1/TBFRYcopnPTCdAwwAvYgx82SXuUzMkImMggteVIMiZh0pLU
1to5Te/PwX2A4JDNxlcv+nGdgYGPN3+HbBk59hq8UFnjHK13ChKnTISr+tPi00fu
VeHCYtu1FSYMaVbevqEYXyNwtryau5Ca+RyEjbZWvXnqr6NHmsNeWp6GM6nQnj0L
HCt1zwX/WwHucpRMa9hRR1jACkBsHra6hP0K9+EnmPhZ/1zud8IfSh8e/qVzeLBT
OBu9iSAd6Y8GmzF6lXjVq+k+p60FbRTkAilRQv5VOpThnptVahqbdtJFzMkAF+YA
3Js9eDc7s8CVuUJGmZ0ZQmW7FwWcD3Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:27 2026 by rpki-client