
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/403a7ae1-88fa-34e8-ac84-359c16404b68.roa
File: 403a7ae1-88fa-34e8-ac84-359c16404b68.roa (raw, json)
Hash identifier: qzK+8MyqC1RRGrMhkuzu2Cdtnq05yRQow6DAVn+CKGE=
Subject key identifier: FD:A3:B4:1D:D6:7B:04:32:DD:BE:A4:E6:A6:70:57:2D:0E:B8:8A:9A
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D5CB4F38E0F70C8FE068DC1C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/403a7ae1-88fa-34e8-ac84-359c16404b68.roa
Signing time: Wed 01 Apr 2026 13:00:30 +0000
ROA not before: Wed 01 Apr 2026 13:00:30 +0000
ROA not after: Tue 30 Jun 2026 13:00:30 +0000
asID: 138915
IP address blocks: 38.54.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5c:b4:f3:8e:0f:70:c8:fe:06:8d:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 1 13:00:30 2026 GMT
Not After : Jun 30 13:00:30 2026 GMT
Subject: CN=d7dc4566-44dd-46e6-ad6f-8c963a5fedff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:d2:ba:a4:9a:34:9f:86:c2:21:7d:bc:4d:
a0:34:37:30:ce:62:31:96:93:92:1a:a8:86:91:4f:
5e:9e:6c:59:4a:3a:92:de:b4:9d:a7:eb:1e:28:2c:
5a:3c:43:6b:71:d9:74:fa:cb:24:15:ca:7d:ac:36:
40:5d:dc:14:18:5d:70:64:3c:5a:07:8c:ee:60:a5:
a3:16:5c:a3:4c:65:49:bd:cc:75:6c:12:20:3f:e6:
7b:a9:9e:0d:12:15:74:d3:f0:2b:05:88:42:dc:03:
fe:ef:9c:5e:b7:2d:06:40:ac:53:a7:06:ab:88:c1:
70:d6:26:8a:11:36:e5:5b:d8:c4:0e:66:7b:cc:ce:
08:0a:da:d9:51:84:e6:e6:36:4b:1c:e4:e0:57:11:
9f:26:ca:95:6e:4b:bc:64:ff:f7:68:c6:a5:31:fd:
5f:60:2a:06:d7:12:0c:55:a1:e1:ed:bc:8b:a9:99:
b5:8c:c6:82:f3:d2:b4:03:cd:66:64:22:70:c5:f9:
b5:ed:78:47:95:f3:52:af:a0:35:3e:ff:57:cb:90:
11:15:3f:ea:e2:b0:07:69:f1:c8:b0:04:46:8b:65:
13:3c:6f:f1:35:b8:3d:a8:6f:aa:79:42:2d:16:07:
0c:67:eb:7d:85:0d:f3:2b:7c:95:1f:73:8f:5a:d8:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:B4:1D:D6:7B:04:32:DD:BE:A4:E6:A6:70:57:2D:0E:B8:8A:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/403a7ae1-88fa-34e8-ac84-359c16404b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.54.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:ad:da:b6:80:36:d3:5f:9a:dd:84:59:1e:26:e2:74:55:e8:
54:31:7e:92:0a:43:11:27:b9:41:36:c7:77:1c:b2:12:5d:c7:
68:42:3a:f3:11:65:01:5a:e9:d3:32:2b:a7:ad:50:0d:2e:35:
8e:80:9a:2b:3e:8b:3c:4f:87:df:2b:bb:d4:c9:b9:78:fa:67:
01:ca:47:6c:c6:d5:4c:74:2e:18:a7:49:06:5e:2e:6d:cb:87:
2f:99:86:9a:ac:54:c8:1f:10:9c:8c:3a:6e:c6:a9:ce:5c:8a:
78:40:67:cf:6a:96:27:a5:a9:91:a7:54:58:55:f0:79:f4:83:
56:d0:1d:6c:f4:ac:85:91:d7:f6:ee:3a:8b:67:67:2a:b9:a9:
92:d8:b4:12:e0:79:a6:cd:c7:f4:ad:5e:e7:c4:9e:fb:37:62:
c5:d1:45:82:ab:24:28:6d:b3:6f:e8:f6:90:5f:dc:23:09:4f:
46:20:8b:43:34:0e:68:e4:e9:29:3c:4b:16:5c:8d:43:a8:7f:
be:5e:b9:63:85:fd:3b:e7:1e:de:38:04:f2:c5:aa:94:6d:55:
ee:83:6f:af:cb:fe:80:ee:96:af:41:eb:39:62:16:8c:10:b1:
ff:aa:b0:37:f6:e6:aa:44:0d:7c:27:67:df:3e:bf:d6:6e:99:
36:bc:0f:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPOOD3DI/gaNwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk
ZDdkYzQ1NjYtNDRkZC00NmU2LWFkNmYtOGM5NjNhNWZlZGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbbSuqSaNJ+GwiF9vE2gNDcwzmIxlpOSGqiG
kU9enmxZSjqS3rSdp+seKCxaPENrcdl0+sskFcp9rDZAXdwUGF1wZDxaB4zuYKWj
FlyjTGVJvcx1bBIgP+Z7qZ4NEhV00/ArBYhC3AP+75xety0GQKxTpwariMFw1iaK
ETblW9jEDmZ7zM4ICtrZUYTm5jZLHOTgVxGfJsqVbku8ZP/3aMalMf1fYCoG1xIM
VaHh7byLqZm1jMaC89K0A81mZCJwxfm17XhHlfNSr6A1Pv9Xy5ARFT/q4rAHafHI
sARGi2UTPG/xNbg9qG+qeUItFgcMZ+t9hQ3zK3yVH3OPWtivlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2jtB3WewQy3b6k5qZwVy0OuIqaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDAzYTdhZTEtODhmYS0z
NGU4LWFjODQtMzU5YzE2NDA0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjY1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAut2raANtNfmt2EWR4m4nRV6FQxfpIKQxEnuUE2x3ccshJdx2hCOvMR
ZQFa6dMyK6etUA0uNY6Amis+izxPh98ru9TJuXj6ZwHKR2zG1Ux0LhinSQZeLm3L
hy+ZhpqsVMgfEJyMOm7Gqc5cinhAZ89qlielqZGnVFhV8Hn0g1bQHWz0rIWR1/bu
OotnZyq5qZLYtBLgeabNx/StXufEnvs3YsXRRYKrJChts2/o9pBf3CMJT0Ygi0M0
Dmjk6Sk8SxZcjUOof75euWOF/TvnHt44BPLFqpRtVe6Db6/L/oDulq9B6zliFowQ
sf+qsDf25qpEDXwnZ98+v9ZumTa8D4Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:58:08 2026 by rpki-client