
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f4f447f-f80f-3bfd-b703-13b492ddc181.roa
File: 5f4f447f-f80f-3bfd-b703-13b492ddc181.roa (raw, json)
Hash identifier: xN8JlGqorv0ZHLac2X8lXAAzuqDGA3tGVuRGFz0LTdA=
Subject key identifier: 7C:64:C5:EB:EB:05:FD:CA:FC:E1:F3:BB:FD:51:71:B5:47:02:82:1E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CF42218B14236255DF59CB4C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f4f447f-f80f-3bfd-b703-13b492ddc181.roa
Signing time: Mon 23 Feb 2026 02:00:31 +0000
ROA not before: Mon 23 Feb 2026 02:00:31 +0000
ROA not after: Sun 24 May 2026 01:00:31 +0000
asID: 131267
IP address blocks: 38.135.66.0/23 maxlen: 24
154.46.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f4:22:18:b1:42:36:25:5d:f5:9c:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 23 02:00:31 2026 GMT
Not After : May 24 01:00:31 2026 GMT
Subject: CN=35b242ed-b0b0-4e42-912d-4a7b5eccb9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:91:36:c4:f2:ba:71:9d:5f:ae:20:9b:8f:
88:58:7b:f5:f5:6c:31:54:1c:f5:23:08:93:81:7b:
59:9c:f4:19:8c:25:73:75:c0:1e:a3:76:49:86:d9:
67:f8:84:b9:c9:c2:99:1a:1b:dc:cf:ba:10:8d:19:
bc:db:09:ae:17:08:24:e9:65:05:be:c5:37:1b:9c:
45:9f:ef:49:fb:f9:0a:b4:f3:6a:75:7f:bf:34:6b:
8d:a0:40:c1:60:5a:1f:b7:a6:7a:e6:cd:5f:4d:d6:
bc:5d:48:0e:13:f5:ad:0d:cd:46:24:86:90:dd:d6:
00:31:ae:da:30:ef:da:7b:49:e8:a1:49:44:74:98:
72:68:0c:fe:3c:7e:59:e3:d1:32:dd:07:97:9b:62:
7d:09:54:6e:42:23:a5:f7:15:a3:19:db:b8:0f:f1:
13:42:1a:71:ce:da:35:63:08:1d:e5:7f:e9:43:ef:
82:ce:1d:b6:03:07:c8:54:c3:a4:c5:89:5e:f3:3e:
c7:43:10:f0:48:d3:3e:0d:c5:49:f4:09:c1:ae:d7:
8e:e0:08:1d:7a:22:10:87:32:8e:7a:b1:68:73:20:
a7:39:0f:ab:4b:c0:f4:da:ca:27:c6:e8:26:20:56:
23:c1:79:cb:53:76:8e:c8:3d:47:3d:6d:e3:79:ba:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:C5:EB:EB:05:FD:CA:FC:E1:F3:BB:FD:51:71:B5:47:02:82:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f4f447f-f80f-3bfd-b703-13b492ddc181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.135.66.0/23
154.46.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:92:a6:74:32:d4:d5:a4:83:38:12:c2:7d:15:22:fd:36:0d:
9b:7b:bd:76:5c:73:34:31:b8:b8:7b:b6:9c:d5:3c:3c:09:f5:
e3:c5:8a:09:79:04:b9:3c:41:14:e0:c9:2c:c5:cc:94:e0:a2:
8a:51:28:17:fc:90:4c:49:1b:86:d3:7a:69:5e:2d:7c:7f:0e:
3a:6e:d4:93:99:a4:fb:42:dd:41:ea:53:ca:fe:04:e5:84:e5:
4b:98:16:9e:9c:5c:45:8d:70:07:74:34:47:1f:c3:ec:e7:a1:
cf:98:fd:97:db:87:7a:9c:95:5e:e3:3b:bd:79:76:4e:74:09:
e3:48:de:5d:e4:2b:08:f1:1f:ec:8d:f1:8b:be:68:36:6f:1f:
39:3e:07:f0:8c:1e:34:24:86:f2:f6:02:ce:36:a5:5e:4c:37:
b7:b3:f4:21:35:f8:c6:f6:a3:7b:fd:08:69:eb:41:3c:a9:e7:
4a:74:27:ab:ad:5e:fc:7e:30:df:08:82:39:bb:bc:23:d7:99:
46:c9:e1:c8:38:0b:7d:ff:ff:73:e1:36:dd:69:0f:e1:f1:56:
2c:34:6d:ca:9a:87:dc:78:82:23:6d:1b:d3:2f:22:07:e3:67:
c3:24:c5:7f:7f:9a:c0:e4:f2:34:e4:14:2c:4c:06:bc:f2:d6:
c1:38:fb:ec
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz0IhixQjYlXfWctMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
MzViMjQyZWQtYjBiMC00ZTQyLTkxMmQtNGE3YjVlY2NiOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRiRNsTyunGdX64gm4+IWHv19WwxVBz1IwiT
gXtZnPQZjCVzdcAeo3ZJhtln+IS5ycKZGhvcz7oQjRm82wmuFwgk6WUFvsU3G5xF
n+9J+/kKtPNqdX+/NGuNoEDBYFoft6Z65s1fTda8XUgOE/WtDc1GJIaQ3dYAMa7a
MO/ae0nooUlEdJhyaAz+PH5Z49Ey3QeXm2J9CVRuQiOl9xWjGdu4D/ETQhpxzto1
Ywgd5X/pQ++Czh22AwfIVMOkxYle8z7HQxDwSNM+DcVJ9AnBrteO4AgdeiIQhzKO
erFocyCnOQ+rS8D02sonxugmIFYjwXnLU3aOyD1HPW3jebprewIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHxkxevrBf3K/OHzu/1RcbVHAoIeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWY0ZjQ0N2YtZjgwZi0z
YmZkLWI3MDMtMTNiNDkyZGRjMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJodCAwQB
mi4YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHuSpnQy1NWkgzgSwn0VIv02DZt7vXZcczQxuLh7tpzVPDwJ
9ePFigl5BLk8QRTgySzFzJTgoopRKBf8kExJG4bTemleLXx/Djpu1JOZpPtC3UHq
U8r+BOWE5UuYFp6cXEWNcAd0NEcfw+znoc+Y/Zfbh3qclV7jO715dk50CeNI3l3k
KwjxH+yN8Yu+aDZvHzk+B/CMHjQkhvL2As42pV5MN7ez9CE1+Mb2o3v9CGnrQTyp
50p0J6utXvx+MN8Igjm7vCPXmUbJ4cg4C33//3PhNt1pD+HxViw0bcqah9x4giNt
G9MvIgfjZ8MkxX9/msDk8jTkFCxMBrzy1sE4++w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:10 2026 by rpki-client