
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5ba660b-ab49-3d4b-be81-71345b3493b8.roa
File: d5ba660b-ab49-3d4b-be81-71345b3493b8.roa (raw, json)
Hash identifier: YXuhwBS4KKcxaQwxwpC7QwzV5myT5dX307fpXEfWJZo=
Subject key identifier: DD:08:37:4D:5C:22:1A:FD:30:14:19:BB:D3:E5:FF:EF:D1:5E:43:9C
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D4C1A3FCD767EC4CAEC4D3200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5ba660b-ab49-3d4b-be81-71345b3493b8.roa
Signing time: Thu 26 Mar 2026 14:15:54 +0000
ROA not before: Thu 26 Mar 2026 14:15:54 +0000
ROA not after: Wed 24 Jun 2026 14:15:54 +0000
asID: 40115
IP address blocks: 38.47.192.0/18 maxlen: 24
38.181.0.0/18 maxlen: 24
154.19.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4c:1a:3f:cd:76:7e:c4:ca:ec:4d:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 26 14:15:54 2026 GMT
Not After : Jun 24 14:15:54 2026 GMT
Subject: CN=bc66f413-88b1-4716-94e6-e5daf74e1b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:14:5b:8a:3f:e1:2e:66:dd:3e:3f:58:6b:
78:64:09:7d:6f:68:a8:82:ff:71:c6:cf:98:05:35:
ad:fe:f5:6a:8b:3f:ff:4f:0d:75:93:02:c5:82:1b:
b3:ab:7a:43:55:d2:92:b6:8a:5d:f0:73:be:2b:81:
18:a8:91:cd:c8:22:91:ff:bf:af:ef:d2:41:b2:d1:
ad:82:6b:9a:43:6a:49:65:42:22:ea:bf:c1:19:c2:
81:52:f7:12:bd:d5:5d:df:89:4c:9b:d9:91:a0:ab:
b9:1c:1d:13:ad:90:d3:f7:79:3c:5d:d5:0f:84:cd:
d6:04:ed:df:b1:aa:7e:1f:15:50:5e:ff:b3:9f:34:
1c:1d:d0:06:95:86:95:e4:26:61:cb:c3:7f:2a:41:
85:15:07:26:4c:a3:65:06:1f:22:5a:27:68:30:1d:
fd:e1:fe:bd:7d:a4:ce:f4:cc:ef:03:98:af:6a:76:
6d:b7:ad:04:03:c9:3c:9a:2c:13:39:2d:15:42:17:
34:77:07:16:1d:09:fd:56:0e:19:8a:74:d0:ea:57:
91:d6:2f:11:e3:a0:76:61:33:e3:78:4a:9f:f4:40:
c7:8c:2d:ab:e7:08:cc:8d:28:84:43:f9:c7:49:88:
95:b3:0e:8c:60:e8:d3:fd:09:70:e4:ee:8d:ae:28:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:37:4D:5C:22:1A:FD:30:14:19:BB:D3:E5:FF:EF:D1:5E:43:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5ba660b-ab49-3d4b-be81-71345b3493b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.47.192.0/18
38.181.0.0/18
154.19.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:0b:1e:9f:62:f6:c0:0d:cf:e2:d4:0c:d7:95:e2:26:ee:4e:
2b:8a:1a:64:f8:3b:cf:24:2b:36:2c:62:a6:59:3d:74:56:84:
14:1c:18:92:04:58:65:8a:80:24:2f:80:80:94:0d:5a:f2:2e:
1e:8e:ae:de:82:56:00:97:cf:ff:97:c5:93:a8:1a:8b:94:c3:
54:88:67:21:aa:32:e4:20:18:cf:2b:52:4d:ae:70:44:2f:5b:
e5:9e:40:43:7c:a8:66:f8:24:3e:cd:6d:3d:63:aa:1f:9b:71:
9c:87:e8:c8:6a:73:d7:06:c2:95:9c:9d:c1:57:53:42:da:1c:
42:03:dc:f1:ec:d7:21:f9:6f:e6:f7:5a:28:a7:25:13:b2:56:
8f:74:cc:c9:49:45:4d:51:35:e3:6e:84:b9:76:57:c0:5e:d1:
85:9b:92:f5:f7:05:99:5f:99:54:60:12:3f:d9:e9:c3:eb:b0:
23:65:51:62:84:3a:6f:a3:43:0b:27:f0:a4:0e:28:34:5a:1a:
83:aa:c3:8e:24:e6:a1:63:c0:87:66:2f:f2:d8:72:96:16:f7:
9d:11:57:16:c8:2f:a9:e4:63:7d:f0:73:c7:98:40:96:79:f1:
0e:91:b6:7c:57:4c:8f:f6:52:97:6b:c2:50:64:ad:a3:4a:c4:
07:00:99:41
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1MGj/Ndn7EyuxNMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMyNjE0MTU1NFoXDTI2MDYyNDE0MTU1NFowLzEtMCsGA1UEAxMk
YmM2NmY0MTMtODhiMS00NzE2LTk0ZTYtZTVkYWY3NGUxYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr04UW4o/4S5m3T4/WGt4ZAl9b2iogv9xxs+Y
BTWt/vVqiz//Tw11kwLFghuzq3pDVdKStopd8HO+K4EYqJHNyCKR/7+v79JBstGt
gmuaQ2pJZUIi6r/BGcKBUvcSvdVd34lMm9mRoKu5HB0TrZDT93k8XdUPhM3WBO3f
sap+HxVQXv+znzQcHdAGlYaV5CZhy8N/KkGFFQcmTKNlBh8iWidoMB394f69faTO
9MzvA5ivanZtt60EA8k8miwTOS0VQhc0dwcWHQn9Vg4ZinTQ6leR1i8R46B2YTPj
eEqf9EDHjC2r5wjMjSiEQ/nHSYiVsw6MYOjT/Qlw5O6NriizwwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFN0IN01cIhr9MBQZu9Pl/+/RXkOcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDViYTY2MGItYWI0OS0z
ZDRiLWJlODEtNzEzNDViMzQ5M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGJi/AAwQG
JrUAAwQGmhNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADwLHp9i9sANz+LUDNeV4ibuTiuKGmT4O88kKzYs
YqZZPXRWhBQcGJIEWGWKgCQvgICUDVryLh6Ort6CVgCXz/+XxZOoGouUw1SIZyGq
MuQgGM8rUk2ucEQvW+WeQEN8qGb4JD7NbT1jqh+bcZyH6Mhqc9cGwpWcncFXU0La
HEID3PHs1yH5b+b3WiinJROyVo90zMlJRU1RNeNuhLl2V8Be0YWbkvX3BZlfmVRg
Ej/Z6cPrsCNlUWKEOm+jQwsn8KQOKDRaGoOqw44k5qFjwIdmL/LYcpYW950RVxbI
L6nkY33wc8eYQJZ58Q6RtnxXTI/2UpdrwlBkraNKxAcAmUE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:29 2026 by rpki-client