
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa
File: 399a7856-294a-3666-870e-a30376203f04.roa (raw, json)
Hash identifier: w9U8lInJaXylkdrz9iQTL++BzxHBChQnjnylpc83s7w=
Subject key identifier: 24:F0:71:A9:19:87:53:6B:60:6B:80:73:4F:54:77:C9:16:E9:39:3A
Certificate issuer: /CN=20044893-520c-4759-8537-c02648d4012e
Certificate serial: 010D0C9F4328584CA5139877D7AB0A6D6114CE00
Authority key identifier: 44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa
Signing time: Sun 25 Jan 2026 18:22:30 +0000
ROA not before: Sun 25 Jan 2026 18:22:30 +0000
ROA not after: Sat 25 Apr 2026 17:22:30 +0000
asID: 394904
IP address blocks: 23.152.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:13:98:77:d7:ab:0a:6d:61:14:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20044893-520c-4759-8537-c02648d4012e
Validity
Not Before: Jan 25 18:22:30 2026 GMT
Not After : Apr 25 17:22:30 2026 GMT
Subject: CN=0e08be14-4f56-4fda-8dd0-50723f34075b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:47:81:c3:f0:d4:17:d0:44:5d:de:5f:d3:e3:
dc:1b:6c:96:fb:57:1d:82:fe:5e:2c:22:29:ca:a8:
f2:c2:9b:e5:72:fa:c3:32:cd:88:d1:a0:62:13:a5:
62:0e:43:4c:82:59:a9:c2:ac:fe:ac:9e:b4:ec:50:
fe:bf:59:1f:06:bf:f9:9e:84:b0:ff:ba:9a:f3:5e:
a6:31:0e:ff:5f:a5:a2:ee:26:cf:77:6a:18:e1:34:
7e:b4:66:94:90:f1:14:b8:88:d6:61:d6:04:49:e9:
98:64:1c:6a:1a:c9:83:b2:01:53:61:8f:00:48:77:
0a:0c:4c:7c:ae:0c:9f:d6:88:05:05:02:ce:07:42:
0c:94:9d:ea:da:29:ce:8f:1d:28:fb:2c:d5:56:e8:
5c:11:c8:67:1e:73:ce:58:ca:66:d2:b7:6c:72:6a:
f7:bf:02:a2:c2:ad:1a:ce:da:48:df:f5:2d:c3:43:
e7:c2:cf:52:ad:7a:db:e0:de:72:2b:d9:b9:7b:bd:
8b:a2:70:8a:b7:02:07:e9:3c:c2:78:61:62:83:d2:
de:c2:e1:de:ac:47:c3:69:13:6b:d8:09:7e:fc:04:
9b:f1:75:63:d8:56:af:e5:f7:e8:56:dc:24:eb:45:
b7:20:d0:01:2b:32:0c:ab:9b:c6:13:7d:81:d7:13:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:71:A9:19:87:53:6B:60:6B:80:73:4F:54:77:C9:16:E9:39:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.crl
X509v3 Authority Key Identifier:
keyid:44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:cd:cd:dc:32:02:23:cc:15:d9:7e:32:03:fa:19:ff:98:6d:
b4:20:a7:10:b6:57:5f:54:9d:05:7c:0d:87:7e:6a:14:9f:b3:
bb:63:18:28:53:41:c4:b7:b2:99:9d:7a:1a:0f:95:7d:10:da:
4b:a6:6f:45:a4:e0:27:d7:04:7a:63:d4:54:70:6c:9b:b4:bf:
e2:85:39:e9:e6:17:33:4a:18:ce:1b:d0:97:5c:5a:81:32:8e:
ca:40:24:cf:30:1b:95:cb:7c:0e:73:74:53:f6:f0:68:52:09:
ad:75:c9:59:95:ee:fe:43:0c:d2:f1:5a:3e:7b:6d:90:aa:88:
4b:76:e5:d4:97:3d:78:2d:41:52:44:ed:1e:1e:07:6a:17:74:
6a:de:05:01:a9:90:98:76:98:19:36:68:76:ec:26:e3:49:b9:
f4:44:ed:63:6c:85:b3:2f:d3:0f:a8:83:02:4e:e9:ab:db:bb:
eb:cc:d3:31:9f:1d:51:33:c7:51:50:78:82:18:61:88:a3:1f:
57:73:8c:04:f8:7e:d5:29:ab:4a:7a:b5:01:50:27:54:1e:7b:
b6:ad:49:d7:38:c9:56:17:ab:5f:a0:fa:9a:02:dd:9c:25:75:
2e:dc:dc:05:58:2f:30:b6:2d:2c:ae:1e:24:88:92:06:3f:1d:
d6:9d:5c:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEylE5h316sKbWEUzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjAwNDQ4OTMtNTIwYy00NzU5LTg1MzctYzAyNjQ4ZDQw
MTJlMB4XDTI2MDEyNTE4MjIzMFoXDTI2MDQyNTE3MjIzMFowLzEtMCsGA1UEAxMk
MGUwOGJlMTQtNGY1Ni00ZmRhLThkZDAtNTA3MjNmMzQwNzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEeBw/DUF9BEXd5f0+PcG2yW+1cdgv5eLCIp
yqjywpvlcvrDMs2I0aBiE6ViDkNMglmpwqz+rJ607FD+v1kfBr/5noSw/7qa816m
MQ7/X6Wi7ibPd2oY4TR+tGaUkPEUuIjWYdYESemYZBxqGsmDsgFTYY8ASHcKDEx8
rgyf1ogFBQLOB0IMlJ3q2inOjx0o+yzVVuhcEchnHnPOWMpm0rdscmr3vwKiwq0a
ztpI3/Utw0Pnws9SrXrb4N5yK9m5e72LonCKtwIH6TzCeGFig9LewuHerEfDaRNr
2Al+/ASb8XVj2Fav5ffoVtwk60W3INABKzIMq5vGE32B1xOyMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTwcakZh1NrYGuAc09Ud8kW6Tk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDA0
NDg5My01MjBjLTQ3NTktODUzNy1jMDI2NDhkNDAxMmUvMzk5YTc4NTYtMjk0YS0z
NjY2LTg3MGUtYTMwMzc2MjAzZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjAwNDQ4OTMtNTIwYy00NzU5LTg1
MzctYzAyNjQ4ZDQwMTJlLzIwMDQ0ODkzLTUyMGMtNDc1OS04NTM3LWMwMjY0OGQ0
MDEyZS5jcmwwHwYDVR0jBBgwFoAURAGjTuiVoaU19Tu+XZ1g1lkfL3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDA0NDg5My01MjBjLTQ3NTktODUzNy1jMDI2
NDhkNDAxMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5i8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvNzdwyAiPMFdl+MgP6Gf+YbbQgpxC2V19UnQV8DYd+ahSfs7tjGChT
QcS3spmdehoPlX0Q2kumb0Wk4CfXBHpj1FRwbJu0v+KFOenmFzNKGM4b0JdcWoEy
jspAJM8wG5XLfA5zdFP28GhSCa11yVmV7v5DDNLxWj57bZCqiEt25dSXPXgtQVJE
7R4eB2oXdGreBQGpkJh2mBk2aHbsJuNJufRE7WNshbMv0w+ogwJO6avbu+vM0zGf
HVEzx1FQeIIYYYijH1dzjAT4ftUpq0p6tQFQJ1Qee7atSdc4yVYXq1+g+poC3Zwl
dS7c3AVYLzC2LSyuHiSIkgY/HdadXK4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:44 2026 by rpki-client