
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/964c91a5-e4b7-375a-97dc-52bdbf2c2a5d.roa
File: 964c91a5-e4b7-375a-97dc-52bdbf2c2a5d.roa (raw, json)
Hash identifier: t8GzH42SgELi49OjwfE1zBbqq+I4hLMztgMRTnxaAik=
Subject key identifier: 98:6C:2F:9E:2E:C2:F4:4D:2E:F4:4D:87:E4:DD:94:E1:C2:C8:24:02
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D4CE4E63B0CBC27A146A8D880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/964c91a5-e4b7-375a-97dc-52bdbf2c2a5d.roa
Signing time: Thu 26 Mar 2026 21:04:13 +0000
ROA not before: Thu 26 Mar 2026 21:04:13 +0000
ROA not after: Wed 24 Jun 2026 21:04:13 +0000
asID: 270152
IP address blocks: 38.199.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4c:e4:e6:3b:0c:bc:27:a1:46:a8:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 26 21:04:13 2026 GMT
Not After : Jun 24 21:04:13 2026 GMT
Subject: CN=81d0f1d0-c2cf-47ee-a49a-8dd6caeb26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:02:71:a5:87:a0:2b:1d:c7:96:4e:ea:0a:
17:55:2b:7f:de:b9:c1:6b:bf:88:5c:4e:8a:64:17:
3f:2c:b5:64:85:10:fc:03:8f:41:80:fc:d8:fd:11:
c2:cd:f2:6e:e5:87:84:0e:9d:80:0c:c5:98:49:0c:
92:28:0b:6e:f6:b2:cd:25:1e:bf:b9:98:0b:9c:0f:
a0:3f:1e:bd:f7:3d:06:6b:0e:c6:2b:e5:e0:b3:93:
2f:ba:06:c7:62:5d:86:b8:3b:04:98:f2:0a:5b:e8:
19:c5:6f:df:d9:4b:2a:e0:f4:55:05:d8:85:77:cb:
5b:74:89:1d:22:71:30:fe:9d:1d:1a:d8:c1:ce:fb:
cd:b5:1a:db:c4:cc:23:42:dc:10:23:3a:b9:86:d5:
18:57:eb:05:b9:e2:4a:8a:4b:8b:19:a7:f6:96:56:
04:51:af:b6:29:3e:25:ec:fd:d0:31:52:7f:58:92:
10:3e:36:ff:6f:bd:d0:99:b4:ad:5e:17:2f:ba:ea:
e2:07:f7:70:0e:04:f8:1f:65:4c:e5:38:65:b2:17:
4c:40:90:af:64:3e:fd:38:6f:22:bd:df:31:94:4a:
81:4a:1a:ec:18:e6:f5:a7:9d:23:ca:aa:9f:72:60:
a1:da:31:64:d1:34:2f:ec:38:c8:ad:fa:1b:71:0e:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:2F:9E:2E:C2:F4:4D:2E:F4:4D:87:E4:DD:94:E1:C2:C8:24:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/964c91a5-e4b7-375a-97dc-52bdbf2c2a5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.199.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f6:92:1a:89:7e:54:aa:3b:3a:b6:bb:70:c8:5d:12:a9:44:
4b:ad:31:77:c4:e9:56:d7:d3:65:c8:11:a8:26:40:a0:32:6c:
30:2f:59:8e:0c:95:d8:e1:52:f7:a6:00:6a:0f:3d:30:89:e2:
b7:28:3d:22:8e:4b:ef:81:31:61:2f:54:f7:77:4d:ff:c6:6d:
08:26:2b:9b:bc:e3:0a:1b:c3:5a:3d:de:4f:1f:3b:88:c2:9d:
34:26:39:30:3f:19:54:2d:51:57:da:6e:52:0d:54:f0:99:c4:
fd:11:4b:83:d6:dc:57:f6:a4:ba:f0:76:9e:1d:f3:7a:3b:e4:
25:ce:bf:31:bd:3b:4b:ce:b2:68:29:fe:89:b0:d3:0d:0d:a3:
44:3c:e2:f4:37:c2:ef:8d:78:2d:5e:72:61:ea:30:da:60:42:
48:2a:74:fa:59:a8:13:06:35:0c:e4:f8:a3:8c:76:38:de:8b:
6d:f5:2b:6b:e1:a3:0e:ea:68:80:d2:cb:4e:0f:62:c7:97:ec:
0a:68:32:88:65:09:76:d4:82:a7:25:28:c3:6a:38:f0:35:19:
51:9a:e5:a8:ed:40:e1:50:c0:bc:85:51:ef:48:25:43:a5:dd:
bc:7f:9d:37:00:cf:e8:f9:ff:8a:82:84:b6:47:84:b7:82:53:
b9:ef:18:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1M5OY7DLwnoUao2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMyNjIxMDQxM1oXDTI2MDYyNDIxMDQxM1owLzEtMCsGA1UEAxMk
ODFkMGYxZDAtYzJjZi00N2VlLWE0OWEtOGRkNmNhZWIyNmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ECcaWHoCsdx5ZO6goXVSt/3rnBa7+IXE6K
ZBc/LLVkhRD8A49BgPzY/RHCzfJu5YeEDp2ADMWYSQySKAtu9rLNJR6/uZgLnA+g
Px699z0Gaw7GK+Xgs5MvugbHYl2GuDsEmPIKW+gZxW/f2Usq4PRVBdiFd8tbdIkd
InEw/p0dGtjBzvvNtRrbxMwjQtwQIzq5htUYV+sFueJKikuLGaf2llYEUa+2KT4l
7P3QMVJ/WJIQPjb/b73QmbStXhcvuuriB/dwDgT4H2VM5ThlshdMQJCvZD79OG8i
vd8xlEqBShrsGOb1p50jyqqfcmCh2jFk0TQv7DjIrfobcQ7IRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhsL54uwvRNLvRNh+TdlOHCyCQCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTY0YzkxYTUtZTRiNy0z
NzVhLTk3ZGMtNTJiZGJmMmMyYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJsfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFn2khqJflSqOzq2u3DIXRKpREutMXfE6VbX02XIEagmQKAybDAvWY4M
ldjhUvemAGoPPTCJ4rcoPSKOS++BMWEvVPd3Tf/GbQgmK5u84wobw1o93k8fO4jC
nTQmOTA/GVQtUVfablINVPCZxP0RS4PW3Ff2pLrwdp4d83o75CXOvzG9O0vOsmgp
/omw0w0No0Q84vQ3wu+NeC1ecmHqMNpgQkgqdPpZqBMGNQzk+KOMdjjei231K2vh
ow7qaIDSy04PYseX7ApoMohlCXbUgqclKMNqOPA1GVGa5ajtQOFQwLyFUe9IJUOl
3bx/nTcAz+j5/4qChLZHhLeCU7nvGKk=
-----END CERTIFICATE-----
Generated at Wed Apr 8 07:40:12 2026 by rpki-client