
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/157081c6-ca44-329b-a4d9-e830bc9358aa.roa
File: 157081c6-ca44-329b-a4d9-e830bc9358aa.roa (raw, json)
Hash identifier: ozAtUh0fzQWKPSKb2TQpGrIL9Idz+OsUTB5/qDW92Ow=
Subject key identifier: 6F:02:F0:56:9E:F8:6D:A0:51:0A:C0:33:AE:67:E4:BE:91:D3:03:27
Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7
Certificate serial: 010D0C9F4328584D5E1A6E0B7731A8E6C9D12C50
Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/157081c6-ca44-329b-a4d9-e830bc9358aa.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 400773
IP address blocks: 209.135.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:6e:0b:77:31:a8:e6:c9:d1:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163235-a725-497c-92e8-c077e46672e7
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=9b2702a9-ce11-4996-9d10-db1e0673615b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:f1:70:8a:e4:48:69:0d:33:83:8c:e2:83:
0f:c6:fb:62:c5:37:23:84:85:95:b8:46:8b:8f:5c:
a0:e2:93:55:01:cc:8b:b4:17:35:cd:00:4b:e8:4c:
bd:6a:64:a3:ba:ff:89:f5:ca:7b:ce:d0:c7:74:d9:
d2:f4:5c:cd:a7:4b:b1:ea:03:a4:0e:9c:57:75:7d:
f1:3d:3b:85:da:41:63:3b:c0:ed:eb:41:6b:8c:07:
4d:14:d3:db:16:c2:1c:f4:8d:51:79:76:9d:cf:c1:
45:dd:2e:6a:b3:07:81:a1:ba:76:bc:07:99:a5:42:
a8:a8:19:49:0b:3f:19:c2:44:c8:90:66:44:40:7a:
3e:21:c7:0a:b7:1d:76:26:4f:ad:11:11:51:64:1a:
df:ac:ad:e9:3e:77:a6:f5:4c:3d:b0:02:63:34:c6:
46:58:8c:92:61:82:ff:bd:ee:b7:29:65:6a:ad:77:
a6:8b:34:34:aa:77:29:51:6f:e1:72:49:24:bd:eb:
56:74:ac:d0:85:ec:a0:5e:cf:f2:b7:dc:99:b6:a4:
0b:5e:9a:67:69:91:71:eb:7f:f5:b2:f4:e2:60:39:
03:01:26:90:8b:6d:e0:ef:23:b6:96:10:a0:b7:48:
f6:75:39:2c:cb:91:c3:a7:39:d8:d3:32:54:98:e5:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:02:F0:56:9E:F8:6D:A0:51:0A:C0:33:AE:67:E4:BE:91:D3:03:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/157081c6-ca44-329b-a4d9-e830bc9358aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl
X509v3 Authority Key Identifier:
keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.135.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:61:c7:7a:78:91:36:06:6a:1f:8f:59:8c:f3:59:e5:8f:4d:
39:77:e1:3a:7a:4e:c4:2f:87:7c:10:69:ee:f9:0e:b6:c5:82:
46:62:37:15:f4:8b:86:08:00:bf:dd:df:ef:7b:f4:5d:0e:79:
97:9c:24:0a:df:97:32:a7:7d:ee:73:ef:42:d3:b1:48:24:4b:
0e:0d:e1:3f:6f:94:a1:24:0c:7c:a0:a3:52:37:e7:53:43:0d:
76:6f:b9:df:55:5d:53:ca:a6:7f:12:ac:e7:e0:3c:a1:1d:67:
1a:22:fb:b3:44:d4:2a:60:40:43:18:28:f4:37:87:3e:90:73:
14:c4:3f:e1:81:a0:e5:e5:ca:e8:f2:d8:c0:04:f4:e8:36:ab:
fd:19:15:83:b1:56:6b:b6:8d:55:b9:89:9d:2e:06:26:c3:2b:
9e:37:a3:43:cd:da:99:fc:08:c1:ab:53:24:59:b7:01:da:f1:
b1:68:98:f0:b8:f8:c4:12:ad:5c:74:d8:21:d0:56:9b:b4:dd:
e0:5a:47:6b:ca:36:f1:03:0f:de:01:c3:9e:03:fe:0c:2e:5e:
45:47:8c:39:47:6b:c9:f7:ae:5c:1e:4c:62:ab:6a:fb:19:04:
f9:c4:10:87:81:aa:aa:0c:f1:44:ef:db:63:13:58:cc:f5:78:
a7:86:3f:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm4LdzGo5snRLFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3
MmU3MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
OWIyNzAyYTktY2UxMS00OTk2LTlkMTAtZGIxZTA2NzM2MTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsPxcIrkSGkNM4OM4oMPxvtixTcjhIWVuEaL
j1yg4pNVAcyLtBc1zQBL6Ey9amSjuv+J9cp7ztDHdNnS9FzNp0ux6gOkDpxXdX3x
PTuF2kFjO8Dt60FrjAdNFNPbFsIc9I1ReXadz8FF3S5qsweBobp2vAeZpUKoqBlJ
Cz8ZwkTIkGZEQHo+IccKtx12Jk+tERFRZBrfrK3pPnem9Uw9sAJjNMZGWIySYYL/
ve63KWVqrXemizQ0qncpUW/hckkkvetWdKzQheygXs/yt9yZtqQLXppnaZFx63/1
svTiYDkDASaQi23g7yO2lhCgt0j2dTksy5HDpznY0zJUmOVhwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8C8Fae+G2gUQrAM65n5L6R0wMnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2
MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvMTU3MDgxYzYtY2E0NC0z
MjliLWE0ZDktZTgzMGJjOTM1OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky
ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2
NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3
ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0YekMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNhx3p4kTYGah+PWYzzWeWPTTl34Tp6TsQvh3wQae75DrbFgkZiNxX0
i4YIAL/d3+979F0OeZecJArflzKnfe5z70LTsUgkSw4N4T9vlKEkDHygo1I351ND
DXZvud9VXVPKpn8SrOfgPKEdZxoi+7NE1CpgQEMYKPQ3hz6QcxTEP+GBoOXlyujy
2MAE9Og2q/0ZFYOxVmu2jVW5iZ0uBibDK543o0PN2pn8CMGrUyRZtwHa8bFomPC4
+MQSrVx02CHQVpu03eBaR2vKNvEDD94Bw54D/gwuXkVHjDlHa8n3rlweTGKravsZ
BPnEEIeBqqoM8UTv22MTWMz1eKeGP80=
-----END CERTIFICATE-----
Generated at Fri Apr 3 14:23:06 2026 by rpki-client