
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc41d95-df84-340e-a59b-541abd63ce8a.roa
File: 0bc41d95-df84-340e-a59b-541abd63ce8a.roa (raw, json)
Hash identifier: lUuX/7fRHEiM/uQxZh7CwJjIZNdke2KOC3eZAu74698=
Subject key identifier: 60:70:DA:57:5F:00:67:19:E7:13:36:82:94:9B:D1:39:63:F7:0E:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DE6E5CB4CB276A0D26A0FB680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc41d95-df84-340e-a59b-541abd63ce8a.roa
Signing time: Thu 21 May 2026 01:00:25 +0000
ROA not before: Thu 21 May 2026 01:00:25 +0000
ROA not after: Wed 19 Aug 2026 01:00:25 +0000
asID: 33650
IP address blocks: 107.0.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e6:e5:cb:4c:b2:76:a0:d2:6a:0f:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 21 01:00:25 2026 GMT
Not After : Aug 19 01:00:25 2026 GMT
Subject: CN=132d1b52-25d6-43b9-be5f-45dcf6fced74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:d5:9e:b3:21:10:9e:5a:90:75:71:f0:04:
18:21:9a:80:b2:b5:b5:1b:48:0a:b7:a3:9b:11:81:
24:c7:47:49:44:fe:26:5e:6d:04:33:4c:f7:1e:69:
77:e4:34:ab:f1:c7:04:50:62:c4:f9:4c:97:d1:73:
e6:ed:c7:3f:ec:50:8a:03:d2:b6:9c:1f:75:d9:16:
f1:b3:56:ea:33:2a:08:23:56:c4:ec:6a:70:09:c4:
d4:8c:dc:54:89:2a:d1:26:f9:38:5e:2b:66:6e:f6:
90:31:e1:66:d9:40:cd:dd:78:8a:2e:7f:e8:b1:81:
cf:02:ab:98:bb:0f:b2:6c:d7:7d:78:69:33:33:5d:
c5:ad:21:6a:b1:f9:b2:08:f0:99:f5:79:b4:2d:ca:
7d:1d:ef:45:c5:4e:ff:4c:97:52:6c:03:b8:a4:96:
78:63:29:ae:34:d6:e6:a7:04:d6:19:ae:ce:06:eb:
f3:fe:c9:91:31:c5:31:93:76:9b:4d:f2:a2:80:ae:
9a:07:45:f8:d8:51:3e:0f:ad:d6:e3:eb:7a:53:43:
dc:54:0b:81:c8:f0:78:4c:db:0e:a8:9b:c1:9b:ab:
9a:58:e8:ca:97:e0:4c:fd:41:f6:b4:55:09:56:9a:
70:14:78:87:f1:c8:9c:ba:4d:df:dd:7f:84:85:62:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:DA:57:5F:00:67:19:E7:13:36:82:94:9B:D1:39:63:F7:0E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc41d95-df84-340e-a59b-541abd63ce8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.0.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ad:7c:8f:a3:0a:96:93:45:9d:db:eb:53:f9:46:a8:90:8b:
b1:bc:9e:b1:d9:21:44:45:82:79:fa:07:8d:e7:1a:2d:3d:6a:
b7:eb:8e:68:01:99:ab:aa:e7:31:ac:37:a2:0d:46:25:0f:d3:
71:a7:1c:3a:9e:3d:41:31:74:ce:d5:95:fd:18:c3:90:4b:9c:
ab:e4:46:ce:60:99:c0:cc:4c:2e:b5:5b:03:94:fd:c5:ac:e6:
1e:7f:22:8f:9d:90:09:22:de:07:51:35:1d:01:d0:5e:25:d5:
ad:1a:ca:e1:23:d3:ce:b2:4e:41:9c:85:94:b0:1a:4b:a6:2b:
31:59:43:fc:ab:f6:f8:52:29:d1:2b:39:a5:bf:5e:9e:6f:d6:
a3:69:7d:c8:e9:68:02:cc:4f:92:20:1f:b0:74:01:f6:35:d3:
30:8b:a4:9e:81:7f:db:f6:3a:36:70:ed:df:7c:b3:36:71:0e:
8e:67:07:a7:55:bd:b6:09:47:7a:e3:7e:11:7c:f1:55:ff:29:
31:21:f7:eb:8c:15:03:1a:f9:6d:79:d2:26:44:66:a4:e1:4f:
6e:16:9e:d4:7d:cb:fb:bb:e6:8b:8b:f8:79:9f:bc:ca:85:32:
57:ed:fe:46:f9:ba:6e:73:c8:e7:82:d4:83:1f:78:10:98:8a:
88:98:76:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3m5ctMsnag0moPtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk
MTMyZDFiNTItMjVkNi00M2I5LWJlNWYtNDVkY2Y2ZmNlZDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxnVnrMhEJ5akHVx8AQYIZqAsrW1G0gKt6Ob
EYEkx0dJRP4mXm0EM0z3Hml35DSr8ccEUGLE+UyX0XPm7cc/7FCKA9K2nB912Rbx
s1bqMyoII1bE7GpwCcTUjNxUiSrRJvk4XitmbvaQMeFm2UDN3XiKLn/osYHPAquY
uw+ybNd9eGkzM13FrSFqsfmyCPCZ9Xm0Lcp9He9FxU7/TJdSbAO4pJZ4YymuNNbm
pwTWGa7OBuvz/smRMcUxk3abTfKigK6aB0X42FE+D63W4+t6U0PcVAuByPB4TNsO
qJvBm6uaWOjKl+BM/UH2tFUJVppwFHiH8cicuk3f3X+EhWK8ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBw2ldfAGcZ5xM2gpSb0Tlj9w6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGJjNDFkOTUtZGY4NC0z
NDBlLWE1OWItNTQxYWJkNjNjZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawCoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADetfI+jCpaTRZ3b61P5RqiQi7G8nrHZIURFgnn6B43nGi09arfrjmgB
mauq5zGsN6INRiUP03GnHDqePUExdM7Vlf0Yw5BLnKvkRs5gmcDMTC61WwOU/cWs
5h5/Io+dkAki3gdRNR0B0F4l1a0ayuEj086yTkGchZSwGkumKzFZQ/yr9vhSKdEr
OaW/Xp5v1qNpfcjpaALMT5IgH7B0AfY10zCLpJ6Bf9v2OjZw7d98szZxDo5nB6dV
vbYJR3rjfhF88VX/KTEh9+uMFQMa+W150iZEZqThT24WntR9y/u75ouL+HmfvMqF
Mlft/kb5um5zyOeC1IMfeBCYioiYdso=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:01 2026 by rpki-client