
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa
File: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (raw, json)
Hash identifier: e4/r4bAtMQMXBGY0AOFMiZyzRjYQZTSKlc1t1kGtF+g=
Subject key identifier: 7F:81:06:ED:43:E3:03:50:95:84:96:F0:AB:48:84:BD:89:A5:EE:99
Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
Certificate serial: 010D0C9F4328584D9FB56A482BD88AAFD1929E80
Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 16509
IP address blocks: 148.59.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 05 May 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:6a:48:2b:d8:8a:af:d1:92:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=9427162a-c337-484c-8049-7ae09cedc7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:e5:ef:29:e4:43:7c:1c:d7:3e:76:51:62:
4c:9e:97:dc:cb:99:6f:48:c9:9e:f9:f2:da:9a:77:
a7:c3:46:c2:9a:c9:58:ae:fd:3f:56:9a:50:0b:65:
74:70:df:11:19:ac:fa:31:53:1c:22:90:7f:3e:cb:
5f:7d:2f:24:fd:17:4b:01:3b:3a:25:95:f3:3e:3c:
71:ba:f4:7b:fe:6e:4d:d6:ef:8e:8d:dd:a7:9c:c3:
de:54:81:5a:d6:50:4b:c7:19:4a:5f:e6:79:78:43:
86:f0:f9:e4:16:ee:d7:de:6b:23:c8:34:a9:fa:17:
04:01:e8:69:3b:f7:b6:22:49:ce:54:fe:28:6b:02:
d2:28:f5:9d:18:11:3d:14:26:ab:2b:95:1a:3f:ce:
29:a8:be:de:81:83:e6:c1:77:38:a8:df:e6:77:24:
cf:95:4a:57:a2:eb:cb:6a:4e:65:6f:50:1d:ab:53:
4e:5e:c7:01:e1:6c:1d:c8:db:de:ee:a6:c3:f5:c6:
d6:06:70:82:fa:d8:91:12:c7:47:43:43:b5:e1:b3:
46:f0:9c:bd:2b:54:b0:2d:3c:9b:4e:dc:06:9f:fb:
f5:17:f7:cd:6c:38:4c:8a:7b:67:38:c0:2d:9b:13:
c4:7a:f3:ad:6d:69:63:28:51:8b:a7:11:36:89:97:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:06:ED:43:E3:03:50:95:84:96:F0:AB:48:84:BD:89:A5:EE:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl
X509v3 Authority Key Identifier:
keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:79:e5:7e:97:54:a3:cf:ea:f0:1e:c1:6a:15:d3:78:3c:75:
23:5a:fb:8a:af:c0:26:15:86:26:ed:a0:15:11:2a:9b:ea:e7:
87:4b:16:c8:e6:63:ee:67:02:38:9c:e7:3b:2f:a1:db:87:d9:
c9:a1:cb:aa:bf:d4:91:ec:f9:1c:eb:75:52:2c:d4:f0:39:f7:
15:05:ad:a1:f6:6d:18:09:14:99:ed:c1:e8:65:8a:88:99:3e:
f0:0e:d1:a9:1b:95:39:91:1c:67:5a:8b:bc:10:99:30:cc:aa:
60:49:6e:1c:38:7c:22:b1:c9:26:a5:ca:80:ce:36:12:a8:0a:
d0:8c:73:05:80:b7:7b:2e:24:4a:42:38:29:b9:9f:18:6f:10:
c7:a6:7e:26:e3:29:d1:62:ce:b3:d8:a3:1b:e1:fb:9f:28:59:
fe:b8:4b:2f:3e:4a:61:4e:06:66:30:67:7c:e3:cc:f7:e0:68:
24:0c:23:98:3f:9e:39:b7:d4:3c:93:97:02:b1:75:53:a9:95:
91:9f:8e:ea:7f:50:5b:0b:2d:6c:94:66:c6:a7:4d:04:6c:3f:
1c:88:7e:da:cd:39:ac:b0:51:c1:db:55:ac:9a:a2:40:f8:e4:
00:39:53:1e:10:31:43:eb:ee:cc:15:c6:64:cb:59:45:63:04:
85:e7:09:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWpIK9iKr9GSnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh
OWY1MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
OTQyNzE2MmEtYzMzNy00ODRjLTgwNDktN2FlMDljZWRjN2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNHl7ynkQ3wc1z52UWJMnpfcy5lvSMme+fLa
mnenw0bCmslYrv0/VppQC2V0cN8RGaz6MVMcIpB/PstffS8k/RdLATs6JZXzPjxx
uvR7/m5N1u+Ojd2nnMPeVIFa1lBLxxlKX+Z5eEOG8PnkFu7X3msjyDSp+hcEAehp
O/e2IknOVP4oawLSKPWdGBE9FCarK5UaP84pqL7egYPmwXc4qN/mdyTPlUpXouvL
ak5lb1Adq1NOXscB4WwdyNve7qbD9cbWBnCC+tiREsdHQ0O14bNG8Jy9K1SwLTyb
TtwGn/v1F/fNbDhMintnOMAtmxPEevOtbWljKFGLpxE2iZclkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+BBu1D4wNQlYSW8KtIhL2Jpe6ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm
MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNWQ3ZjJhODQtZmJkZi0z
NDFjLWFjYzItMGRjNDI0ZDNiZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh
NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh
YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm
ZWRhYWE5ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK555X6XVKPP6vAewWoV03g8dSNa+4qvwCYVhibtoBURKpvq54dLFsjm
Y+5nAjic5zsvoduH2cmhy6q/1JHs+RzrdVIs1PA59xUFraH2bRgJFJntwehlioiZ
PvAO0akblTmRHGdai7wQmTDMqmBJbhw4fCKxySalyoDONhKoCtCMcwWAt3suJEpC
OCm5nxhvEMemfibjKdFizrPYoxvh+58oWf64Sy8+SmFOBmYwZ3zjzPfgaCQMI5g/
njm31DyTlwKxdVOplZGfjup/UFsLLWyUZsanTQRsPxyIftrNOaywUcHbVayaokD4
5AA5Ux4QMUPr7swVxmTLWUVjBIXnCZE=
-----END CERTIFICATE-----
Generated at Sun May 3 14:50:41 2026 by rpki-client