
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
File: b07b906e-1603-39e7-a468-674776625a7d.roa (raw, json)
Hash identifier: vKTI4dEHfWbVUI3+m6ycAZpYnAs8puDXtPIiSovDu3Y=
Subject key identifier: E7:39:5C:85:64:D0:88:E4:10:95:9E:D3:24:AE:81:A2:BE:F9:24:42
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584C969C65D490B385AC92D9B800
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
Signing time: Tue 20 Jan 2026 14:00:39 +0000
ROA not before: Tue 20 Jan 2026 14:00:39 +0000
ROA not after: Mon 20 Apr 2026 13:00:39 +0000
asID: 33598
IP address blocks: 138.8.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:96:9c:65:d4:90:b3:85:ac:92:d9:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Jan 20 14:00:39 2026 GMT
Not After : Apr 20 13:00:39 2026 GMT
Subject: CN=acc52f8f-822d-4c72-8989-574a7928dcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:d7:a9:81:ee:18:6b:e7:df:1b:e1:48:3d:
ad:42:51:8a:58:bc:a2:ea:64:dc:d5:c3:10:fa:f5:
ea:51:66:1c:87:f7:d9:1b:19:41:5c:1a:bd:24:37:
37:aa:15:33:97:0a:9b:3e:a5:e9:fa:b0:34:b7:de:
5c:eb:5f:80:82:ad:64:11:2d:ad:4f:8f:49:04:45:
5a:2d:fb:35:07:58:bc:ae:a3:7c:7d:fe:44:5b:ec:
a1:e5:1f:10:78:85:a3:e7:08:db:67:c8:2a:8b:9f:
84:36:5f:93:9a:98:fb:08:c6:3e:bf:56:03:74:12:
c0:b4:f4:39:b6:b0:05:41:ae:fe:32:67:5e:a1:9a:
a8:63:12:6a:93:74:c9:0f:36:6e:78:a5:ae:b8:3c:
4d:7d:1f:68:41:54:3c:73:a3:18:c0:b8:f4:17:9e:
f8:e6:4d:b7:14:72:8f:4b:cb:05:f6:57:8e:f8:c1:
06:3e:98:7e:70:06:3b:2e:18:25:48:62:ac:4c:0d:
09:20:72:78:bb:28:e1:c7:f2:77:67:86:5d:08:cb:
65:b9:96:fc:a4:22:7b:26:96:9d:6f:f4:79:4a:64:
e4:21:01:0f:28:7d:3b:4a:3b:98:80:a2:30:5c:28:
5e:5c:60:32:88:64:90:dd:c8:18:21:db:ca:8d:af:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:39:5C:85:64:D0:88:E4:10:95:9E:D3:24:AE:81:A2:BE:F9:24:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:8a:55:68:e2:28:2b:a1:04:91:40:fa:a8:54:e0:21:c8:56:
f1:fb:11:18:72:20:b9:21:c1:ec:ee:dd:03:0a:bf:5b:c1:53:
9f:8d:06:7a:67:4a:ae:0c:7d:b6:93:e1:f7:db:c7:31:cf:c7:
6d:6b:35:4c:a5:08:9c:3c:20:30:76:13:8e:8a:df:ad:66:86:
99:84:60:7c:91:98:cf:6b:9c:b0:42:b9:22:d7:1d:a5:6a:12:
56:42:58:0a:94:76:37:2f:c1:53:16:93:b7:90:2a:98:72:4d:
be:0e:60:8c:5d:d5:93:1e:da:7e:a5:5b:ed:ac:c7:21:5b:34:
95:35:54:73:05:76:91:d9:ca:86:4d:bd:aa:20:b2:0d:44:d9:
1c:a6:14:7d:54:f5:a0:5d:e3:90:e2:dc:22:bb:cd:a0:f4:0d:
23:2c:bf:6d:9f:45:0f:81:bf:b9:9c:33:e9:40:64:82:fb:7b:
5c:35:b0:a4:30:76:1a:45:b6:c8:a4:04:4c:f5:e0:e7:bd:65:
2e:8d:56:4c:4a:45:de:09:49:02:a6:87:52:4b:2c:d9:14:85:
66:37:6a:22:a2:2d:02:3e:24:2c:67:b5:ad:86:71:d6:09:23:
bc:f2:38:e7:9b:86:ab:dd:bd:8f:c8:7b:9d:6f:40:f1:fa:fe:
6d:38:a7:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnGXUkLOFrJLZuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4
MGJlMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk
YWNjNTJmOGYtODIyZC00YzcyLTg5ODktNTc0YTc5MjhkY2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWHXqYHuGGvn3xvhSD2tQlGKWLyi6mTc1cMQ
+vXqUWYch/fZGxlBXBq9JDc3qhUzlwqbPqXp+rA0t95c61+Agq1kES2tT49JBEVa
Lfs1B1i8rqN8ff5EW+yh5R8QeIWj5wjbZ8gqi5+ENl+Tmpj7CMY+v1YDdBLAtPQ5
trAFQa7+MmdeoZqoYxJqk3TJDzZueKWuuDxNfR9oQVQ8c6MYwLj0F5745k23FHKP
S8sF9leO+MEGPph+cAY7LhglSGKsTA0JIHJ4uyjhx/J3Z4ZdCMtluZb8pCJ7Jpad
b/R5SmTkIQEPKH07SjuYgKIwXCheXGAyiGSQ3cgYIdvKja8KdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOc5XIVk0IjkEJWe0ySugaK++SRCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm
NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvYjA3YjkwNmUtMTYwMy0z
OWU3LWE0NjgtNjc0Nzc2NjI1YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk
ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy
ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2
YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABeKVWjiKCuhBJFA+qhU4CHIVvH7ERhyILkhwezu3QMKv1vBU5+NBnpn
Sq4MfbaT4ffbxzHPx21rNUylCJw8IDB2E46K361mhpmEYHyRmM9rnLBCuSLXHaVq
ElZCWAqUdjcvwVMWk7eQKphyTb4OYIxd1ZMe2n6lW+2sxyFbNJU1VHMFdpHZyoZN
vaogsg1E2RymFH1U9aBd45Di3CK7zaD0DSMsv22fRQ+Bv7mcM+lAZIL7e1w1sKQw
dhpFtsikBEz14Oe9ZS6NVkxKRd4JSQKmh1JLLNkUhWY3aiKiLQI+JCxnta2GcdYJ
I7zyOOebhqvdvY/Ie51vQPH6/m04p/o=
-----END CERTIFICATE-----
Generated at Thu Feb 26 15:19:23 2026 by rpki-client