
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/719f2e39-7f67-3af3-a559-8d3da5b5061c.roa
File: 719f2e39-7f67-3af3-a559-8d3da5b5061c.roa (raw, json)
Hash identifier: bDKr/G5xAi5BH67sKZMMP4k8lnLDjNVd3HGtTBtYMmo=
Subject key identifier: 22:AB:F9:66:36:4D:5B:2C:31:CE:10:DC:5A:D4:79:92:CF:DA:B3:62
Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial: 010D0C9F4328584D2A74DA84727602457DD52D40
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/719f2e39-7f67-3af3-a559-8d3da5b5061c.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 683
IP address blocks: 146.137.0.0/16 maxlen: 16
146.137.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:da:84:72:76:02:45:7d:d5:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=2c8a09dd-6a7c-4a45-99d3-d7ca911c3e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:75:80:07:87:bd:ea:67:6b:54:84:81:77:
d8:7b:63:ec:b0:1d:06:8f:59:73:16:43:2c:aa:f9:
a6:13:47:c6:03:9d:bb:7d:50:fa:8d:55:12:47:0f:
39:3b:07:1d:34:15:3e:a0:01:c2:d1:0b:ef:cf:5b:
e6:17:39:89:f3:b8:d1:04:02:c5:21:74:80:2c:d0:
d8:73:c7:c7:ab:5b:2f:fc:65:e1:90:e4:09:33:3c:
02:09:af:fe:66:80:0f:0c:d8:5f:08:2a:d6:ef:67:
fd:22:43:e6:78:48:47:3f:86:43:1a:aa:5a:ec:6e:
c5:87:ff:fe:3b:a3:20:a8:de:72:ce:c4:f5:14:04:
fc:3a:12:24:24:ac:88:12:be:f8:92:b0:d9:bf:d5:
9e:2f:36:38:a6:0e:69:f3:fd:f8:7a:a4:4b:45:89:
18:60:30:61:23:3f:59:b3:42:1a:1e:90:e8:8a:73:
25:51:83:76:94:1e:b0:f2:ed:08:8a:3c:ba:82:96:
18:6e:eb:1b:90:66:95:c2:81:bc:fd:2a:48:78:4b:
4a:a4:d6:d6:7c:6c:67:b8:da:0f:cb:be:9f:6a:fe:
7f:f3:b6:03:27:cc:8b:8c:55:71:48:bc:26:2b:38:
7b:29:22:24:75:e4:56:a9:5b:86:eb:18:5d:d3:aa:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AB:F9:66:36:4D:5B:2C:31:CE:10:DC:5A:D4:79:92:CF:DA:B3:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/719f2e39-7f67-3af3-a559-8d3da5b5061c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
X509v3 Authority Key Identifier:
keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
sbgp-ipAddrBlock: critical
IPv4:
146.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:82:cc:76:5a:88:ea:57:98:d5:0b:32:fb:2f:f2:b0:d1:74:
fb:07:c5:10:96:88:7e:da:d3:7a:9f:50:08:a6:12:de:ba:5a:
67:39:52:1f:54:fa:83:01:a2:6d:14:7b:68:24:26:bf:39:aa:
10:96:39:34:54:5d:e3:33:2f:d5:d9:53:31:da:90:48:8b:57:
0c:e5:7e:65:fa:4a:73:c1:04:ae:33:b2:0b:4b:ff:e2:fc:fa:
70:36:a0:f7:3e:05:db:a4:fd:19:be:37:80:d5:d8:4d:06:14:
db:51:a3:0a:6d:71:b0:85:e0:30:a4:38:13:70:0c:5a:b4:14:
2c:67:79:3c:d4:cc:6f:88:6b:b1:70:e7:4e:20:0c:5d:e8:06:
a0:43:95:5d:97:70:63:16:fe:a4:71:65:5c:e6:3a:15:99:89:
3a:6f:b4:60:1e:8d:c4:a7:72:67:a4:4a:88:d7:b1:d6:ba:f2:
d3:34:cb:b3:81:02:5c:e1:cd:7f:8e:33:27:0f:f0:92:b8:e7:
5f:69:91:f3:2a:e3:a4:fb:5e:73:eb:75:9d:74:4e:59:99:1c:
bc:70:97:a9:30:8b:cc:8d:19:ae:e2:0f:05:d2:fd:32:a6:b1:
c9:3f:02:f4:9a:fc:77:0b:01:95:a1:0a:bd:ed:7b:28:03:73:
f2:9f:7c:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0qdNqEcnYCRX3VLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1
ZmY1MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
MmM4YTA5ZGQtNmE3Yy00YTQ1LTk5ZDMtZDdjYTkxMWMzZTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVB1gAeHvepna1SEgXfYe2PssB0Gj1lzFkMs
qvmmE0fGA527fVD6jVUSRw85OwcdNBU+oAHC0Qvvz1vmFzmJ87jRBALFIXSALNDY
c8fHq1sv/GXhkOQJMzwCCa/+ZoAPDNhfCCrW72f9IkPmeEhHP4ZDGqpa7G7Fh//+
O6MgqN5yzsT1FAT8OhIkJKyIEr74krDZv9WeLzY4pg5p8/34eqRLRYkYYDBhIz9Z
s0IaHpDoinMlUYN2lB6w8u0Iijy6gpYYbusbkGaVwoG8/SpIeEtKpNbWfGxnuNoP
y76fav5/87YDJ8yLjFVxSLwmKzh7KSIkdeRWqVuG6xhd06ojNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCKr+WY2TVssMc4Q3FrUeZLP2rNiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz
ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvNzE5ZjJlMzktN2Y2Ny0z
YWYzLWE1NTktOGQzZGE1YjUwNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2
ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2
NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5
ZTg0NjVmZjUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkokwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeILMdlqI6leY1Qsy+y/ysNF0+wfFEJaIftrTep9QCKYS3rpaZzlSH1T6
gwGibRR7aCQmvzmqEJY5NFRd4zMv1dlTMdqQSItXDOV+ZfpKc8EErjOyC0v/4vz6
cDag9z4F26T9Gb43gNXYTQYU21GjCm1xsIXgMKQ4E3AMWrQULGd5PNTMb4hrsXDn
TiAMXegGoEOVXZdwYxb+pHFlXOY6FZmJOm+0YB6NxKdyZ6RKiNex1rry0zTLs4EC
XOHNf44zJw/wkrjnX2mR8yrjpPtec+t1nXROWZkcvHCXqTCLzI0ZruIPBdL9Mqax
yT8C9Jr8dwsBlaEKve17KANz8p988Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 03:34:21 2026 by rpki-client