
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/450a09f3-526f-35c5-b149-dc62465ddda4.roa
File: 450a09f3-526f-35c5-b149-dc62465ddda4.roa (raw, json)
Hash identifier: +5O62bXGvdDFVj4yEZVxTz9dhZt2/u3Ea2i0baRuE7M=
Subject key identifier: 1F:D4:C2:7E:6B:A1:1C:E8:B3:58:48:D9:78:C0:1C:DB:D1:00:FB:F5
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D91BFFB534F1EF3FC1C627A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/450a09f3-526f-35c5-b149-dc62465ddda4.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 273173
IP address blocks: 38.188.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:bf:fb:53:4f:1e:f3:fc:1c:62:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=67589adf-2a1e-4fac-803a-3e3288ac0b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:d8:02:a1:0c:cd:00:b4:51:5d:99:05:af:
c3:03:27:1d:78:05:3d:ae:0f:03:ad:7a:6a:76:e5:
ff:ef:4a:8e:78:a7:2c:fc:d2:75:b0:1a:27:f5:c2:
38:db:e0:94:cb:bf:ed:ef:dd:16:05:33:61:18:f7:
ab:9c:82:a9:44:b5:17:a1:9a:98:d9:af:65:38:b2:
0d:d4:b2:71:07:aa:4b:67:d5:7b:ff:50:d1:c7:38:
6a:81:02:6b:0e:5a:ff:28:41:23:15:44:cf:70:45:
55:c0:47:33:72:4a:29:b5:47:50:ae:5f:7d:8f:5f:
6a:20:4a:ca:fe:17:52:63:d2:38:4e:82:b7:ec:1e:
03:c3:03:24:56:16:04:be:19:54:a0:c7:cb:01:99:
05:51:74:f8:fb:d5:1b:51:4a:4c:1c:68:24:62:26:
1c:75:76:c7:9e:d9:0b:c1:71:12:47:35:3c:f4:99:
26:66:85:f6:9b:4b:a1:f0:59:32:d4:89:a0:4b:68:
d5:71:ba:cc:81:11:a8:c5:02:74:a2:82:e5:50:7c:
ae:99:00:92:af:e2:99:d1:af:29:d1:2b:ae:a9:b8:
e0:03:1f:55:0d:cd:30:1e:35:82:5d:6f:fa:d9:3f:
be:35:1a:58:25:2a:f5:00:cb:fc:92:b3:f6:be:af:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:C2:7E:6B:A1:1C:E8:B3:58:48:D9:78:C0:1C:DB:D1:00:FB:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/450a09f3-526f-35c5-b149-dc62465ddda4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.188.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:3a:c5:bb:e2:a2:60:2a:90:e0:e9:b1:43:f1:60:4c:f5:3f:
81:4c:f4:db:85:1d:3f:b0:85:d8:5b:26:0d:5e:3f:c1:36:db:
d7:86:7b:61:cb:4b:4f:2c:e3:8c:f3:60:c7:ad:1d:dc:1e:55:
45:ba:b2:33:bc:b5:d0:80:c8:e1:a7:e2:f0:ea:5b:68:74:34:
50:6b:15:9f:c1:6f:a2:67:11:3c:85:cd:18:a6:c5:ea:d5:4a:
51:ee:fc:05:2f:7f:7d:77:95:43:85:1c:7f:36:4d:6b:e7:c6:
ad:91:94:a2:37:c9:26:51:bd:57:37:8d:f0:1a:ce:d8:1b:2e:
97:4e:81:33:f1:2b:93:ff:55:d2:43:23:66:f1:22:7b:3b:fe:
13:8d:52:9d:34:e0:e0:0a:fc:5d:38:4b:0f:d5:21:61:36:90:
6a:37:b7:32:8e:79:3c:b2:95:50:45:a8:4c:15:85:f4:af:eb:
8e:6e:12:64:ed:c7:d8:75:ef:22:9f:a8:92:9d:30:d1:89:74:
60:aa:02:b4:27:dd:6f:ba:b0:fa:c4:da:c0:e0:cb:ac:e3:b6:
77:3b:ac:ce:51:29:eb:dc:de:11:c6:54:96:6c:8e:c7:28:ef:
49:f7:6b:be:63:03:39:c2:56:d8:4b:f7:d2:d7:ff:bf:35:26:
ad:3d:16:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Rv/tTTx7z/BxieoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
Njc1ODlhZGYtMmExZS00ZmFjLTgwM2EtM2UzMjg4YWMwYjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQbYAqEMzQC0UV2ZBa/DAycdeAU9rg8DrXpq
duX/70qOeKcs/NJ1sBon9cI42+CUy7/t790WBTNhGPernIKpRLUXoZqY2a9lOLIN
1LJxB6pLZ9V7/1DRxzhqgQJrDlr/KEEjFUTPcEVVwEczckoptUdQrl99j19qIErK
/hdSY9I4ToK37B4DwwMkVhYEvhlUoMfLAZkFUXT4+9UbUUpMHGgkYiYcdXbHntkL
wXESRzU89JkmZoX2m0uh8Fky1ImgS2jVcbrMgRGoxQJ0ooLlUHyumQCSr+KZ0a8p
0SuuqbjgAx9VDc0wHjWCXW/62T++NRpYJSr1AMv8krP2vq/cbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/Uwn5roRzos1hI2XjAHNvRAPv1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDUwYTA5ZjMtNTI2Zi0z
NWM1LWIxNDktZGM2MjQ2NWRkZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJrzoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEM6xbviomAqkODpsUPxYEz1P4FM9NuFHT+whdhbJg1eP8E229eGe2HL
S08s44zzYMetHdweVUW6sjO8tdCAyOGn4vDqW2h0NFBrFZ/Bb6JnETyFzRimxerV
SlHu/AUvf313lUOFHH82TWvnxq2RlKI3ySZRvVc3jfAaztgbLpdOgTPxK5P/VdJD
I2bxIns7/hONUp004OAK/F04Sw/VIWE2kGo3tzKOeTyylVBFqEwVhfSv645uEmTt
x9h17yKfqJKdMNGJdGCqArQn3W+6sPrE2sDgy6zjtnc7rM5RKevc3hHGVJZsjsco
70n3a75jAznCVthL99LX/781Jq09Fk4=
-----END CERTIFICATE-----
Generated at Tue Apr 28 21:13:32 2026 by rpki-client