
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a503de49-1947-3515-95f2-a4537fa97a5b.roa
File: a503de49-1947-3515-95f2-a4537fa97a5b.roa (raw, json)
Hash identifier: dNhn4b9vKIuXcXzvi1tiUAptB/VRuR0ubM6op1+yUuA=
Subject key identifier: 6B:3D:D4:81:3B:6B:06:29:F6:B6:92:C7:43:AC:6D:98:A4:53:AF:B8
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F936E6AB39CB3C18A4E1F1720
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a503de49-1947-3515-95f2-a4537fa97a5b.roa
Signing time: Wed 21 Oct 2026 13:01:45 +0000
ROA not before: Wed 21 Oct 2026 13:01:45 +0000
ROA not after: Tue 19 Jan 2027 14:01:45 +0000
asID: 131646
IP address blocks: 38.126.72.0/24 maxlen: 24
154.3.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:93:6e:6a:b3:9c:b3:c1:8a:4e:1f:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 21 13:01:45 2026 GMT
Not After : Jan 19 14:01:45 2027 GMT
Subject: CN=c3ef0aed-0d03-4a4e-83a5-377ea0218981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:eb:2f:96:3e:7e:0a:24:3e:72:7d:b2:f4:
ef:5d:19:09:94:a8:79:b2:39:0a:b2:83:f3:07:4a:
d7:1a:1f:44:98:38:6e:e2:e5:4f:8f:4b:eb:fb:85:
27:7c:36:4d:73:bc:9f:f1:18:61:50:93:24:22:96:
23:73:f6:38:71:40:0d:9e:36:c2:ef:01:43:00:30:
81:72:59:fa:4f:dc:1c:b1:8a:0c:0b:ba:e3:c1:12:
24:c9:44:0b:b1:00:e1:d6:b9:9f:87:18:36:b1:85:
41:e5:65:ed:35:a9:91:e9:7f:b0:4c:b0:92:11:6a:
f9:b7:a6:ef:ef:a6:e5:ea:7b:06:8f:48:8b:61:4a:
fc:3e:b1:a1:96:82:c4:69:21:94:e5:6b:ee:d9:9f:
46:a0:42:fc:8b:89:23:41:48:ea:57:00:a2:36:3d:
1d:70:41:7d:91:d2:df:a4:9d:ee:c8:09:34:13:b1:
2f:ee:1e:11:d2:aa:ae:1b:95:c9:fd:24:f3:79:49:
2d:27:5e:14:aa:3c:1d:49:04:54:a3:8f:08:05:d0:
3b:b3:65:c5:2e:fe:b6:19:2e:5a:e1:72:a2:0a:00:
d4:8a:ee:d3:d2:e4:df:bb:c0:0e:1c:d2:1e:b1:9c:
21:39:76:a0:b4:c0:b2:0c:54:e6:5e:31:b4:e6:b4:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:D4:81:3B:6B:06:29:F6:B6:92:C7:43:AC:6D:98:A4:53:AF:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a503de49-1947-3515-95f2-a4537fa97a5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.126.72.0/24
154.3.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:9c:94:6d:15:d9:c5:22:78:66:ef:3f:e3:62:8a:df:06:40:
a3:23:7e:fb:86:cc:c9:dd:4e:69:92:3d:41:ab:d3:92:b6:b2:
27:62:3e:d5:ac:54:d0:5c:fc:86:a9:d3:bb:2a:ed:16:50:c4:
69:55:3a:f9:62:9e:66:83:48:66:b3:87:93:cf:84:78:59:ca:
38:09:4b:a2:ae:82:21:38:5e:ab:f7:f4:56:9b:c2:83:4c:e9:
f2:35:08:1f:b1:3f:da:ed:1d:68:9b:3e:d3:a9:fd:b2:03:04:
ce:bb:a0:1a:8f:20:8b:05:e4:3b:cf:8f:51:6e:bb:a7:31:92:
b5:5f:98:67:31:33:92:1e:21:0f:16:78:d3:46:8a:b6:53:e9:
f6:e5:d7:1d:2d:2d:ad:ab:93:4e:4b:c3:07:a5:be:e8:be:c6:
f5:3e:93:74:b6:eb:21:b9:12:a8:42:36:bc:f9:85:8e:8a:78:
08:84:4c:78:67:4b:07:55:57:80:7b:d6:05:2f:82:e7:59:e8:
a9:bc:51:dc:61:54:99:7e:65:d2:fc:36:8f:19:46:7a:7b:ab:
96:62:08:f0:7f:de:6e:21:27:31:e3:b8:97:bc:99:9b:cc:5d:
cd:be:8a:38:cd:a9:e9:f3:4e:46:0b:75:61:3f:fd:5b:ac:1a:
a4:34:5f:51
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+TbmqznLPBik4fFyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAyMTEzMDE0NVoXDTI3MDExOTE0MDE0NVowLzEtMCsGA1UEAxMk
YzNlZjBhZWQtMGQwMy00YTRlLTgzYTUtMzc3ZWEwMjE4OTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9nrL5Y+fgokPnJ9svTvXRkJlKh5sjkKsoPz
B0rXGh9EmDhu4uVPj0vr+4UnfDZNc7yf8RhhUJMkIpYjc/Y4cUANnjbC7wFDADCB
cln6T9wcsYoMC7rjwRIkyUQLsQDh1rmfhxg2sYVB5WXtNamR6X+wTLCSEWr5t6bv
76bl6nsGj0iLYUr8PrGhloLEaSGU5Wvu2Z9GoEL8i4kjQUjqVwCiNj0dcEF9kdLf
pJ3uyAk0E7Ev7h4R0qquG5XJ/STzeUktJ14UqjwdSQRUo48IBdA7s2XFLv62GS5a
4XKiCgDUiu7T0uTfu8AOHNIesZwhOXagtMCyDFTmXjG05rSC+wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGs91IE7awYp9raSx0OsbZikU6+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTUwM2RlNDktMTk0Ny0z
NTE1LTk1ZjItYTQ1MzdmYTk3YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJn5IAwQB
mgNKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAMmclG0V2cUieGbvP+Niit8GQKMjfvuGzMndTmmSPUGr05K2
sidiPtWsVNBc/Iap07sq7RZQxGlVOvlinmaDSGazh5PPhHhZyjgJS6KugiE4Xqv3
9FabwoNM6fI1CB+xP9rtHWibPtOp/bIDBM67oBqPIIsF5DvPj1Fuu6cxkrVfmGcx
M5IeIQ8WeNNGirZT6fbl1x0tLa2rk05Lwwelvui+xvU+k3S26yG5EqhCNrz5hY6K
eAiETHhnSwdVV4B71gUvgudZ6Km8UdxhVJl+ZdL8No8ZRnp7q5ZiCPB/3m4hJzHj
uJe8mZvMXc2+ijjNqenzTkYLdWE//VusGqQ0X1E=
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:40 2026 by rpki-client