
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/64bd5705-d391-348c-bb5d-de86bb3f1834.roa
File: 64bd5705-d391-348c-bb5d-de86bb3f1834.roa (raw, json)
Hash identifier: juAyefhjvzghrXyK8EZYLOiAFWifhLqRrYg5pI+TzNk=
Subject key identifier: B0:B3:C4:5C:03:4F:2A:04:E7:48:FA:8C:00:B0:EF:3F:A9:99:4D:FB
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584D93254084127D500FF97B7400
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/64bd5705-d391-348c-bb5d-de86bb3f1834.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 54994
IP address blocks: 153.43.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:40:84:12:7d:50:0f:f9:7b:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=42d7a6d8-08ec-4f95-989c-6cd328481f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:83:3e:e9:e1:4c:e3:48:be:28:0e:07:91:
68:ac:c6:ca:83:43:34:fb:6e:2e:94:b1:ef:4f:bf:
dd:bd:d9:e2:8b:d5:8b:06:1d:2d:e5:c1:65:ec:bb:
80:4e:63:6b:6a:8a:ff:18:2d:4a:9b:b2:00:c7:e6:
a3:a9:e0:e2:3c:01:b6:eb:a6:85:11:a2:5a:5a:6a:
e7:7a:51:e7:34:0b:0a:6a:b8:42:a8:be:18:ae:e4:
a2:70:80:db:29:98:6e:c6:8c:42:f4:a7:be:73:9f:
29:9b:4e:70:68:10:c6:5c:16:6a:ae:bc:2d:1c:5b:
af:d5:2b:52:30:45:73:3f:5d:eb:f1:4c:df:a5:1d:
3a:fe:fc:0c:5a:a1:55:63:3f:6b:6e:b0:74:eb:60:
a4:1c:04:c8:d0:75:d6:e9:da:37:d9:eb:dd:93:ef:
b2:ae:68:dd:47:43:b4:45:0d:24:3a:a8:d1:cd:f5:
93:48:ee:76:90:ea:ca:c4:6c:96:81:b0:4b:64:00:
86:2c:e5:e4:7e:49:2d:bd:9c:21:ed:35:a2:69:4c:
17:60:ef:49:ee:04:63:76:32:77:f9:8b:84:f8:2b:
2f:cb:58:4c:67:01:bb:63:30:b0:32:f3:db:f8:da:
0f:96:86:a4:cb:73:17:47:b5:58:f7:da:32:e2:bd:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:C4:5C:03:4F:2A:04:E7:48:FA:8C:00:B0:EF:3F:A9:99:4D:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/64bd5705-d391-348c-bb5d-de86bb3f1834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
153.43.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:63:01:56:12:89:e0:f4:2b:97:83:7b:b8:7d:0b:86:d4:62:
50:13:ea:3c:eb:b2:a9:5b:ba:2e:d2:4f:53:21:62:e6:6e:c6:
e8:2c:24:86:2c:9d:dd:85:d1:9a:c0:92:16:30:d6:6b:6b:fd:
b7:36:1a:7a:3d:59:41:75:0a:c5:31:95:18:b6:a2:30:df:65:
0c:45:1c:5d:13:bd:36:0c:92:5d:3d:7d:c0:c3:3a:c6:68:7e:
52:89:b2:be:f7:f2:93:e9:ae:5f:ab:5e:c1:3a:61:32:8c:77:
e8:4c:7b:ed:49:5e:85:82:ca:30:98:07:29:42:d4:c3:fd:ae:
99:98:22:5b:c4:79:9d:11:68:dc:f0:23:a5:03:77:34:b1:52:
06:3b:54:5e:2f:cf:40:92:7d:d4:32:82:bb:ea:8e:68:45:52:
e7:b4:c0:da:bf:f6:87:67:29:a8:d0:8c:85:ef:45:3b:7a:cb:
0a:b9:90:a3:d4:a5:88:62:e3:57:27:93:d5:a7:f4:e2:e8:ae:
59:09:cd:3a:5b:f1:ce:e0:47:41:48:3b:21:3b:fe:de:9e:98:
1f:83:a2:09:9f:ff:a0:99:5b:e4:cb:30:f0:ed:27:1a:49:84:
3b:60:4a:0f:ed:3a:8d:09:3d:36:85:77:67:64:09:2f:d0:21:
e8:cb:a1:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUCEEn1QD/l7dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
NDJkN2E2ZDgtMDhlYy00Zjk1LTk4OWMtNmNkMzI4NDgxZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSODPunhTONIvigOB5ForMbKg0M0+24ulLHv
T7/dvdnii9WLBh0t5cFl7LuATmNraor/GC1Km7IAx+ajqeDiPAG266aFEaJaWmrn
elHnNAsKarhCqL4YruSicIDbKZhuxoxC9Ke+c58pm05waBDGXBZqrrwtHFuv1StS
MEVzP13r8UzfpR06/vwMWqFVYz9rbrB062CkHATI0HXW6do32evdk++yrmjdR0O0
RQ0kOqjRzfWTSO52kOrKxGyWgbBLZACGLOXkfkktvZwh7TWiaUwXYO9J7gRjdjJ3
+YuE+Csvy1hMZwG7YzCwMvPb+NoPloaky3MXR7VY99oy4r2F7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCzxFwDTyoE50j6jACw7z+pmU37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjRiZDU3MDUtZDM5MS0z
NDhjLWJiNWQtZGU4NmJiM2YxODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSszMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtjAVYSieD0K5eDe7h9C4bUYlAT6jzrsqlbui7ST1MhYuZuxugsJIYs
nd2F0ZrAkhYw1mtr/bc2Gno9WUF1CsUxlRi2ojDfZQxFHF0TvTYMkl09fcDDOsZo
flKJsr738pPprl+rXsE6YTKMd+hMe+1JXoWCyjCYBylC1MP9rpmYIlvEeZ0RaNzw
I6UDdzSxUgY7VF4vz0CSfdQygrvqjmhFUue0wNq/9odnKajQjIXvRTt6ywq5kKPU
pYhi41cnk9Wn9OLorlkJzTpb8c7gR0FIOyE7/t6emB+Dogmf/6CZW+TLMPDtJxpJ
hDtgSg/tOo0JPTaFd2dkCS/QIejLoQ0=
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:16:26 2026 by rpki-client