
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa
File: 37e379c2-123b-325c-ac07-0f1c59aac703.roa (raw, json)
Hash identifier: sg1pjj77P9ZoG6XkMS4px1LWe7s4ixfykmgspX57kVc=
Subject key identifier: 9A:DF:88:95:9D:2B:57:F3:B8:7C:32:30:13:D3:AE:5A:4F:21:EA:7D
Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc
Certificate serial: 010D0C9F4328584D15A25C7264743B129A010780
Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa
Signing time: Sat 07 Mar 2026 02:00:32 +0000
ROA not before: Sat 07 Mar 2026 02:00:32 +0000
ROA not after: Fri 05 Jun 2026 01:00:32 +0000
asID: 16509
IP address blocks: 162.216.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:15:a2:5c:72:64:74:3b:12:9a:01:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc
Validity
Not Before: Mar 7 02:00:32 2026 GMT
Not After : Jun 5 01:00:32 2026 GMT
Subject: CN=03f81f71-de0f-4184-b169-c5d67212cf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:f1:3a:57:93:67:25:5e:8b:92:c8:c4:ec:
60:57:81:32:f3:53:7c:2c:1e:39:dd:86:2f:a7:79:
e9:9a:e7:e3:22:a1:c3:91:0a:c6:80:f1:2f:53:34:
d7:9a:d7:3d:17:36:69:ce:95:81:da:a5:78:35:14:
10:fb:2a:bc:bf:d8:69:35:c8:1a:ba:90:36:de:ad:
5e:c9:a4:e4:6b:29:eb:8a:37:e6:e2:75:a6:bf:49:
b0:bf:9b:b7:d0:33:30:94:e9:85:80:5b:b2:96:b8:
20:ab:c6:87:5c:29:f3:c8:04:bd:f8:dc:71:61:73:
c7:97:84:59:53:dc:75:47:32:95:e4:df:d2:be:8b:
24:23:82:81:20:07:0d:7b:8f:3a:1a:cb:44:46:87:
95:1a:5e:46:2e:80:6f:6d:d0:40:de:71:b1:0a:7f:
df:b7:33:28:ad:42:b3:7d:f1:66:b2:fe:d3:4f:8d:
b5:58:14:ab:af:59:04:ea:9c:57:78:61:a8:8e:9c:
f1:44:68:6d:66:1f:cd:1e:48:ef:24:18:5b:a2:5a:
ed:28:cd:1a:37:67:67:35:31:78:01:70:c2:85:03:
25:23:93:52:de:1b:c0:fc:04:b7:5b:0c:c9:ec:e2:
66:bc:26:fb:6f:73:e9:fd:cf:43:34:0e:5b:4c:3f:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DF:88:95:9D:2B:57:F3:B8:7C:32:30:13:D3:AE:5A:4F:21:EA:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl
X509v3 Authority Key Identifier:
keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.216.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:65:46:84:2e:67:e0:ee:d4:5f:54:8f:37:79:69:ad:8d:f8:
db:42:88:91:8c:5d:bc:d8:30:30:64:af:fb:f8:75:4c:72:b5:
06:c6:ac:63:ae:f9:e0:fd:e4:3a:4e:d7:91:f1:ad:ae:c2:48:
30:0f:ef:34:4d:66:01:ec:c6:dc:df:92:7e:ea:b2:f3:02:03:
46:4b:b5:50:3e:7d:7e:2a:56:74:72:51:a3:02:b2:ec:ac:c2:
d2:cf:95:d3:ee:db:91:a7:6a:39:c6:e2:cd:a9:3c:8b:08:cf:
ff:dd:7b:4b:0e:c5:1e:9e:f7:d1:49:2e:09:b0:e9:a7:71:63:
26:88:84:b7:dd:96:84:21:bf:06:61:c3:4f:30:ad:0e:bf:e8:
00:e4:5a:22:aa:76:fc:a6:9f:19:e5:30:85:00:3b:ef:53:14:
ff:46:30:b2:01:2f:ea:d9:d1:3d:38:b1:33:2b:c4:c6:b2:fa:
05:fa:5e:01:63:aa:cd:9c:bd:a5:49:78:78:60:11:bc:8c:6b:
8b:e5:29:ef:29:6f:32:f0:fa:83:ea:f4:a8:07:24:c7:51:02:
cc:d8:ea:38:34:2d:a0:7e:3d:f4:63:19:f1:4c:38:ff:63:9f:
2c:97:24:1b:a8:5f:82:40:61:d6:7b:01:51:aa:0d:35:95:31:
0f:0d:02:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolxyZHQ7EpoBB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy
ZmNjMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
MDNmODFmNzEtZGUwZi00MTg0LWIxNjktYzVkNjcyMTJjZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TfxOleTZyVei5LIxOxgV4Ey81N8LB453YYv
p3npmufjIqHDkQrGgPEvUzTXmtc9FzZpzpWB2qV4NRQQ+yq8v9hpNcgaupA23q1e
yaTkaynrijfm4nWmv0mwv5u30DMwlOmFgFuylrggq8aHXCnzyAS9+NxxYXPHl4RZ
U9x1RzKV5N/SvoskI4KBIAcNe486GstERoeVGl5GLoBvbdBA3nGxCn/ftzMorUKz
ffFmsv7TT421WBSrr1kE6pxXeGGojpzxRGhtZh/NHkjvJBhbolrtKM0aN2dnNTF4
AXDChQMlI5NS3hvA/AS3WwzJ7OJmvCb7b3Pp/c9DNA5bTD8dhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrfiJWdK1fzuHwyMBPTrlpPIep9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz
ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvMzdlMzc5YzItMTIzYi0z
MjVjLWFjMDctMGYxYzU5YWFjNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz
MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy
MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5
OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZlRoQuZ+Du1F9Ujzd5aa2N+NtCiJGMXbzYMDBkr/v4dUxytQbGrGOu
+eD95DpO15Hxra7CSDAP7zRNZgHsxtzfkn7qsvMCA0ZLtVA+fX4qVnRyUaMCsuys
wtLPldPu25GnajnG4s2pPIsIz//de0sOxR6e99FJLgmw6adxYyaIhLfdloQhvwZh
w08wrQ6/6ADkWiKqdvymnxnlMIUAO+9TFP9GMLIBL+rZ0T04sTMrxMay+gX6XgFj
qs2cvaVJeHhgEbyMa4vlKe8pbzLw+oPq9KgHJMdRAszY6jg0LaB+PfRjGfFMOP9j
nyyXJBuoX4JAYdZ7AVGqDTWVMQ8NAts=
-----END CERTIFICATE-----
Generated at Mon Mar 16 11:40:45 2026 by rpki-client