
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa
File: 07a3338e-daba-38dd-af30-905208773fd9.roa (raw, json)
Hash identifier: b2Ddycue2u7bu3WfJt7b5TotQEn6J8GXVpTqVDpR1NI=
Subject key identifier: 0B:9F:C6:2F:67:95:70:EC:19:BD:B0:E5:45:84:3B:2D:B0:1A:6B:35
Certificate issuer: /CN=32a9337d-d761-426f-939a-0a770ad5bcce
Certificate serial: 010D0C9F4328584DBA3B01954B4F2E67BF9D8560
Authority key identifier: 40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 376
IP address blocks: 132.208.0.0/16 maxlen: 16
199.202.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3b:01:95:4b:4f:2e:67:bf:9d:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a9337d-d761-426f-939a-0a770ad5bcce
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=6dab3635-3d3f-421f-af3a-5261d8432237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:7d:ea:19:e1:a4:4a:24:bf:cc:b5:94:24:
db:87:f0:ec:f5:cf:d6:94:43:5d:fe:bb:ff:b2:d3:
9a:f9:85:c8:a7:0b:28:18:a5:df:7b:38:91:c2:9a:
32:f8:64:44:3a:ed:a2:49:40:ba:35:c2:80:b5:ba:
4c:ac:4a:a5:e1:81:2b:83:55:04:6d:a7:be:02:ea:
11:16:ec:dd:05:7b:b5:a5:3d:5f:ec:10:20:7d:2e:
12:89:2d:8d:b8:1f:16:65:78:8a:1f:bb:2b:11:13:
02:15:3f:10:90:f2:7e:15:39:5d:1a:6a:59:d9:7d:
fc:29:5c:fe:94:90:2f:4a:46:ba:b3:52:c9:ad:77:
bb:2a:94:e2:ec:7a:a2:14:5b:f7:e9:0c:52:ba:22:
16:38:96:7d:f1:83:2f:c7:59:2b:3d:09:b1:12:c0:
55:00:24:be:94:e6:b3:e6:e0:d7:42:96:44:55:2c:
12:f7:a3:d3:8b:b2:5c:79:61:58:89:ca:30:ba:2a:
01:d1:47:fb:0d:bf:8a:b6:47:ce:f1:3d:e7:be:1c:
76:25:af:cf:ec:78:01:07:d3:e0:b1:db:17:83:cd:
f7:c8:87:fa:b1:06:80:3b:4c:ce:5b:87:81:b8:e8:
7c:52:3c:ad:02:4f:bd:fd:c1:32:55:c4:21:32:26:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:C6:2F:67:95:70:EC:19:BD:B0:E5:45:84:3B:2D:B0:1A:6B:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl
X509v3 Authority Key Identifier:
keyid:40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer
sbgp-ipAddrBlock: critical
IPv4:
132.208.0.0/16
199.202.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b1:71:bb:34:9f:60:ac:fd:6f:0b:a8:f6:35:50:c2:51:c5:
45:d5:d0:f3:0c:2b:84:f1:33:ac:b1:94:46:5b:8e:2c:73:72:
20:99:b2:a5:5b:88:9a:11:27:ed:84:31:39:ab:a4:5c:9d:5d:
d5:6c:3d:c2:72:1f:19:87:a3:58:f6:e7:eb:d4:98:3b:98:67:
a9:2c:58:21:4f:6c:70:d8:77:79:53:78:70:70:4c:a6:b9:32:
24:25:e1:1c:74:3c:8a:9d:32:cc:7c:01:57:27:07:25:c0:d3:
8c:63:4b:b4:e0:67:18:d7:75:af:4a:3d:6b:d0:df:40:46:4d:
bf:f1:00:d6:5c:f8:78:3e:9c:6c:e8:a7:da:37:aa:3b:fb:93:
57:c2:ac:d7:83:d8:46:8e:b4:b9:70:d0:8f:df:52:08:3b:2c:
71:45:30:fb:83:15:41:2d:ea:69:df:df:17:79:03:ae:08:10:
b0:4d:8a:4d:05:36:99:5d:a0:8c:57:a8:0a:1a:91:22:96:7e:
5f:32:73:e8:4a:5e:e9:a1:7a:16:85:c4:6a:d7:b2:f6:f2:dc:
41:31:25:4a:d3:16:03:11:a2:0e:bc:49:b7:f0:e4:1b:37:20:
76:12:f4:d5:88:39:6b:63:c6:6c:f2:4c:11:54:c4:0b:d7:5e:
45:e6:d9:12
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE26OwGVS08uZ7+dhWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJhOTMzN2QtZDc2MS00MjZmLTkzOWEtMGE3NzBhZDVi
Y2NlMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
NmRhYjM2MzUtM2QzZi00MjFmLWFmM2EtNTI2MWQ4NDMyMjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAd96hnhpEokv8y1lCTbh/Ds9c/WlENd/rv/
stOa+YXIpwsoGKXfeziRwpoy+GREOu2iSUC6NcKAtbpMrEql4YErg1UEbae+AuoR
FuzdBXu1pT1f7BAgfS4SiS2NuB8WZXiKH7srERMCFT8QkPJ+FTldGmpZ2X38KVz+
lJAvSka6s1LJrXe7KpTi7HqiFFv36QxSuiIWOJZ98YMvx1krPQmxEsBVACS+lOaz
5uDXQpZEVSwS96PTi7JceWFYicowuioB0Uf7Db+KtkfO8T3nvhx2Ja/P7HgBB9Pg
sdsXg833yIf6sQaAO0zOW4eBuOh8UjytAk+9/cEyVcQhMiYmawIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAufxi9nlXDsGb2w5UWEOy2wGms1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMmE5
MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3MGFkNWJjY2UvMDdhMzMzOGUtZGFiYS0z
OGRkLWFmMzAtOTA1MjA4NzczZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzJhOTMzN2QtZDc2MS00MjZmLTkz
OWEtMGE3NzBhZDViY2NlLzMyYTkzMzdkLWQ3NjEtNDI2Zi05MzlhLTBhNzcwYWQ1
YmNjZS5jcmwwHwYDVR0jBBgwFoAUQEOwOPP8C2XLCa6C843TQDjCtf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zMmE5MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3
MGFkNWJjY2UuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAhNADBADH
ykgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAZbFxuzSfYKz9bwuo9jVQwlHFRdXQ8wwrhPEzrLGURluOLHNy
IJmypVuImhEn7YQxOaukXJ1d1Ww9wnIfGYejWPbn69SYO5hnqSxYIU9scNh3eVN4
cHBMprkyJCXhHHQ8ip0yzHwBVycHJcDTjGNLtOBnGNd1r0o9a9DfQEZNv/EA1lz4
eD6cbOin2jeqO/uTV8Ks14PYRo60uXDQj99SCDsscUUw+4MVQS3qad/fF3kDrggQ
sE2KTQU2mV2gjFeoChqRIpZ+XzJz6Epe6aF6FoXEatey9vLcQTElStMWAxGiDrxJ
t/DkGzcgdhL01Yg5a2PGbPJMEVTEC9deRebZEg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:09:52 2026 by rpki-client