
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa
File: 038febac-a971-356a-a45e-6ac7bc0667ad.roa (raw, json)
Hash identifier: 9CzbQtxHXeauuQsKTpHYJH9dHg/3dKhhEzWQyPTIjgw=
Subject key identifier: 69:7C:66:56:8C:2D:94:78:BE:DC:FA:88:FF:9B:50:B4:A6:13:D5:53
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F4328584D24DF6842A636C1A5CC76D000
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 14813
IP address blocks: 72.22.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:68:42:a6:36:c1:a5:cc:76:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=efe44150-d87b-41a6-9c0b-51b976fec01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:b6:fe:b9:cc:bd:0c:be:8e:55:f6:6f:f8:
66:9a:b8:67:db:02:f0:05:02:62:9d:c9:83:6c:e1:
c0:2d:bd:cc:40:8f:2b:64:72:79:61:83:75:cc:64:
0c:01:04:d6:2e:c2:6a:d4:fe:30:85:4d:f9:69:86:
c7:0d:32:5f:cc:80:61:df:b7:b6:1e:21:98:ae:6c:
f9:5f:8b:d2:53:62:1d:c5:9d:a7:0c:b9:0d:18:b5:
e5:fe:ce:96:5f:dd:d0:60:b4:d6:38:96:3b:ed:24:
a3:03:81:4d:e5:14:82:7b:57:30:34:a1:45:9c:d3:
19:71:5f:dc:60:f1:dc:6e:94:81:15:17:f8:4f:40:
57:44:19:22:e3:43:f3:b3:03:4b:5b:12:4c:45:94:
28:d7:67:e1:88:9b:54:a4:b7:70:8e:7a:ed:64:f3:
9d:7a:03:f6:a5:34:83:d0:7d:e4:8d:ff:41:fd:5d:
9e:1c:78:40:e2:0a:e6:8e:04:f1:82:e7:d2:d4:fd:
25:89:c0:eb:10:7a:45:f6:26:4b:5b:5e:0a:c2:97:
f3:f7:13:49:d3:02:a3:d4:2e:2f:a1:07:da:5a:a9:
fb:fe:77:26:e6:23:24:6d:54:d7:45:23:23:e7:ab:
ec:b4:6a:71:92:d7:4c:d2:cf:b3:1b:e8:ce:3b:fa:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:66:56:8C:2D:94:78:BE:DC:FA:88:FF:9B:50:B4:A6:13:D5:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:54:8f:95:28:05:4a:68:49:d6:f0:ea:8f:a6:da:46:49:59:
35:52:3a:bc:35:4b:15:06:5a:73:07:00:26:5a:eb:e0:08:70:
89:b0:3a:c8:49:5b:2d:51:2d:0b:ab:76:1d:18:eb:eb:de:22:
15:7f:7a:39:ab:0e:03:e0:5b:d4:2f:64:1e:b1:be:fb:2b:cb:
70:5c:64:6f:44:3b:c9:65:78:4e:2a:38:fe:4e:b4:20:25:7d:
c9:7d:3b:fa:0b:37:c9:6e:74:83:73:35:32:7b:61:b2:be:d8:
03:b6:9a:4f:1b:66:ed:31:33:80:de:dc:58:19:6d:bf:c7:bf:
7c:cc:a8:58:63:bb:93:a2:53:3a:81:2e:da:6b:b1:b1:54:db:
82:49:c0:fb:33:e2:41:bf:37:68:2a:64:7b:0b:f7:90:8b:8c:
cd:43:00:d6:5f:f4:fa:60:f2:00:27:cf:1d:5e:73:0c:08:d7:
41:d6:3f:84:e3:64:15:99:58:9e:50:c5:0b:87:0c:b4:6a:a9:
61:34:1a:eb:7d:a7:8d:aa:29:cd:0f:63:3e:94:5b:9d:01:a2:
46:93:fe:b4:73:19:bc:d1:c1:6c:cb:ac:a8:83:af:cc:23:37:
1a:ef:ad:b4:82:ae:b4:9a:7d:69:14:a1:d3:d5:d7:fc:b4:df:
58:40:8b:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k32hCpjbBpcx20AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZWZlNDQxNTAtZDg3Yi00MWE2LTljMGItNTFiOTc2ZmVjMDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFy2/rnMvQy+jlX2b/hmmrhn2wLwBQJincmD
bOHALb3MQI8rZHJ5YYN1zGQMAQTWLsJq1P4whU35aYbHDTJfzIBh37e2HiGYrmz5
X4vSU2IdxZ2nDLkNGLXl/s6WX93QYLTWOJY77SSjA4FN5RSCe1cwNKFFnNMZcV/c
YPHcbpSBFRf4T0BXRBki40PzswNLWxJMRZQo12fhiJtUpLdwjnrtZPOdegP2pTSD
0H3kjf9B/V2eHHhA4grmjgTxgufS1P0licDrEHpF9iZLW14Kwpfz9xNJ0wKj1C4v
oQfaWqn7/ncm5iMkbVTXRSMj56vstGpxktdM0s+zG+jOO/qx5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGl8ZlaMLZR4vtz6iP+bULSmE9VTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDM4ZmViYWMtYTk3MS0z
NTZhLWE0NWUtNmFjN2JjMDY2N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBadMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENUj5UoBUpoSdbw6o+m2kZJWTVSOrw1SxUGWnMHACZa6+AIcImwOshJ
Wy1RLQurdh0Y6+veIhV/ejmrDgPgW9QvZB6xvvsry3BcZG9EO8lleE4qOP5OtCAl
fcl9O/oLN8ludINzNTJ7YbK+2AO2mk8bZu0xM4De3FgZbb/Hv3zMqFhju5OiUzqB
LtprsbFU24JJwPsz4kG/N2gqZHsL95CLjM1DANZf9Ppg8gAnzx1ecwwI10HWP4Tj
ZBWZWJ5QxQuHDLRqqWE0Gut9p42qKc0PYz6UW50BokaT/rRzGbzRwWzLrKiDr8wj
NxrvrbSCrrSafWkUodPV1/y031hAi6c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:59 2026 by rpki-client