
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa
File: 3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa (raw, json)
Hash identifier: OOEciubWZpeRuXm6odv4OdCBvFGHJXgAidlAIHaBbXY=
Subject key identifier: AB:1D:EA:12:E4:AA:AD:D9:DD:C0:EF:B7:84:6D:CF:66:66:43:7C:8B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F497418725712D752D2066A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40717
IP address blocks: 198.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:18:72:57:12:d7:52:d2:06:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4e7adbaa-c26a-4a7d-b606-bb853c0156b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:fe:99:d2:92:93:87:81:5d:db:09:0e:ae:
a1:e9:e7:c6:93:9c:ee:20:73:a1:17:57:ba:5e:75:
07:7a:09:13:02:5f:1c:f6:6f:1d:ab:3d:cb:64:da:
0c:e0:fb:13:1c:16:39:81:8e:39:fb:55:4c:f1:02:
a1:b0:e5:69:32:fc:6c:7f:fa:2b:9b:12:9f:68:82:
12:30:8d:86:b6:d8:9a:ff:b1:11:d7:04:0e:84:93:
1f:05:bd:b7:59:b1:33:07:b2:65:6e:65:f5:7f:27:
e2:36:b4:51:08:7e:10:ed:f7:9e:52:2b:06:a8:f6:
11:e7:87:c4:54:1b:a8:14:28:9e:72:75:47:cc:92:
4e:4d:59:b4:b8:c6:6a:6b:e7:e6:40:4c:1b:a5:01:
52:fb:78:60:2f:fe:18:03:33:f1:4a:dd:c8:cc:b9:
47:4a:ad:f0:89:83:d3:c5:fe:b3:b9:f0:2b:6b:1e:
92:7a:42:09:b2:bd:be:89:50:d1:1b:90:63:df:17:
74:99:d4:69:ac:3a:75:c8:bb:3f:8a:11:a2:30:b0:
e0:d5:f1:06:1f:77:75:76:66:58:ed:43:17:50:5c:
36:f4:3c:65:16:6c:89:59:45:eb:4d:d1:da:a8:b6:
a6:f5:25:73:0c:c7:dc:c0:5e:29:e4:93:86:cd:3c:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1D:EA:12:E4:AA:AD:D9:DD:C0:EF:B7:84:6D:CF:66:66:43:7C:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:07:b3:ff:0f:84:38:6f:37:55:71:fa:59:05:8f:ad:78:cd:
6f:16:e3:17:af:79:e1:47:9d:72:df:64:6f:be:c5:ac:91:56:
3e:17:30:cd:d6:e7:61:c1:90:be:a2:42:52:b6:1f:74:d6:dc:
95:54:ea:56:f8:c7:e1:11:de:79:c1:68:f3:dc:c8:f3:1a:7d:
71:86:25:d4:3f:80:18:1e:ad:68:72:69:e9:36:22:72:ec:d2:
47:44:fa:a1:6e:79:c5:ae:f1:4a:77:c1:c2:37:e8:3f:3d:cc:
67:9f:b8:72:8e:cc:03:7d:4c:56:d4:d5:08:f9:a1:83:aa:57:
31:91:22:e6:ee:32:f7:10:93:05:35:97:c3:87:a1:7a:ab:1f:
a4:e5:47:1b:d4:b2:21:6b:5b:5f:57:95:de:f8:db:53:29:df:
e4:74:e9:f5:bf:25:c2:2c:04:66:56:49:ec:e2:49:a6:19:ea:
20:81:84:50:bb:eb:12:26:94:37:2d:6a:42:a2:d7:b0:32:79:
aa:67:4e:18:6c:be:52:84:e7:53:c3:4e:4b:62:23:74:5f:6b:
53:a7:f5:77:ac:7f:d1:0c:fd:76:9d:e7:c8:0c:77:e7:71:d9:
c3:c1:2c:dd:51:5f:f1:ec:e6:99:5b:d9:b6:73:93:7c:69:6b:
35:55:d6:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBhyVxLXUtIGagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGU3YWRiYWEtYzI2YS00YTdkLWI2MDYtYmI4NTNjMDE1NmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsb+mdKSk4eBXdsJDq6h6efGk5zuIHOhF1e6
XnUHegkTAl8c9m8dqz3LZNoM4PsTHBY5gY45+1VM8QKhsOVpMvxsf/ormxKfaIIS
MI2Gttia/7ER1wQOhJMfBb23WbEzB7JlbmX1fyfiNrRRCH4Q7feeUisGqPYR54fE
VBuoFCiecnVHzJJOTVm0uMZqa+fmQEwbpQFS+3hgL/4YAzPxSt3IzLlHSq3wiYPT
xf6zufArax6SekIJsr2+iVDRG5Bj3xd0mdRprDp1yLs/ihGiMLDg1fEGH3d1dmZY
7UMXUFw29DxlFmyJWUXrTdHaqLam9SVzDMfcwF4p5JOGzTyzmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsd6hLkqq3Z3cDvt4Rtz2ZmQ3yLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2EwMGNhZDgtMDI2Ny0z
OWI0LWFmNmQtZmIzY2QxYTk0MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQHs/8PhDhvN1Vx+lkFj614zW8W4xeveeFHnXLfZG++xayRVj4XMM3W
52HBkL6iQlK2H3TW3JVU6lb4x+ER3nnBaPPcyPMafXGGJdQ/gBgerWhyaek2InLs
0kdE+qFuecWu8Up3wcI36D89zGefuHKOzAN9TFbU1Qj5oYOqVzGRIubuMvcQkwU1
l8OHoXqrH6TlRxvUsiFrW19Xld7421Mp3+R06fW/JcIsBGZWSeziSaYZ6iCBhFC7
6xImlDctakKi17AyeapnThhsvlKE51PDTktiI3Rfa1On9Xesf9EM/Xad58gMd+dx
2cPBLN1RX/Hs5plb2bZzk3xpazVV1ng=
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:50:52 2026 by rpki-client