
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa
File: 38baa28c-5f18-3003-b482-8efaa6947bef.roa (raw, json)
Hash identifier: ZHavriCY6BFeR5gVmES1s4j5/BXvH7BpWYcbf1Kuy+8=
Subject key identifier: 8C:F6:A6:A0:45:2D:E4:E7:5B:7A:F5:7C:A5:2A:67:21:49:D7:47:F9
Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial: 010D0C9F4328584DC565A11F9734E99EEC87F400
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa
Signing time: Sat 09 May 2026 01:00:25 +0000
ROA not before: Sat 09 May 2026 01:00:25 +0000
ROA not after: Fri 07 Aug 2026 01:00:25 +0000
asID: 12022
IP address blocks: 208.83.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c5:65:a1:1f:97:34:e9:9e:ec:87:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Validity
Not Before: May 9 01:00:25 2026 GMT
Not After : Aug 7 01:00:25 2026 GMT
Subject: CN=865ab1b8-9385-43b7-9fab-24074f6261c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:06:a8:2c:3c:15:04:84:9f:5b:bc:d4:fb:4b:
5a:f0:c4:35:ef:d2:2a:21:0b:15:b5:7d:de:83:97:
d1:f7:cd:1f:c0:0e:d3:eb:0a:63:db:bf:74:76:45:
81:a5:26:94:c3:0b:64:b9:1c:e2:85:88:e2:f7:cb:
02:0a:6f:92:4a:5d:fc:c7:a4:d6:71:29:44:a1:7a:
5c:3a:96:24:6a:a1:90:22:ae:8c:6f:1a:31:1d:ff:
2b:19:20:7c:7f:91:16:1e:24:11:af:05:8d:ab:34:
80:a6:1a:de:54:3a:d6:82:03:58:c2:68:2b:c5:df:
34:23:f0:3c:4a:5e:31:93:72:9f:02:38:ca:87:d2:
fd:b5:58:06:a1:83:6e:4e:31:95:2c:1e:eb:81:d4:
d4:48:f7:71:45:73:63:8f:22:ba:3f:f2:6f:62:eb:
bc:d3:2f:1e:14:63:03:2b:5b:15:c1:cb:4f:c1:b3:
03:8e:1e:ab:de:ce:11:4f:3d:65:29:d8:71:de:4c:
78:c1:60:f0:5b:a9:e4:a4:a2:35:2b:be:a9:93:8c:
d1:4b:50:8b:4b:e9:25:b6:06:5a:21:61:02:fc:ab:
7b:0b:b0:b9:cd:89:b7:51:57:de:d4:f1:24:11:d1:
d1:c2:fc:a7:df:69:d3:42:f8:dd:31:ce:c8:4f:bf:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:A6:A0:45:2D:E4:E7:5B:7A:F5:7C:A5:2A:67:21:49:D7:47:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
X509v3 Authority Key Identifier:
keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
sbgp-ipAddrBlock: critical
IPv4:
208.83.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:cb:a7:ee:51:ad:fc:f2:24:a6:39:a3:58:ad:21:a1:75:1d:
e0:c8:36:8d:e5:b4:01:38:75:8f:c8:0e:7e:10:12:ec:a8:24:
16:f6:9b:cd:64:5e:2a:85:b9:27:cd:f7:8d:97:4c:b6:83:e3:
b8:82:22:ab:c9:f8:9f:71:cb:58:e2:8b:f9:60:d8:a6:8d:9c:
69:04:72:10:d9:10:b9:e9:e4:45:85:1d:8f:55:08:7c:fc:49:
42:77:c6:ff:d5:5d:d5:f2:37:e9:df:b0:d3:7f:f9:42:35:fe:
10:4b:dd:a2:66:3a:af:32:32:4b:54:09:fe:62:ea:4b:f1:b6:
a7:32:55:39:10:6a:d2:77:68:d9:85:0a:8b:e4:01:33:4e:ae:
32:2f:d8:11:d6:36:7f:73:09:3d:53:3b:3e:9a:6c:3f:13:09:
6c:54:e4:77:82:e1:0e:50:a5:fb:2e:65:7e:2e:be:0d:37:4f:
14:55:f7:80:51:71:ab:6d:54:38:b1:e6:f7:c5:54:06:cf:dc:
6b:d4:7f:0a:4b:56:0f:24:e0:19:73:d5:46:1e:cc:42:6f:80:
28:22:4e:8a:c6:06:4f:4a:a7:42:0e:24:1d:f6:2b:52:02:f3:
2b:4b:57:4d:a8:c0:9a:67:96:89:9c:18:a1:85:93:40:75:3b:
fc:11:c5:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZaEflzTpnuyH9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4
MDMxMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
ODY1YWIxYjgtOTM4NS00M2I3LTlmYWItMjQwNzRmNjI2MWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/gaoLDwVBISfW7zU+0ta8MQ179IqIQsVtX3e
g5fR980fwA7T6wpj2790dkWBpSaUwwtkuRzihYji98sCCm+SSl38x6TWcSlEoXpc
OpYkaqGQIq6MbxoxHf8rGSB8f5EWHiQRrwWNqzSAphreVDrWggNYwmgrxd80I/A8
Sl4xk3KfAjjKh9L9tVgGoYNuTjGVLB7rgdTUSPdxRXNjjyK6P/JvYuu80y8eFGMD
K1sVwctPwbMDjh6r3s4RTz1lKdhx3kx4wWDwW6nkpKI1K76pk4zRS1CLS+kltgZa
IWEC/Kt7C7C5zYm3UVfe1PEkEdHRwvyn32nTQvjdMc7IT788YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIz2pqBFLeTnW3r1fKUqZyFJ10f5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2
NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvMzhiYWEyOGMtNWYxOC0z
MDAzLWI0ODItOGVmYWE2OTQ3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3
NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj
ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4
OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjLp+5RrfzyJKY5o1itIaF1HeDINo3ltAE4dY/IDn4QEuyoJBb2m81k
XiqFuSfN942XTLaD47iCIqvJ+J9xy1jii/lg2KaNnGkEchDZELnp5EWFHY9VCHz8
SUJ3xv/VXdXyN+nfsNN/+UI1/hBL3aJmOq8yMktUCf5i6kvxtqcyVTkQatJ3aNmF
CovkATNOrjIv2BHWNn9zCT1TOz6abD8TCWxU5HeC4Q5QpfsuZX4uvg03TxRV94BR
cattVDix5vfFVAbP3GvUfwpLVg8k4Blz1UYezEJvgCgiTorGBk9Kp0IOJB32K1IC
8ytLV02owJpnlomcGKGFk0B1O/wRxWI=
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:33 2026 by rpki-client