
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/a3818430-e727-30df-8dd2-046f8a792387.roa
File: a3818430-e727-30df-8dd2-046f8a792387.roa (raw, json)
Hash identifier: 6dIaX2Xb9b5uHTQVEbGEFklHaUQWsI19Rx+yvNbxsFA=
Subject key identifier: 83:ED:B6:07:9F:2F:BF:A3:F8:79:F1:B6:4D:49:0B:46:E3:8F:D2:81
Certificate issuer: /CN=38a6de71-55e9-453c-8cf4-1a205aef0191
Certificate serial: 010D0C9F4328584D0BDD00283D181E9519DDE2A0
Authority key identifier: 1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/a3818430-e727-30df-8dd2-046f8a792387.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 40772
IP address blocks: 23.173.96.0/24 maxlen: 24
208.92.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:00:28:3d:18:1e:95:19:dd:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a6de71-55e9-453c-8cf4-1a205aef0191
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=0a3ca543-5402-40c2-94f8-30c253a11d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:35:b0:e6:e8:51:26:71:36:d0:27:2c:d9:
e2:0b:cc:ec:3e:9d:e6:95:99:5d:ac:bf:25:18:db:
de:12:5b:fe:7c:23:0a:c0:0c:08:e2:46:9d:1c:0d:
93:f8:e4:f2:c8:ac:21:7b:e4:75:c1:fd:69:91:e8:
f2:e3:4c:73:76:2a:e9:f0:82:2c:7c:86:0d:6e:fb:
5c:06:5c:fc:de:65:d2:1d:b1:84:86:42:f4:ab:b7:
22:1b:73:6e:94:4c:dc:01:ce:5a:35:f9:34:83:85:
52:6f:8f:95:4a:87:6f:f4:7c:92:8c:a3:59:ed:32:
61:cf:d2:a6:1c:f5:6a:17:0f:ac:5a:ba:b0:a5:2e:
0f:fb:ee:e0:41:4c:23:4c:8c:23:bd:21:15:02:fe:
36:99:f4:f3:42:48:7d:e8:a0:6c:e0:63:ba:3d:d6:
72:76:a1:63:92:2e:d1:11:27:f4:40:78:35:b5:eb:
f1:0b:59:64:53:c6:4a:79:72:4f:5a:ea:55:44:e7:
5b:f1:4a:ea:f9:60:0d:13:04:20:5a:e6:f7:cd:0f:
27:0c:b7:bb:16:38:11:8a:eb:99:c4:6d:b3:9c:16:
cf:d1:86:32:3f:dd:bf:f3:72:ca:15:cb:ab:2e:f1:
69:87:60:2c:22:92:40:04:ff:b1:31:d5:dc:ea:95:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:B6:07:9F:2F:BF:A3:F8:79:F1:B6:4D:49:0B:46:E3:8F:D2:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/a3818430-e727-30df-8dd2-046f8a792387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl
X509v3 Authority Key Identifier:
keyid:1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.96.0/24
208.92.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:61:3d:af:d4:84:0b:16:bd:12:4e:f4:12:66:22:83:29:a2:
30:3b:43:59:fb:69:1a:0d:54:4b:6c:f0:8e:da:2d:0f:7d:05:
e0:70:89:37:ec:3f:c1:27:23:89:5c:9f:19:0e:9a:63:93:b2:
24:fe:d5:4e:6f:3c:6e:8f:6d:14:c4:f9:51:77:9a:2d:ad:d4:
9c:0a:df:3d:5a:1f:50:9a:27:c9:73:5f:21:f3:65:04:65:b3:
39:7c:66:32:42:35:f4:f6:d7:31:72:7e:09:58:c4:1d:43:94:
4b:c0:7e:f1:47:4e:70:d4:db:16:34:52:16:76:dc:96:a2:c5:
31:34:fe:dc:71:e1:b2:fc:bc:32:1f:a6:60:35:7a:1a:77:58:
c6:3d:b4:f0:a1:e9:ee:b3:24:00:e2:f3:4a:e8:d8:81:a3:90:
72:df:dc:bd:5f:a1:cf:40:d0:55:6b:83:65:d1:f4:2f:d0:27:
4c:dc:69:0c:71:1d:82:eb:1f:63:9d:59:77:7b:42:ee:cb:76:
3e:89:3a:6c:31:a4:4c:2a:76:b9:af:de:4a:36:5f:9b:83:d2:
e9:72:3c:ca:d5:63:23:fa:8a:01:63:fa:54:48:3f:7c:fc:da:
65:d1:ea:8a:19:3e:ae:85:8e:14:ef:ea:87:f3:02:7d:6f:8d:
de:a9:21:f1
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0L3QAoPRgelRnd4qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhhNmRlNzEtNTVlOS00NTNjLThjZjQtMWEyMDVhZWYw
MTkxMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk
MGEzY2E1NDMtNTQwMi00MGMyLTk0ZjgtMzBjMjUzYTExZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5w1sOboUSZxNtAnLNniC8zsPp3mlZldrL8l
GNveElv+fCMKwAwI4kadHA2T+OTyyKwhe+R1wf1pkejy40xzdirp8IIsfIYNbvtc
Blz83mXSHbGEhkL0q7ciG3NulEzcAc5aNfk0g4VSb4+VSodv9HySjKNZ7TJhz9Km
HPVqFw+sWrqwpS4P++7gQUwjTIwjvSEVAv42mfTzQkh96KBs4GO6PdZydqFjki7R
ESf0QHg1tevxC1lkU8ZKeXJPWupVROdb8Urq+WANEwQgWub3zQ8nDLe7FjgRiuuZ
xG2znBbP0YYyP92/83LKFcurLvFph2AsIpJABP+xMdXc6pWyFQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIPttgefL7+j+Hnxtk1JC0bjj9KBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOGE2
ZGU3MS01NWU5LTQ1M2MtOGNmNC0xYTIwNWFlZjAxOTEvYTM4MTg0MzAtZTcyNy0z
MGRmLThkZDItMDQ2ZjhhNzkyMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzhhNmRlNzEtNTVlOS00NTNjLThj
ZjQtMWEyMDVhZWYwMTkxLzM4YTZkZTcxLTU1ZTktNDUzYy04Y2Y0LTFhMjA1YWVm
MDE5MS5jcmwwHwYDVR0jBBgwFoAUGzewoOHUCfdPSY6fdREUzEyPkE0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zOGE2ZGU3MS01NWU5LTQ1M2MtOGNmNC0xYTIw
NWFlZjAxOTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF61gAwQA
0FybMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHFhPa/UhAsWvRJO9BJmIoMpojA7Q1n7aRoNVEts8I7aLQ99
BeBwiTfsP8EnI4lcnxkOmmOTsiT+1U5vPG6PbRTE+VF3mi2t1JwK3z1aH1CaJ8lz
XyHzZQRlszl8ZjJCNfT21zFyfglYxB1DlEvAfvFHTnDU2xY0UhZ23JaixTE0/txx
4bL8vDIfpmA1ehp3WMY9tPCh6e6zJADi80ro2IGjkHLf3L1foc9A0FVrg2XR9C/Q
J0zcaQxxHYLrH2OdWXd7Qu7Ldj6JOmwxpEwqdrmv3ko2X5uD0ulyPMrVYyP6igFj
+lRIP3z82mXR6ooZPq6FjhTv6ofzAn1vjd6pIfE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:46 2026 by rpki-client