
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/10d5b36f-4910-3a35-9a8d-ff268b4459f9.roa
File: 10d5b36f-4910-3a35-9a8d-ff268b4459f9.roa (raw, json)
Hash identifier: Mfb2pIALjRGVmgwL4o0JGFcYNs3ia6SsSrXhBd8cqQI=
Subject key identifier: F6:AF:A8:E5:AA:84:5F:64:EF:09:EA:72:76:B4:AE:74:D5:E8:E3:9E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E5E7A03938D9D50D071D1D820
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/10d5b36f-4910-3a35-9a8d-ff268b4459f9.roa
Signing time: Thu 02 Jul 2026 21:00:12 +0000
ROA not before: Thu 02 Jul 2026 21:00:12 +0000
ROA not after: Wed 30 Sep 2026 21:00:12 +0000
asID: 138119
IP address blocks: 154.40.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5e:7a:03:93:8d:9d:50:d0:71:d1:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 2 21:00:12 2026 GMT
Not After : Sep 30 21:00:12 2026 GMT
Subject: CN=42b03cb5-836f-4cc0-969e-0a0a5165f65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:6c:cf:cd:b1:b2:63:b1:9f:d9:6c:be:ab:
80:4d:df:fe:e2:5c:f3:0e:4e:0f:e3:c0:46:cf:84:
dc:b8:eb:98:e9:1d:d5:0f:8a:48:01:98:a7:a5:6f:
52:df:79:00:0e:76:67:ba:5b:0b:da:d1:10:09:ad:
24:b8:f7:53:d3:9f:07:8e:27:ee:80:ed:88:a8:8d:
15:a0:bc:ef:c1:b5:90:eb:44:d4:b0:a9:2d:d3:8f:
dd:1e:d0:b4:38:d5:6d:20:bc:c2:92:ba:5f:ae:48:
1c:8d:76:8e:76:07:80:b1:7d:4b:37:49:b0:77:dd:
26:e2:91:f4:63:d7:cb:21:b1:a7:4e:e0:0b:a3:54:
5a:b7:53:12:f5:b7:a9:21:a8:87:60:6a:41:b3:e3:
8f:9a:e6:7e:a9:f1:62:21:0c:dd:74:88:92:3c:88:
f5:66:d2:da:57:1a:97:a0:9f:e1:e6:f0:23:42:86:
3f:bf:25:3d:68:3e:a6:ea:00:ce:b3:cf:f8:16:44:
d5:5e:c9:19:35:82:88:0a:4c:fb:b5:5d:9d:21:11:
25:ca:32:ad:3b:de:3e:08:01:e3:27:e0:29:66:36:
7a:cc:96:1d:09:59:0a:74:78:4f:44:29:d0:0c:27:
7a:5f:2f:18:3e:a1:bc:64:01:3a:6a:a4:fc:0b:4f:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:A8:E5:AA:84:5F:64:EF:09:EA:72:76:B4:AE:74:D5:E8:E3:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/10d5b36f-4910-3a35-9a8d-ff268b4459f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
154.40.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:d9:96:37:9c:9a:ab:31:e7:6b:51:f0:3b:35:8d:d2:17:6d:
57:bb:b2:a7:16:06:60:33:9a:c5:18:73:92:74:f6:59:b7:d2:
bc:cd:cf:02:ae:16:dd:43:06:31:15:13:d2:65:46:b6:c4:38:
3d:6c:2e:44:97:c6:ab:03:fe:db:31:86:22:23:b3:6a:ac:42:
ff:07:a2:0b:c2:9e:17:ae:e3:79:59:b4:a4:70:db:d1:6d:cf:
82:19:bb:66:28:d1:87:dc:b8:e7:9a:f4:a1:3a:84:20:16:a8:
82:47:42:b2:17:b4:7f:5e:83:dd:cf:e7:1f:7e:27:f5:d2:42:
de:8f:ff:fc:91:1a:6c:24:4f:1e:84:d4:68:93:32:4e:73:95:
45:31:6b:e2:f7:6a:cf:49:f8:e7:1e:de:3a:34:92:28:3f:8f:
8c:95:9c:44:ea:27:b0:3c:0c:7e:11:4a:80:d0:ff:88:51:2e:
ad:2f:32:e7:bc:ff:72:79:b6:63:43:2e:35:fa:e6:04:ad:7c:
23:be:b2:20:6c:c7:5e:73:1e:7a:8f:bb:36:f2:52:bd:9b:9f:
7e:23:49:fa:aa:f4:39:72:73:39:5b:6c:bb:91:6f:60:7c:d7:
28:f8:ec:f3:8f:bf:98:da:8f:fc:6f:6a:51:27:6d:c0:9c:7d:
f8:ec:52:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegOTjZ1Q0HHR2CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
NDJiMDNjYjUtODM2Zi00Y2MwLTk2OWUtMGEwYTUxNjVmNjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkulsz82xsmOxn9lsvquATd/+4lzzDk4P48BG
z4TcuOuY6R3VD4pIAZinpW9S33kADnZnulsL2tEQCa0kuPdT058HjifugO2IqI0V
oLzvwbWQ60TUsKkt04/dHtC0ONVtILzCkrpfrkgcjXaOdgeAsX1LN0mwd90m4pH0
Y9fLIbGnTuALo1Rat1MS9bepIaiHYGpBs+OPmuZ+qfFiIQzddIiSPIj1ZtLaVxqX
oJ/h5vAjQoY/vyU9aD6m6gDOs8/4FkTVXskZNYKICkz7tV2dIRElyjKtO94+CAHj
J+ApZjZ6zJYdCVkKdHhPRCnQDCd6Xy8YPqG8ZAE6aqT8C0+iJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPavqOWqhF9k7wnqcna0rnTV6OOeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTBkNWIzNmYtNDkxMC0z
YTM1LTlhOGQtZmYyNjhiNDQ1OWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmiiIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfZljecmqsx52tR8Ds1jdIXbVe7sqcWBmAzmsUYc5J09lm30rzNzwKu
Ft1DBjEVE9JlRrbEOD1sLkSXxqsD/tsxhiIjs2qsQv8HogvCnheu43lZtKRw29Ft
z4IZu2Yo0YfcuOea9KE6hCAWqIJHQrIXtH9eg93P5x9+J/XSQt6P//yRGmwkTx6E
1GiTMk5zlUUxa+L3as9J+Oce3jo0kig/j4yVnETqJ7A8DH4RSoDQ/4hRLq0vMue8
/3J5tmNDLjX65gStfCO+siBsx15zHnqPuzbyUr2bn34jSfqq9DlyczlbbLuRb2B8
1yj47POPv5jaj/xvalEnbcCcffjsUjM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:14 2026 by rpki-client