
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa
File: 43caa540-de27-3074-970d-0f7f826011e6.roa (raw, json)
Hash identifier: hHKrjRQez9oXNlcJAI1aQ1QTGdbbWI8TvZ17X8ctxKo=
Subject key identifier: 21:EF:96:30:FE:C1:15:6D:01:C7:3A:C2:D0:5E:2B:0D:63:2C:8A:1D
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D316F77816C874DDB1B760080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa
Signing time: Tue 17 Mar 2026 01:00:32 +0000
ROA not before: Tue 17 Mar 2026 01:00:32 +0000
ROA not after: Mon 15 Jun 2026 01:00:32 +0000
asID: 151719
IP address blocks: 154.59.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:31:6f:77:81:6c:87:4d:db:1b:76:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 17 01:00:32 2026 GMT
Not After : Jun 15 01:00:32 2026 GMT
Subject: CN=b8e4bc07-5172-4abb-9d0c-365b87711cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:59:9f:01:ab:b4:d8:9f:c2:b9:5b:a7:19:
75:73:0d:f9:7e:f8:ae:83:4e:90:56:71:f5:9f:33:
1f:9d:f8:8f:34:81:be:aa:dd:50:25:e0:25:3a:00:
6b:23:03:9a:75:3e:07:23:d2:19:33:eb:a8:10:65:
58:04:98:06:7c:c6:af:95:36:cb:10:de:0d:6c:19:
80:ed:ba:01:cf:f9:76:ee:ef:ca:7a:f8:c1:34:19:
0a:b2:14:4e:e8:65:f7:52:96:0e:e7:30:0b:ba:38:
7e:0c:6f:bc:77:95:7a:b6:b9:9b:da:df:ce:ad:92:
5f:56:27:d1:1a:57:6c:f7:1b:90:84:27:61:ce:a7:
b9:c2:43:59:7d:fa:71:bd:fb:6e:0b:04:0f:55:90:
fa:36:29:21:d9:97:46:2b:00:45:90:49:14:9e:22:
34:05:fb:dc:e9:4d:d0:fd:f7:df:28:9f:7d:05:5e:
7a:ff:48:04:27:cd:1f:ef:ba:65:3b:c0:08:98:c0:
12:51:8c:15:c5:f2:45:7b:a0:ca:76:dd:3b:73:66:
4e:32:3b:1a:33:51:8d:19:12:58:d4:0f:b0:47:7c:
a0:72:05:38:f5:eb:3c:e9:b3:ea:d5:ac:66:d0:cf:
f5:f5:35:f2:96:cf:b9:cd:5f:93:59:ce:3f:c8:aa:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EF:96:30:FE:C1:15:6D:01:C7:3A:C2:D0:5E:2B:0D:63:2C:8A:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
154.59.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:f8:6a:4e:ee:8d:a1:8d:42:dc:57:7c:b0:6b:7c:5a:2f:5b:
74:68:b6:3d:81:fc:c1:82:a6:3b:14:5b:ac:cd:ea:f4:e8:32:
b4:fd:16:82:f7:b5:61:82:05:9f:fd:7e:da:bf:d5:66:af:a1:
bf:5a:92:fb:b9:e2:0a:38:8f:cc:6f:d1:5e:18:f4:59:2d:1c:
7c:ce:23:08:c4:28:e9:67:ff:a3:9e:53:ae:9a:af:76:0d:c8:
d7:f7:45:20:77:a6:f9:40:01:69:14:8f:93:ec:c6:3a:28:e2:
ea:d5:78:55:48:74:38:b5:6c:c0:90:24:bf:b7:b5:24:1f:41:
40:31:fa:10:0d:3f:f0:1e:35:5a:ce:7f:03:84:3e:a4:78:f1:
27:b2:89:4a:cd:e7:c8:df:77:be:2e:08:3f:37:fc:d2:cf:53:
b6:9e:a3:11:12:51:12:67:b2:20:0d:07:c2:4e:30:4a:ba:e3:
70:51:07:a6:16:6e:44:4d:65:33:24:c6:17:a0:27:ea:eb:85:
fb:a8:ad:4e:c6:fc:ea:da:a1:48:3f:1d:96:ad:72:bb:a9:f9:
f2:24:5b:24:c2:34:b6:58:8d:36:4d:41:44:13:6e:af:14:cf:
d6:55:90:37:c7:f7:03:82:77:a9:4d:30:b2:99:2d:18:cb:8b:
dd:a4:cf:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3eBbIdN2xt2AIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk
YjhlNGJjMDctNTE3Mi00YWJiLTlkMGMtMzY1Yjg3NzExY2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a1ZnwGrtNifwrlbpxl1cw35fviug06QVnH1
nzMfnfiPNIG+qt1QJeAlOgBrIwOadT4HI9IZM+uoEGVYBJgGfMavlTbLEN4NbBmA
7boBz/l27u/KevjBNBkKshRO6GX3UpYO5zALujh+DG+8d5V6trmb2t/OrZJfVifR
Glds9xuQhCdhzqe5wkNZffpxvftuCwQPVZD6Nikh2ZdGKwBFkEkUniI0Bfvc6U3Q
/fffKJ99BV56/0gEJ80f77plO8AImMASUYwVxfJFe6DKdt07c2ZOMjsaM1GNGRJY
1A+wR3ygcgU49es86bPq1axm0M/19TXyls+5zV+TWc4/yKovTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHvljD+wRVtAcc6wtBeKw1jLIodMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDNjYWE1NDAtZGUyNy0z
MDc0LTk3MGQtMGY3ZjgyNjAxMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmjtcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEz4ak7ujaGNQtxXfLBrfFovW3Rotj2B/MGCpjsUW6zN6vToMrT9FoL3
tWGCBZ/9ftq/1Wavob9akvu54go4j8xv0V4Y9FktHHzOIwjEKOln/6OeU66ar3YN
yNf3RSB3pvlAAWkUj5Psxjoo4urVeFVIdDi1bMCQJL+3tSQfQUAx+hANP/AeNVrO
fwOEPqR48SeyiUrN58jfd74uCD83/NLPU7aeoxESURJnsiANB8JOMEq643BRB6YW
bkRNZTMkxhegJ+rrhfuorU7G/OraoUg/HZatcrup+fIkWyTCNLZYjTZNQUQTbq8U
z9ZVkDfH9wOCd6lNMLKZLRjLi92kz7o=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:00 2026 by rpki-client