
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7bdab681-7ac6-373d-99e7-0b2f8747abe5.roa
File: 7bdab681-7ac6-373d-99e7-0b2f8747abe5.roa (raw, json)
Hash identifier: B9Kzg0+f50p36GYl7qw/TLO+OujKwC/yUP9su6wRqS4=
Subject key identifier: E6:49:19:0E:A3:D5:3B:8E:86:4F:05:57:9A:BA:D3:60:53:3E:19:E0
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E44E5C5D92AB15B80F7282B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7bdab681-7ac6-373d-99e7-0b2f8747abe5.roa
Signing time: Tue 23 Jun 2026 17:06:27 +0000
ROA not before: Tue 23 Jun 2026 17:06:27 +0000
ROA not after: Sat 22 Aug 2026 01:00:27 +0000
asID: 151612
IP address blocks: 38.236.183.0/24 maxlen: 24
206.0.89.0/24 maxlen: 24
206.0.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:44:e5:c5:d9:2a:b1:5b:80:f7:28:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jun 23 17:06:27 2026 GMT
Not After : Aug 22 01:00:27 2026 GMT
Subject: CN=6dbce7f0-8b86-40cc-9745-2847427c3883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:32:28:2d:0e:21:f9:16:65:2b:be:6d:d2:42:
52:91:a4:6a:d3:7f:ab:f3:68:1f:ff:5c:aa:30:f1:
a9:4f:5e:ef:58:d5:d1:97:99:54:96:9d:e5:8a:aa:
06:69:7f:a1:ba:8c:ed:7d:80:78:83:dd:e5:3b:31:
5c:c0:17:c5:a0:f6:81:8b:3a:a0:e6:ee:69:fb:36:
8e:7c:e9:3c:5f:da:26:dd:51:92:c3:05:94:6f:f0:
36:fd:14:35:c8:bb:a2:b0:62:a2:49:fd:9c:b5:c8:
bb:97:ba:90:6e:46:39:9f:d3:2f:ae:dd:52:85:ec:
1e:4d:dc:0c:45:f1:29:72:60:55:29:bf:97:31:9f:
df:c1:3e:dc:06:a0:be:4c:db:d9:f3:96:87:ed:55:
8e:00:a7:ac:9c:be:d0:a0:61:3a:98:eb:2d:50:98:
2c:bf:a9:cd:fb:4c:c7:6e:4c:98:74:97:2e:52:01:
92:f0:46:c0:e3:54:20:72:75:01:04:d1:5f:82:d2:
6c:7a:37:2a:64:b9:b9:5a:82:41:4c:50:62:9a:f6:
b8:9e:87:7d:5c:b8:36:80:8d:68:a8:8d:b0:93:7c:
d7:eb:33:cb:ad:67:b4:9f:17:f6:31:9b:26:84:75:
7d:1b:72:03:48:87:df:c3:79:df:ec:f7:ed:45:58:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:49:19:0E:A3:D5:3B:8E:86:4F:05:57:9A:BA:D3:60:53:3E:19:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7bdab681-7ac6-373d-99e7-0b2f8747abe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.236.183.0/24
206.0.89.0/24
206.0.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:c4:74:2f:3c:80:b0:6d:d0:c8:4d:ca:43:38:1d:b8:c5:7f:
d5:ad:79:ae:83:32:69:09:0a:45:4c:f2:7a:75:09:bd:4a:c4:
41:62:39:2e:9c:cf:88:42:2a:22:22:b8:c7:56:58:5a:17:d6:
6d:27:09:0d:35:92:d9:a0:a4:8a:08:56:28:20:76:05:bf:88:
92:c3:2e:b0:c1:d9:9b:ff:00:c9:33:f2:20:e3:9a:50:f4:aa:
fd:67:23:bd:8f:02:96:5b:66:22:31:63:11:2f:c4:01:19:f2:
05:ba:2d:d2:3e:e4:03:f5:a4:e9:6c:ba:e0:df:10:c5:67:22:
04:d4:64:62:8e:33:c1:f6:2a:52:5d:bc:8d:6e:5a:44:a9:5d:
41:50:b6:cc:48:9f:65:cf:45:83:2a:fa:9f:b5:c2:c4:b2:a2:
55:6c:05:93:93:60:92:9b:73:19:80:63:01:16:fc:37:09:7d:
f2:06:99:fb:99:37:b3:6b:b1:08:9f:17:97:05:09:4e:e2:d3:
9d:1b:53:49:6d:6f:5d:3f:b8:94:51:92:4e:c2:81:6c:1d:79:
e7:bb:d8:5f:07:27:70:15:b1:4f:c3:a2:0a:8b:28:ca:34:b4:
8c:37:9e:51:8c:4a:93:63:af:3d:87:27:13:0d:82:a7:f3:83:
de:cd:e2:25
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5E5cXZKrFbgPcoKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYyMzE3MDYyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk
NmRiY2U3ZjAtOGI4Ni00MGNjLTk3NDUtMjg0NzQyN2MzODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDIoLQ4h+RZlK75t0kJSkaRq03+r82gf/1yq
MPGpT17vWNXRl5lUlp3liqoGaX+huoztfYB4g93lOzFcwBfFoPaBizqg5u5p+zaO
fOk8X9om3VGSwwWUb/A2/RQ1yLuisGKiSf2ctci7l7qQbkY5n9Mvrt1SheweTdwM
RfEpcmBVKb+XMZ/fwT7cBqC+TNvZ85aH7VWOAKesnL7QoGE6mOstUJgsv6nN+0zH
bkyYdJcuUgGS8EbA41QgcnUBBNFfgtJsejcqZLm5WoJBTFBimva4nod9XLg2gI1o
qI2wk3zX6zPLrWe0nxf2MZsmhHV9G3IDSIffw3nf7PftRVgx/wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFOZJGQ6j1TuOhk8FV5q602BTPhngMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2JkYWI2ODEtN2FjNi0z
NzNkLTk5ZTctMGIyZjg3NDdhYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJuy3AwQA
zgBZAwQAzgCLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACXEdC88gLBt0MhNykM4HbjFf9Wtea6DMmkJCkVM
8np1Cb1KxEFiOS6cz4hCKiIiuMdWWFoX1m0nCQ01ktmgpIoIViggdgW/iJLDLrDB
2Zv/AMkz8iDjmlD0qv1nI72PApZbZiIxYxEvxAEZ8gW6LdI+5AP1pOlsuuDfEMVn
IgTUZGKOM8H2KlJdvI1uWkSpXUFQtsxIn2XPRYMq+p+1wsSyolVsBZOTYJKbcxmA
YwEW/DcJffIGmfuZN7NrsQifF5cFCU7i050bU0ltb10/uJRRkk7CgWwdeee72F8H
J3AVsU/DogqLKMo0tIw3nlGMSpNjrz2HJxMNgqfzg97N4iU=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:50:01 2026 by rpki-client