
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/4afc4940-05c4-3c19-91a0-255a430a9b06.roa
File: 4afc4940-05c4-3c19-91a0-255a430a9b06.roa (raw, json)
Hash identifier: nxpzE1BpHY/WWM+vcF6WA8sD+L0a97wgVCUS3ZCpqBA=
Subject key identifier: 85:5C:4A:06:05:7B:06:BD:C4:EB:B4:DF:99:CF:FB:AD:0C:CF:40:C5
Certificate issuer: /CN=5138ff7a-a438-4510-900e-06d2a889f64d
Certificate serial: 010D0C9F4328584DCDC5DB3A742C5D354EE80EE0
Authority key identifier: CE:5B:8A:C6:88:96:F1:CA:2D:E9:E4:EE:A5:EF:E4:28:8F:CF:8C:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/4afc4940-05c4-3c19-91a0-255a430a9b06.roa
Signing time: Tue 12 May 2026 01:00:24 +0000
ROA not before: Tue 12 May 2026 01:00:24 +0000
ROA not after: Mon 10 Aug 2026 01:00:24 +0000
asID: 397315
IP address blocks: 65.87.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cd:c5:db:3a:74:2c:5d:35:4e:e8:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5138ff7a-a438-4510-900e-06d2a889f64d
Validity
Not Before: May 12 01:00:24 2026 GMT
Not After : Aug 10 01:00:24 2026 GMT
Subject: CN=cbf24361-cd81-465f-ba62-129b1d2f659d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:d0:47:c2:0d:f0:01:97:58:a0:30:d2:11:
5b:9f:9a:ba:06:81:40:4b:fc:64:ed:07:65:a5:fa:
45:86:4e:95:43:e7:a3:cc:b0:e9:03:bf:1f:61:e2:
02:cb:9b:3b:87:7d:8e:5d:d9:7e:41:c4:e1:98:c6:
9a:7e:25:77:33:f6:15:7e:35:83:c3:94:cd:ce:7a:
57:53:dd:1c:c2:a3:b5:00:38:be:55:66:17:4d:d3:
01:3d:99:89:01:e6:57:b2:8d:dd:f3:79:2b:31:57:
4a:eb:55:33:76:a4:06:69:fe:96:d9:ff:8b:7b:12:
3e:8d:d9:c8:81:4c:61:eb:b3:bc:60:c7:08:f0:93:
8e:8c:5b:2d:21:ff:e0:9b:9a:17:08:c1:99:3a:3c:
90:8c:d8:17:bd:e8:ac:17:93:dd:b6:fc:3c:30:8e:
a9:e4:f0:16:9a:5d:44:67:a1:be:0a:aa:de:3d:fe:
43:f5:9d:16:7a:55:20:d6:7b:2a:19:1f:3c:1f:f2:
5b:97:07:f2:c1:da:a8:7f:b3:0c:cc:96:25:33:9f:
4c:73:b8:86:14:1d:a3:83:a5:7b:03:0f:e1:b9:20:
30:93:e8:05:9a:7a:74:e8:e2:7b:be:73:05:98:9c:
26:84:19:84:a6:ad:f2:d3:89:83:22:a9:3c:87:fa:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:4A:06:05:7B:06:BD:C4:EB:B4:DF:99:CF:FB:AD:0C:CF:40:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/4afc4940-05c4-3c19-91a0-255a430a9b06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.crl
X509v3 Authority Key Identifier:
keyid:CE:5B:8A:C6:88:96:F1:CA:2D:E9:E4:EE:A5:EF:E4:28:8F:CF:8C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1f:2c:5d:a3:ee:13:86:c0:6c:bd:a5:ff:85:12:c2:93:da:
c1:46:07:22:55:c2:09:8d:f1:9f:9c:9c:89:f5:e8:9f:ca:68:
0f:fa:78:b7:d0:04:ce:26:69:0f:fb:a2:3b:e4:95:f5:8e:fe:
48:56:d9:b6:a1:79:d4:bf:f6:39:88:16:a5:0d:45:cf:e3:4b:
e6:ea:e0:e5:75:82:a0:3a:45:77:4b:a0:a8:04:ce:97:77:0b:
29:b5:66:18:a5:bd:36:a2:32:aa:81:9e:e8:d1:c7:dc:46:87:
71:8d:3a:cd:ba:54:fd:d2:05:ff:11:da:12:68:75:63:0b:f5:
e9:43:d3:e4:12:e2:ed:8e:8c:c6:b0:59:84:c1:d0:79:a3:53:
26:00:f3:4b:43:96:0d:e4:bd:db:63:08:23:4b:17:2c:e1:14:
a2:00:24:3b:97:0c:1c:c4:02:e2:a0:b9:8f:44:1d:f4:30:ff:
0a:ab:5e:35:3f:0d:21:bd:ac:90:05:ac:7d:a9:6d:e8:4f:89:
5e:e5:20:18:90:97:1c:1f:69:a8:3f:58:33:ce:ca:8d:7e:ff:
fd:22:ba:66:b8:80:aa:97:cf:56:18:79:57:d7:d8:68:bc:b8:
d3:fb:44:5a:e9:2e:2f:35:6f:95:df:15:c2:d5:fd:87:9c:1e:
f8:c9:75:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Nxds6dCxdNU7oDuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTEzOGZmN2EtYTQzOC00NTEwLTkwMGUtMDZkMmE4ODlm
NjRkMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
Y2JmMjQzNjEtY2Q4MS00NjVmLWJhNjItMTI5YjFkMmY2NTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q3QR8IN8AGXWKAw0hFbn5q6BoFAS/xk7Qdl
pfpFhk6VQ+ejzLDpA78fYeICy5s7h32OXdl+QcThmMaafiV3M/YVfjWDw5TNznpX
U90cwqO1ADi+VWYXTdMBPZmJAeZXso3d83krMVdK61UzdqQGaf6W2f+LexI+jdnI
gUxh67O8YMcI8JOOjFstIf/gm5oXCMGZOjyQjNgXveisF5Pdtvw8MI6p5PAWml1E
Z6G+CqrePf5D9Z0WelUg1nsqGR88H/Jblwfywdqof7MMzJYlM59Mc7iGFB2jg6V7
Aw/huSAwk+gFmnp06OJ7vnMFmJwmhBmEpq3y04mDIqk8h/oTzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVcSgYFewa9xOu035nP+60Mz0DFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MTM4
ZmY3YS1hNDM4LTQ1MTAtOTAwZS0wNmQyYTg4OWY2NGQvNGFmYzQ5NDAtMDVjNC0z
YzE5LTkxYTAtMjU1YTQzMGE5YjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTEzOGZmN2EtYTQzOC00NTEwLTkw
MGUtMDZkMmE4ODlmNjRkLzUxMzhmZjdhLWE0MzgtNDUxMC05MDBlLTA2ZDJhODg5
ZjY0ZC5jcmwwHwYDVR0jBBgwFoAUzluKxoiW8cot6eTupe/kKI/PjCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MTM4ZmY3YS1hNDM4LTQ1MTAtOTAwZS0wNmQy
YTg4OWY2NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVfSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYfLF2j7hOGwGy9pf+FEsKT2sFGByJVwgmN8Z+cnIn16J/KaA/6eLfQ
BM4maQ/7ojvklfWO/khW2bahedS/9jmIFqUNRc/jS+bq4OV1gqA6RXdLoKgEzpd3
Cym1ZhilvTaiMqqBnujRx9xGh3GNOs26VP3SBf8R2hJodWML9elD0+QS4u2OjMaw
WYTB0HmjUyYA80tDlg3kvdtjCCNLFyzhFKIAJDuXDBzEAuKguY9EHfQw/wqrXjU/
DSG9rJAFrH2pbehPiV7lIBiQlxwfaag/WDPOyo1+//0iuma4gKqXz1YYeVfX2Gi8
uNP7RFrpLi81b5XfFcLV/YecHvjJdbk=
-----END CERTIFICATE-----
Generated at Wed May 13 06:21:38 2026 by rpki-client