
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/711e95fe-36e2-3b84-8231-e086c1aef1bc.roa
File: 711e95fe-36e2-3b84-8231-e086c1aef1bc.roa (raw, json)
Hash identifier: IDlplnx752nb/rKlyg8gZod9qTUipn0eD0mG5sJqnCU=
Subject key identifier: 2F:CA:39:A9:28:D1:4F:F8:7F:D1:22:D1:6C:F8:C5:A0:44:A8:E3:0D
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584D5E1A63B8BE0F2166BC873380
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/711e95fe-36e2-3b84-8231-e086c1aef1bc.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 16696
IP address blocks: 161.38.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 04 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:63:b8:be:0f:21:66:bc:87:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=9c3e43b6-3642-4956-9b06-b95c531ad1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:44:7b:35:c1:f1:27:2f:ef:df:27:bf:94:
9f:ae:9c:d2:87:68:5f:6b:62:0d:cf:9a:7e:28:de:
71:ab:cf:10:bd:43:39:5f:9e:95:cb:e0:4c:96:05:
0b:65:6a:12:9d:48:81:00:98:d0:13:b1:f2:35:03:
fe:69:bf:5f:34:4f:fd:15:47:4a:0c:0e:44:4d:dc:
9e:b8:1a:dd:6d:7c:a9:2f:1d:8b:d1:76:32:b1:27:
db:98:91:08:f8:38:45:60:43:94:74:ec:43:bd:99:
ba:62:75:46:3b:3d:e2:37:df:06:08:6e:58:cb:e1:
34:c8:0e:65:3d:89:01:ef:12:b7:21:67:a1:b1:24:
c4:e2:f4:3a:f4:b0:11:4f:d4:c7:0e:54:3e:c8:1e:
a0:93:e7:ee:28:32:93:f6:3f:f8:6e:24:4a:5f:34:
73:f3:65:18:9f:7b:1d:f5:9e:7e:b9:1a:ac:5b:16:
f2:12:d4:c2:b7:f9:8d:db:e0:0c:96:23:39:91:5e:
d3:0c:23:a3:29:9c:db:b5:45:5c:d7:c5:ea:7a:0d:
53:4c:6f:73:69:c0:6e:25:07:54:21:dd:ae:63:f3:
62:c7:c5:3e:77:17:c9:54:3d:c5:e4:38:96:43:83:
ef:ba:23:e3:85:5a:d9:bd:40:31:e0:46:d6:c9:aa:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:39:A9:28:D1:4F:F8:7F:D1:22:D1:6C:F8:C5:A0:44:A8:E3:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/711e95fe-36e2-3b84-8231-e086c1aef1bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:a7:5d:d1:c9:62:f0:76:72:69:1a:76:9f:fe:4c:37:9f:28:
b6:32:07:c7:5c:d5:92:e2:c3:e6:05:f7:6a:0a:e0:20:2c:c0:
53:dd:b5:5c:f5:68:66:88:96:c3:9a:1f:22:7a:a5:89:eb:3e:
2a:e9:01:21:66:86:b3:84:f7:bc:72:04:0d:60:4c:7f:7d:d1:
a6:a0:3b:5a:3e:d2:52:93:71:9d:8b:8c:c3:f6:af:b9:37:b3:
3c:9a:e6:c1:e5:8d:7d:95:cf:76:89:2b:0a:ba:70:31:9a:f6:
80:9d:f1:80:2a:30:86:d4:31:4f:65:c1:1e:0b:64:b5:ed:7c:
57:d7:ce:b2:b5:47:3f:af:f8:cc:11:99:55:4c:46:9a:93:ed:
a3:d1:30:5b:b8:e1:58:15:ff:f9:f7:1a:ab:6c:36:bc:b6:e8:
2b:51:12:fc:0b:a7:e2:8b:d5:78:de:c6:70:59:b1:52:0b:2d:
02:d5:3c:22:44:23:d7:25:aa:7c:e9:a5:6b:d4:52:23:ca:47:
75:e7:68:53:b3:52:e3:04:d8:d9:95:db:a3:a1:11:33:8d:21:
2e:8b:cf:a4:9f:ee:e2:19:93:3e:44:d0:34:65:d6:b8:fd:46:
d0:56:6f:62:88:46:b8:94:8e:bb:15:34:06:f2:21:9f:34:75:
c6:d3:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:34:53 2026 by rpki-client