
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/65c907f0-46c1-3a8e-832f-efc39b353c41.roa
File: 65c907f0-46c1-3a8e-832f-efc39b353c41.roa (raw, json)
Hash identifier: QeBr54Yowl7u8RnMkNJHrv9ajEIr53Xajg5U0v66aFU=
Subject key identifier: A6:6B:43:61:81:AD:86:CA:BE:90:D4:44:34:B2:72:A1:2F:43:CC:49
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F4328584C93D19C0608C6CA5DF8DFE8E0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/65c907f0-46c1-3a8e-832f-efc39b353c41.roa
Signing time: Mon 19 Jan 2026 14:00:38 +0000
ROA not before: Mon 19 Jan 2026 14:00:38 +0000
ROA not after: Sun 19 Apr 2026 13:00:38 +0000
asID: 36681
IP address blocks: 24.38.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:93:d1:9c:06:08:c6:ca:5d:f8:df:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Jan 19 14:00:38 2026 GMT
Not After : Apr 19 13:00:38 2026 GMT
Subject: CN=3d122cc0-238e-4d5b-8269-6e08032be80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:ae:dc:a3:76:05:b5:8e:a0:67:90:24:d4:
23:d6:6e:82:7f:78:60:1e:ae:66:c4:9a:b7:75:43:
9c:ae:cf:dc:82:f5:d6:ea:00:66:99:dc:d0:95:b2:
28:23:ae:d7:48:38:00:1e:8e:e5:3e:39:97:73:cf:
3d:b4:06:e1:d5:61:21:87:0e:28:12:57:42:da:e2:
ea:8f:8c:85:9c:56:fe:8e:f0:b3:7c:e6:82:b3:1b:
a2:15:59:08:ef:67:ce:28:d4:50:ce:91:b6:66:f9:
0f:20:7a:9d:17:ea:b1:13:65:e8:38:a6:aa:4f:70:
b5:e8:91:27:b2:63:9b:43:e5:71:37:c2:4a:6a:6b:
cf:b0:87:db:5c:a4:e1:f8:75:eb:1c:0c:b5:58:35:
0a:c5:c9:cf:9a:55:67:f6:68:ed:86:21:49:9d:14:
04:c1:80:3e:1b:ab:aa:59:15:0f:5b:41:de:51:db:
66:b9:a3:22:74:6f:14:47:fe:8c:3b:34:54:e8:c4:
cf:b9:4d:20:4a:f7:e9:46:f9:ce:24:37:75:e5:4f:
cb:85:99:86:2c:d8:46:7e:22:87:78:37:68:f2:d8:
ad:b3:c8:77:a1:85:96:f9:51:c8:6b:0f:12:79:9b:
95:de:62:ad:46:8d:92:12:af:f0:4a:68:30:e2:73:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:43:61:81:AD:86:CA:BE:90:D4:44:34:B2:72:A1:2F:43:CC:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/65c907f0-46c1-3a8e-832f-efc39b353c41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:46:89:0f:4e:8f:9d:0c:26:d7:99:72:da:8b:5d:2f:4a:e0:
9e:18:74:c2:23:40:62:f3:93:35:3e:b9:52:97:56:f3:c0:4b:
9c:c0:d7:a2:d7:1e:b7:b3:c9:89:c5:b3:5a:e4:16:50:de:54:
11:c3:0c:62:9c:6f:8f:3f:a4:b7:4d:2c:2f:01:a0:d9:a5:77:
21:26:43:31:2d:12:52:c9:37:b0:4b:85:27:3e:06:ea:fc:15:
af:5c:02:f1:e7:92:80:f4:1e:e5:b0:9e:4b:12:2e:03:2d:ea:
dc:58:e3:3f:2b:ad:78:ad:10:59:8c:34:c7:e2:6a:96:a5:6f:
8d:fd:86:46:cf:26:29:4e:4b:6d:57:a0:39:0c:5c:11:9c:12:
0b:73:64:bc:5c:60:04:4f:8a:ed:3e:18:d1:a2:55:e7:93:62:
f8:81:5b:53:a1:a0:d5:8e:b8:e4:91:ee:a1:7d:b2:9d:eb:b5:
33:7f:21:fa:0d:59:ac:9a:85:bd:a3:93:07:c0:11:b9:98:53:
ce:f8:09:ae:11:97:cb:30:e1:7d:ff:22:f9:89:0a:55:b0:7d:
b9:bb:56:7a:bd:d9:f9:9c:9a:ff:b8:08:28:2a:f4:d8:2a:d2:
9d:cc:8f:ac:e5:73:5b:29:e7:7a:63:7a:40:a6:01:b3:a8:97:
6f:b5:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:02:42 2026 by rpki-client