
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14a539c3-b5ed-3b8f-8a72-64df89e093d0.roa
File: 14a539c3-b5ed-3b8f-8a72-64df89e093d0.roa (raw, json)
Hash identifier: ALG6emAzznDJuVL0wS4G6ES5D1Dfyin2tWkDw9fU6eE=
Subject key identifier: 3F:65:E9:06:11:32:07:BC:EF:12:60:C4:E2:98:DE:5B:0D:42:84:06
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584FA442AA09440E54F1C220EF00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14a539c3-b5ed-3b8f-8a72-64df89e093d0.roa
Signing time: Tue 27 Oct 2026 13:42:20 +0000
ROA not before: Tue 27 Oct 2026 13:42:20 +0000
ROA not after: Mon 25 Jan 2027 14:42:20 +0000
asID: 274175
IP address blocks: 38.156.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a4:42:aa:09:44:0e:54:f1:c2:20:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 27 13:42:20 2026 GMT
Not After : Jan 25 14:42:20 2027 GMT
Subject: CN=bcecc4d5-879a-40cf-8a6d-1bed3334f472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:f4:8e:e2:4b:2c:a1:aa:71:b2:5e:19:f5:
9d:86:82:f2:27:7f:f9:22:cd:33:d6:7a:c0:a0:ed:
45:8e:5c:31:eb:f4:73:e3:18:9a:bc:84:4c:d8:ca:
58:08:e6:a7:da:d0:eb:8f:a2:72:cf:5b:ed:48:2a:
fd:2f:25:cc:fa:df:aa:6c:eb:f2:fb:9d:0e:f7:fe:
13:09:69:bc:26:4c:95:c3:a2:95:3c:51:a1:7e:82:
df:bc:58:76:ad:70:e6:2f:5a:f7:43:db:fd:81:b7:
03:b0:d6:d1:af:b5:8c:d9:f5:4d:9c:29:a2:3f:bd:
bd:6a:f1:d9:7f:88:65:bf:2f:6b:d8:79:45:f9:c3:
af:07:b0:fb:50:fc:14:14:ea:c4:16:d7:a3:28:91:
74:a5:91:2e:36:27:3c:bc:bc:45:d7:1b:40:22:5e:
05:5e:22:be:84:40:ea:2c:76:84:7c:84:73:0c:a7:
ac:f2:a5:fb:dd:4b:19:b5:00:45:9b:25:99:ad:0d:
77:2b:65:a7:01:e0:6b:00:7e:53:42:af:10:6d:d7:
61:7c:e9:ae:ef:f8:0a:a8:75:27:3d:93:9d:a6:a8:
a9:73:1d:cf:ef:23:96:3c:fa:35:43:cc:49:30:9c:
41:59:cf:5e:04:a0:ab:79:fa:8b:ae:d0:74:ab:7b:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:E9:06:11:32:07:BC:EF:12:60:C4:E2:98:DE:5B:0D:42:84:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14a539c3-b5ed-3b8f-8a72-64df89e093d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.156.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:18:4b:2f:f6:97:80:b0:65:cf:2d:68:f3:43:cd:47:67:62:
cb:bf:96:74:08:29:af:12:fe:2b:55:0f:ef:07:2d:d4:a0:cf:
ed:11:86:18:1b:6e:b5:1b:c9:81:10:6e:58:ad:46:58:4a:23:
48:8f:9c:69:50:7b:aa:e9:85:de:32:0e:8e:0c:96:01:e3:fe:
81:89:47:46:4f:2b:f0:ae:50:ae:bf:81:84:5e:4a:06:ac:cb:
b8:5b:bd:7b:f8:a9:88:15:15:ae:62:9b:1f:59:0f:f2:05:5e:
ee:48:54:09:f0:5e:3f:7e:d6:ac:e2:b3:45:24:16:ff:6b:ec:
99:04:42:92:b7:be:a1:1c:61:85:a7:33:6e:4b:a4:b3:24:38:
b5:b6:b8:d1:19:ad:37:c8:f5:fe:ec:d3:dc:d3:a6:54:e6:c3:
be:f9:e4:4d:17:7c:2b:84:67:ba:90:da:b6:15:6c:38:37:76:
cb:6e:ec:45:34:eb:ad:4d:a3:91:e5:2d:42:1f:e1:f9:d1:82:
cf:7f:af:b1:66:a7:3e:e2:23:40:68:17:bd:0e:fd:7d:8f:6b:
d6:48:a6:7e:91:ac:46:64:53:55:e4:8d:bf:13:6d:03:1c:21:
b8:61:b1:eb:ed:5a:06:f9:d6:35:ee:f4:e4:a5:85:76:35:a9:
b5:36:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:48 2026 by rpki-client