
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1a5af26c-1ed9-3c95-a247-b5c80e939006.roa
File: 1a5af26c-1ed9-3c95-a247-b5c80e939006.roa (raw, json)
Hash identifier: r+bvEOvyBguaCz7teTipK/qZvg4h2TImO4emwW3yJlI=
Subject key identifier: DC:FC:8E:0F:EA:99:07:CD:6B:61:41:3C:7F:BF:B8:FE:28:40:F4:BC
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EA97331C0D694DAD2E4DA7A60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1a5af26c-1ed9-3c95-a247-b5c80e939006.roa
Signing time: Wed 29 Jul 2026 17:32:14 +0000
ROA not before: Wed 29 Jul 2026 17:32:14 +0000
ROA not after: Tue 27 Oct 2026 17:32:14 +0000
asID: 61614
IP address blocks: 38.236.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a9:73:31:c0:d6:94:da:d2:e4:da:7a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 29 17:32:14 2026 GMT
Not After : Oct 27 17:32:14 2026 GMT
Subject: CN=d3e035ec-f3df-4112-83a3-dfb80c56c554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:c1:60:74:ac:28:4e:a0:2a:b4:3d:d3:74:
08:2b:19:32:a2:0f:fa:09:b9:f0:13:86:4c:84:b5:
28:41:58:25:ea:f6:b2:70:83:da:78:22:84:56:79:
a4:25:70:5c:64:4a:17:4a:2d:8f:f5:ac:11:e3:e4:
8a:66:58:2d:9d:76:67:da:3a:e3:be:b4:a0:bb:24:
e2:18:51:ab:12:fb:ab:e6:74:fc:f6:d7:df:c6:7d:
81:f8:3f:d5:c5:c6:b9:8b:6d:20:c5:c4:e5:a6:b6:
55:af:46:ce:87:0b:56:cc:b9:d0:34:c0:7f:2f:c0:
84:99:80:c6:37:96:6b:e9:84:b9:c7:1f:58:e3:1e:
e3:bf:92:66:4f:cc:10:fb:01:80:2c:ef:53:06:e8:
16:9d:bc:80:f8:ee:6c:ac:7b:7c:77:07:0a:bd:00:
8b:c2:4c:d4:00:ba:ef:25:19:92:56:d4:ce:4b:e9:
6f:c4:95:c7:52:2a:5d:66:02:b4:1f:14:ee:b8:07:
09:c6:05:19:46:3b:53:87:d7:14:77:f5:8a:cd:46:
64:77:43:9b:82:a6:f7:fb:6e:b4:40:77:ea:9d:58:
13:c7:fc:06:01:d2:43:ac:e4:af:f4:e2:33:b2:e6:
aa:e5:17:90:04:82:38:ac:7a:46:00:1b:f9:ec:3d:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:8E:0F:EA:99:07:CD:6B:61:41:3C:7F:BF:B8:FE:28:40:F4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1a5af26c-1ed9-3c95-a247-b5c80e939006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.236.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:db:98:66:7f:24:c2:ac:2c:c8:82:d8:91:91:78:ed:18:84:
62:b8:03:7e:6a:07:c2:cc:e9:79:39:ca:95:b2:e6:26:eb:09:
b5:fe:63:40:74:a3:c0:eb:5f:19:d2:d2:5e:6f:3e:e5:dd:ae:
50:57:bc:b8:75:50:e7:06:89:00:27:3c:ff:02:d3:0f:9f:5a:
1b:e6:92:30:a1:32:67:44:92:d0:fa:35:a8:dd:a2:d5:35:08:
4d:19:b9:a5:2e:01:29:6a:3b:70:6d:6a:bb:3a:f4:a2:55:b2:
ad:91:2e:26:6a:b8:3b:e4:61:33:08:17:8e:bf:3d:86:57:d5:
fa:b0:6c:c3:db:ac:b6:3d:01:4b:0d:0c:ae:20:1a:2e:2f:70:
a2:11:ce:0e:58:43:13:d8:ef:42:71:d1:35:c0:a1:4b:2f:d0:
86:67:11:a7:a8:5b:34:16:be:5f:51:3a:70:56:7a:c6:08:03:
d7:c7:86:02:33:24:a2:21:32:81:02:f4:09:2d:40:59:1d:8f:
a5:ac:ec:27:e3:73:dd:1b:11:35:a9:a7:55:80:1c:e0:da:a5:
34:57:c2:af:52:48:2a:83:5a:fd:5b:b8:7a:27:e0:ce:f0:63:
d9:3f:29:b8:eb:30:17:0b:b7:bb:39:64:2f:b7:42:dd:c7:02:
f7:33:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:54:54 2026 by rpki-client