
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28175c47-2b15-3ee9-bd40-2f9f6bc2a98e.roa
File: 28175c47-2b15-3ee9-bd40-2f9f6bc2a98e.roa (raw, json)
Hash identifier: PpSGH0sKDK5AE1ZYa8Gzi7pQ/2t8Qd1twzmHF0LKJyw=
Subject key identifier: 13:6B:72:DD:68:16:70:88:93:B7:E6:9C:27:14:B4:52:F5:DA:C3:8E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F17324DFC0DEEE8FC7DA54B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28175c47-2b15-3ee9-bd40-2f9f6bc2a98e.roa
Signing time: Mon 07 Sep 2026 01:00:11 +0000
ROA not before: Mon 07 Sep 2026 01:00:11 +0000
ROA not after: Sun 06 Dec 2026 02:00:11 +0000
asID: 270214
IP address blocks: 38.10.139.0/24 maxlen: 24
38.159.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:17:32:4d:fc:0d:ee:e8:fc:7d:a5:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 7 01:00:11 2026 GMT
Not After : Dec 6 02:00:11 2026 GMT
Subject: CN=2494f627-ef02-4870-90ea-2c443de5f3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:d0:a4:75:32:fd:e7:0e:d4:9c:91:6b:06:
6f:bc:21:8e:4a:66:c1:37:d3:6f:be:42:2b:32:ca:
4c:64:ee:15:d5:47:55:ca:31:8d:84:4e:92:db:9d:
c6:2f:21:44:47:ec:2b:a6:0a:b4:0d:1f:65:58:12:
6e:ff:ae:35:da:dc:f6:fb:51:47:54:66:24:56:89:
a9:46:09:53:98:3a:f7:db:89:d0:13:3b:2f:f0:f6:
9e:34:cd:33:36:61:9b:bb:28:52:d2:71:64:af:21:
9b:ea:95:4b:80:39:b7:8b:08:9b:31:b1:97:0a:55:
f2:4a:bf:86:a0:82:bf:bd:ae:03:1f:8a:70:24:13:
d1:c5:e6:6e:c7:1e:d5:17:a3:93:17:f0:49:cd:1d:
a6:8a:d7:4f:fc:52:04:2b:39:53:9e:98:a1:e5:0d:
c8:2c:3e:21:b9:84:34:bb:b7:bb:0f:20:36:0f:42:
11:c0:59:ed:ad:32:4e:2b:05:df:85:4c:4e:7c:de:
9c:ae:9e:07:b4:19:4f:c8:f8:dd:44:1f:ed:95:12:
8b:bb:57:48:ba:9a:7d:d8:56:8b:f5:5c:74:59:eb:
f0:8b:b7:69:51:57:b4:b1:40:f7:50:33:66:38:2b:
11:50:cf:14:82:5b:ef:59:93:ec:43:0c:c8:f8:50:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6B:72:DD:68:16:70:88:93:B7:E6:9C:27:14:B4:52:F5:DA:C3:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28175c47-2b15-3ee9-bd40-2f9f6bc2a98e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.10.139.0/24
38.159.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:88:99:b6:85:e6:db:3c:3f:21:bc:dd:c8:62:78:6c:40:f0:
9e:5a:0e:52:ee:62:82:c9:48:73:b5:6d:80:76:55:3c:75:15:
42:b2:ce:e4:ce:9d:ee:06:ae:d6:56:0f:be:81:f0:a9:11:7f:
00:7a:bb:11:ef:0f:dc:d6:3d:73:8f:7f:a1:7c:04:dc:46:b3:
20:d6:a6:68:1c:e2:5c:bb:c5:62:86:6a:41:96:26:d9:6c:fb:
5c:12:23:23:de:af:35:29:16:96:03:b4:1e:6f:bb:ea:d6:4a:
17:9f:3e:5b:17:93:db:93:34:2c:de:9f:de:2b:e5:38:11:c4:
d6:de:f8:f8:50:bf:8f:17:55:8a:1a:2c:80:38:7d:59:46:40:
ef:ad:2e:89:33:53:90:46:59:39:41:49:3c:7b:cc:58:42:4a:
b6:18:ed:b3:d5:c7:3e:fb:a1:ef:97:3c:47:8c:cc:ae:44:9e:
d7:f3:82:f8:a6:79:04:e2:68:e5:3a:8e:2b:28:c3:c6:9d:e4:
9f:0f:cd:3f:5c:56:3c:d8:61:57:bb:67:b9:33:aa:ac:18:8f:
81:34:dd:f2:96:60:1f:6e:7f:dd:bf:e9:1a:56:5d:86:da:05:
58:28:3d:67:49:4a:02:47:e4:f2:7c:82:ab:cc:3a:b9:47:6a:
0e:32:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:37 2026 by rpki-client