
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/285f9830-2b26-3835-a86a-c35c7b775910.roa
File: 285f9830-2b26-3835-a86a-c35c7b775910.roa (raw, json)
Hash identifier: 2QBbf5oLlrmh3vWfyUIsWGvqaldxJzWbkzXZ6B4qzKA=
Subject key identifier: 90:E3:F3:58:5F:7A:F6:FA:97:34:9A:FF:34:5D:50:6C:9C:75:4E:76
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EA7914FDF703AB3C16319D080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/285f9830-2b26-3835-a86a-c35c7b775910.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 273995
IP address blocks: 38.45.92.0/23 maxlen: 24
38.133.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:4f:df:70:3a:b3:c1:63:19:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=39da282f-f2bc-4d2c-9c2a-d1af11171030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:ba:52:c1:27:83:2c:52:72:9e:3d:77:db:
14:a1:f5:c1:af:06:56:40:02:4d:a6:02:aa:01:b8:
14:62:8a:bd:c0:df:dd:dc:b8:65:d2:a0:45:58:64:
f5:5a:ef:69:f9:a5:99:e5:ee:d7:b5:6c:c3:6f:0c:
ec:bf:7f:02:db:ea:1d:8c:54:a1:4c:3e:9b:d4:24:
ff:cb:8b:b4:23:79:c1:e2:01:55:49:85:c8:12:98:
ce:18:82:7d:97:34:5a:ce:e7:c8:cd:e0:4a:fd:a6:
56:c8:d9:84:ae:15:ae:d3:d4:4f:bd:d3:88:4f:a3:
95:42:1e:e5:e4:31:48:ae:22:5a:7d:46:da:d6:23:
aa:30:02:23:28:00:45:12:5d:48:9f:6b:ab:8d:3c:
c9:98:cb:15:8d:1f:20:f1:8a:97:38:18:79:0e:f2:
a0:d5:7b:66:90:49:8a:13:f8:8d:a4:c5:93:c1:50:
11:35:e7:d5:52:7d:08:63:08:f6:a1:df:52:d9:a0:
28:cd:70:9f:0d:a5:0b:c7:b4:90:ae:33:3a:c1:c9:
46:c4:da:7e:d4:23:ab:7f:80:8a:fa:ec:48:8c:92:
34:e5:ad:6f:de:e4:16:58:14:47:eb:cb:33:09:de:
a9:ea:96:ec:87:83:58:ef:22:f3:8f:5a:91:94:81:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:F3:58:5F:7A:F6:FA:97:34:9A:FF:34:5D:50:6C:9C:75:4E:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/285f9830-2b26-3835-a86a-c35c7b775910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.45.92.0/23
38.133.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:82:3d:15:81:fc:36:ac:61:f9:37:00:89:fc:7e:43:5c:ea:
b1:8e:6a:25:7d:d9:3c:77:fc:51:2f:01:de:da:9f:61:46:66:
2d:23:b1:42:67:a3:8f:3c:b3:52:88:ed:cb:19:ee:14:fc:12:
5f:34:f1:c1:1d:1a:e5:58:6a:74:20:ff:4b:58:ea:bf:3d:dd:
9d:55:7a:41:66:2f:82:35:b8:e4:18:7a:03:72:df:4f:ca:b7:
2b:56:a4:eb:ca:1a:f4:c7:64:f5:71:50:ae:9d:b9:40:f2:ed:
4d:75:34:dc:f9:ad:3d:94:76:65:8f:c1:c1:e0:d9:8e:21:b4:
90:c1:02:46:ef:85:27:35:8a:d6:82:a9:0b:eb:c7:d1:e7:bf:
a9:3e:a8:b2:3e:55:5f:49:5e:c9:8a:55:b1:68:6e:ba:a8:a1:
52:94:40:f8:09:f1:bb:fa:27:b1:29:68:76:db:df:b1:3c:05:
e6:c1:5a:b6:2f:04:7d:4e:c9:89:f9:59:9a:bb:33:fc:7a:36:
f6:b0:df:7f:37:68:94:25:d6:c0:f2:62:b2:42:af:d0:8d:f5:
b1:20:14:95:4f:0a:dd:e4:43:6b:8e:7b:4c:91:82:39:31:03:
e1:12:75:26:1c:7f:d6:ad:2b:89:55:a4:58:89:b3:40:6b:fb:
d5:8f:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:34:19 2026 by rpki-client