
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36fc62bb-334d-3cad-9b29-b54520e5d674.roa
File: 36fc62bb-334d-3cad-9b29-b54520e5d674.roa (raw, json)
Hash identifier: nmiIDpR2/C2OBcaPlJauO06K2lMGso4aLQZ5JKsDR9k=
Subject key identifier: 8C:43:D0:AC:E8:84:8E:EA:A1:E2:8D:3D:38:D7:43:8E:D9:AD:22:76
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F549D5E04B3868AEDA2D2ABF0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36fc62bb-334d-3cad-9b29-b54520e5d674.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 210661
IP address blocks: 38.65.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:5e:04:b3:86:8a:ed:a2:d2:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=45afc5d5-1ffb-4c5f-8cbf-9d2e5fdf667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:09:7d:69:c6:63:95:e2:7b:4e:67:af:11:
c0:a4:ac:81:0b:e9:28:a3:f1:1f:8e:db:29:ad:77:
84:37:34:2f:14:22:1a:19:13:13:c4:24:63:ca:84:
29:d2:42:21:7c:c6:8d:9e:6c:49:24:c9:1b:8d:43:
f0:14:5b:a9:0d:dc:2f:da:9a:c9:a7:df:d2:0e:70:
e0:fa:2a:bd:51:6b:15:cd:ea:3e:25:45:de:5d:0e:
3c:91:23:68:c0:8f:e7:76:72:66:f8:bd:82:89:44:
d5:7e:94:4f:d3:ee:fc:a4:7a:19:19:7f:39:a5:f9:
4d:e6:2e:77:56:fa:77:64:90:db:13:75:02:13:4f:
01:7d:d6:ca:f6:c5:88:bb:f9:b5:bd:44:4c:4b:50:
a1:3c:98:9b:92:b4:a9:05:1e:f0:cd:ed:60:98:bb:
14:64:b6:52:15:15:46:22:2f:1c:81:be:c6:83:c4:
3c:6d:b2:b2:96:bb:ee:02:40:7b:84:cd:d3:ff:81:
09:d9:cb:16:2e:2b:70:47:36:5e:e2:01:be:04:2c:
ae:2e:1e:8e:18:12:0c:ab:7c:8d:19:4c:05:93:01:
5c:7a:24:aa:8e:eb:8f:26:c8:74:fd:81:d3:23:6c:
d5:14:0e:83:bf:13:71:2c:d5:80:7d:e2:81:da:39:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:D0:AC:E8:84:8E:EA:A1:E2:8D:3D:38:D7:43:8E:D9:AD:22:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36fc62bb-334d-3cad-9b29-b54520e5d674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.65.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:c5:1b:d6:e0:f9:f4:cb:4b:88:f5:66:f5:78:cb:04:57:92:
ae:6f:c7:8a:f2:7d:36:1b:86:6e:3c:f7:f0:b4:e3:18:88:fc:
4f:82:90:59:88:5c:20:a3:f9:27:0e:4f:00:35:77:b6:57:71:
e8:8a:4c:53:a6:55:6a:6f:52:c6:d6:dc:4d:60:16:1b:26:e6:
25:71:df:37:bc:4c:ff:9a:bc:f2:e8:cd:26:cc:64:27:35:56:
1c:72:3e:17:a5:e0:bd:35:ad:2b:be:86:13:1a:55:f4:28:6c:
be:ca:78:00:02:f2:6d:bc:78:d7:1e:d7:b6:50:e7:c6:e5:6b:
58:9d:ba:03:f2:42:32:aa:cd:dc:39:d6:07:40:8e:57:9a:86:
d3:2e:b2:0a:13:c8:89:11:7d:55:e0:e5:af:85:be:48:26:61:
db:60:12:42:26:0c:d4:d8:66:6e:58:a0:39:a2:31:0d:62:1f:
c3:b2:cb:66:47:ee:5c:b3:b3:74:67:56:58:75:be:12:99:db:
bc:3b:6b:92:c2:d6:ef:6a:f9:f9:30:6a:ab:b3:57:b3:d0:75:
af:aa:98:8b:17:4c:2a:dc:db:3e:3e:9e:c5:70:06:e7:ea:a4:
66:37:27:0b:19:96:9b:b5:98:80:f0:04:99:e5:33:db:09:76:
80:d5:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:08:06 2026 by rpki-client