
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/45460f8d-a34d-3375-a7d6-5c65ee42b548.roa
File: 45460f8d-a34d-3375-a7d6-5c65ee42b548.roa (raw, json)
Hash identifier: NHbh8C6j2XuH+mTWZMGz9IgRRIIfB8zC66FurP6D+L8=
Subject key identifier: F0:19:56:D7:F7:70:32:5E:8E:7C:4F:FD:1F:49:2A:6C:8C:81:E5:72
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F17323C525FEF9441E0CF9400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/45460f8d-a34d-3375-a7d6-5c65ee42b548.roa
Signing time: Mon 07 Sep 2026 01:00:11 +0000
ROA not before: Mon 07 Sep 2026 01:00:11 +0000
ROA not after: Sun 06 Dec 2026 02:00:11 +0000
asID: 394085
IP address blocks: 38.117.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:17:32:3c:52:5f:ef:94:41:e0:cf:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 7 01:00:11 2026 GMT
Not After : Dec 6 02:00:11 2026 GMT
Subject: CN=2dbce5e0-7c1e-43d4-bb58-1bf85ae64899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:21:de:3d:3f:1e:f7:a4:da:0f:d7:6e:88:
62:9c:e4:85:31:3b:61:fe:f0:be:2b:4f:73:fb:93:
c3:b7:03:ab:01:f3:14:17:47:67:14:5c:70:01:bd:
10:63:5e:92:ae:59:b9:44:43:ff:3a:4a:f7:ba:c1:
7d:98:03:36:e2:74:fb:e2:91:13:0c:ce:54:7c:ec:
8f:e8:37:ec:8a:df:61:12:2c:9c:34:2e:25:9f:4c:
5a:7e:b3:91:ff:dc:df:b5:8b:cf:27:c6:e7:6f:aa:
06:2c:fc:1d:c6:7e:84:6c:1c:f7:18:24:42:2b:33:
da:4a:11:c7:15:7e:c2:84:82:45:33:a7:fa:af:5b:
36:ca:9b:3b:7c:79:e9:89:5a:cf:cc:c7:f6:aa:91:
02:9f:e5:2c:87:5e:4d:71:24:69:c9:bb:47:9e:3b:
0a:78:4b:6d:e1:cc:43:55:1a:71:ab:c8:36:53:56:
dd:6c:13:04:98:11:78:35:68:2b:4d:c7:77:76:b9:
24:b2:83:6b:b7:30:99:35:bc:7a:7c:46:8b:b3:41:
ac:6d:9c:29:d4:2b:ac:98:3e:1a:71:1d:1a:b8:70:
4e:e0:a4:43:03:24:6b:58:80:56:34:bd:5d:1c:9e:
21:51:4b:67:ec:a6:e1:a4:ae:1c:07:9b:5b:8f:92:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:19:56:D7:F7:70:32:5E:8E:7C:4F:FD:1F:49:2A:6C:8C:81:E5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/45460f8d-a34d-3375-a7d6-5c65ee42b548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.117.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:11:cf:f7:05:1d:38:98:52:4d:79:50:76:75:42:1d:af:28:
f4:48:3f:c8:ce:67:4c:86:0d:9f:e6:fa:f7:f3:0a:ec:09:df:
89:b2:c3:46:58:b6:37:5c:bb:fd:72:62:d8:0e:d7:17:0d:ed:
4d:46:fc:1e:31:63:32:93:6f:39:f5:e9:52:85:5f:23:28:4c:
38:94:ac:77:f2:ad:12:d1:36:8b:92:b5:c1:04:23:47:24:a4:
9f:a2:e0:cc:b6:de:13:4e:86:17:3c:04:e7:81:19:44:56:8f:
34:11:14:6c:c5:07:42:bc:11:fe:f4:36:42:fe:44:86:d2:14:
1f:35:c3:2e:68:57:03:41:e6:ce:d3:9d:60:38:c1:cd:5b:f0:
c7:db:ce:45:40:a6:45:73:f2:b6:9d:6c:25:79:c1:7f:7a:6b:
58:b9:12:ff:50:5b:fe:e9:fc:df:21:d6:b2:e9:35:b1:d6:1f:
31:e7:66:85:f0:b3:34:f7:86:7c:b0:a8:dd:48:0f:b1:61:96:
42:81:72:9a:2b:19:fc:a6:15:b2:c0:42:ec:ed:f1:be:96:de:
67:c5:58:ad:39:a3:51:7e:f3:ed:fa:97:e7:31:ef:e0:35:fa:
86:c7:86:f6:bb:57:6c:2d:05:ec:e7:4e:75:3f:b0:00:ad:3a:
8c:2c:d9:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjxSX++UQeDPlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk
MmRiY2U1ZTAtN2MxZS00M2Q0LWJiNTgtMWJmODVhZTY0ODk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPEh3j0/Hvek2g/XbohinOSFMTth/vC+K09z
+5PDtwOrAfMUF0dnFFxwAb0QY16Srlm5REP/Okr3usF9mAM24nT74pETDM5UfOyP
6Dfsit9hEiycNC4ln0xafrOR/9zftYvPJ8bnb6oGLPwdxn6EbBz3GCRCKzPaShHH
FX7ChIJFM6f6r1s2yps7fHnpiVrPzMf2qpECn+Ush15NcSRpybtHnjsKeEtt4cxD
VRpxq8g2U1bdbBMEmBF4NWgrTcd3drkksoNrtzCZNbx6fEaLs0GsbZwp1CusmD4a
cR0auHBO4KRDAyRrWIBWNL1dHJ4hUUtn7KbhpK4cB5tbj5LVZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAZVtf3cDJejnxP/R9JKmyMgeVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDU0NjBmOGQtYTM0ZC0z
Mzc1LWE3ZDYtNWM2NWVlNDJiNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnVEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQRz/cFHTiYUk15UHZ1Qh2vKPRIP8jOZ0yGDZ/m+vfzCuwJ34myw0ZY
tjdcu/1yYtgO1xcN7U1G/B4xYzKTbzn16VKFXyMoTDiUrHfyrRLRNouStcEEI0ck
pJ+i4My23hNOhhc8BOeBGURWjzQRFGzFB0K8Ef70NkL+RIbSFB81wy5oVwNB5s7T
nWA4wc1b8MfbzkVApkVz8radbCV5wX96a1i5Ev9QW/7p/N8h1rLpNbHWHzHnZoXw
szT3hnywqN1ID7FhlkKBcporGfymFbLAQuzt8b6W3mfFWK05o1F+8+36l+cx7+A1
+obHhva7V2wtBeznTnU/sACtOows2RA=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:11:15 2026 by rpki-client