
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/586ce304-85d7-31b4-8f9e-b2d55e1fdd29.roa
File: 586ce304-85d7-31b4-8f9e-b2d55e1fdd29.roa (raw, json)
Hash identifier: zhCFZvIWzh+D3Y5TqrslUz5DOzwcpX2np1+NrlreNK8=
Subject key identifier: 9C:0D:80:5B:CB:8B:BB:33:5C:5A:82:0B:8A:C0:FB:C7:F5:D6:2F:EC
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F6292B0A21227DA6B16698900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/586ce304-85d7-31b4-8f9e-b2d55e1fdd29.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 138655
IP address blocks: 38.249.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:b0:a2:12:27:da:6b:16:69:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=88cdb7d0-69a2-4843-b0b5-8a02d9dd90fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:f3:f5:6c:65:99:d3:69:2f:91:46:fb:d2:
eb:40:9d:37:78:eb:0f:df:52:c6:87:6d:31:2f:69:
fa:c7:e5:a9:f6:ba:56:5b:ab:8c:63:20:c9:37:b5:
f2:f6:5c:42:1d:b5:31:26:92:f8:ff:27:88:9f:db:
8e:42:27:aa:b3:3f:c4:4f:9e:86:79:56:e4:1f:cf:
26:ba:62:4c:6f:5a:09:aa:2e:ab:98:68:2d:e2:fc:
ac:a1:3b:ee:12:65:1c:61:b2:89:5e:7b:93:e0:f3:
10:9e:9e:29:46:73:a6:5f:f0:11:04:f6:58:79:87:
7d:29:87:1c:54:5b:bf:57:76:fe:d8:9f:0b:13:2d:
00:45:1c:72:e0:a9:fa:b3:c1:2a:b9:91:90:e4:99:
aa:a0:95:87:87:c6:26:ee:2a:c2:49:e2:c0:a7:de:
17:1c:4d:43:e0:6e:16:1d:57:ae:42:1c:e9:09:c6:
6a:ec:b7:c8:de:b1:68:0f:53:72:e1:26:76:37:ba:
53:43:68:01:60:dd:bb:df:f4:33:30:1e:2c:a5:68:
31:b4:f1:3c:3a:1a:5d:ac:f2:10:df:88:ce:00:22:
73:b0:c9:b2:0d:24:0a:d8:8b:62:e6:73:b0:00:10:
a2:67:14:e0:3e:e4:15:9c:d9:28:73:a0:7e:ac:0d:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0D:80:5B:CB:8B:BB:33:5C:5A:82:0B:8A:C0:FB:C7:F5:D6:2F:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/586ce304-85d7-31b4-8f9e-b2d55e1fdd29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.249.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4a:85:57:69:b7:c1:7d:19:81:54:56:04:ef:1a:ad:30:de:
b7:bf:a4:22:6f:ed:9b:00:1b:51:af:40:a3:ed:8c:01:06:61:
1c:e3:2f:a6:72:f9:bd:10:f4:be:2f:f9:a5:a2:37:36:93:c9:
e7:9c:d6:df:01:59:63:2c:04:07:98:cb:b2:73:5d:c4:ea:40:
b5:8e:b7:78:ed:75:57:da:c8:85:57:02:2e:ec:bc:ff:cf:52:
23:2e:a1:19:cd:40:1b:fe:74:a0:dc:87:c3:80:6c:5c:32:d1:
cd:f9:69:e0:9b:af:ff:2e:83:f3:07:c3:e7:8b:9e:57:24:17:
51:9b:f2:57:5d:5f:c7:26:55:85:fb:9b:25:1e:e7:ec:4f:10:
2e:eb:3d:f2:2e:fe:c1:af:4c:72:fc:4c:a3:43:57:f3:96:64:
86:de:75:a5:e7:dc:36:3d:47:fd:ab:bb:93:4e:08:58:3d:e8:
81:23:f5:23:00:3d:34:ac:52:07:1a:73:0a:d1:6c:8a:73:e4:
79:cd:17:6f:62:e8:d1:03:f8:39:0a:fe:95:d7:fd:08:31:5f:
03:f5:6f:dd:89:cf:0a:4d:b7:5c:bd:3a:0e:4b:0c:1c:72:be:
cc:20:e5:a8:9a:f6:f9:eb:b7:ae:2c:dc:72:75:c5:16:60:26:
30:16:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:32 2026 by rpki-client