
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aff5d35-497e-3063-8506-399e6fc05262.roa
File: 5aff5d35-497e-3063-8506-399e6fc05262.roa (raw, json)
Hash identifier: 8ngIKW6ceDCYAR6RYa8UA4eitcGxI9yOeWsQhuxTbM4=
Subject key identifier: 8E:FE:53:FB:C1:8E:DF:37:A1:6A:74:63:4A:A1:B3:4F:D3:71:3B:E7
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EB71B2CDD68F242201E293600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aff5d35-497e-3063-8506-399e6fc05262.roa
Signing time: Mon 03 Aug 2026 14:56:12 +0000
ROA not before: Mon 03 Aug 2026 14:56:12 +0000
ROA not after: Sun 01 Nov 2026 15:56:12 +0000
asID: 0
IP address blocks: 38.244.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b7:1b:2c:dd:68:f2:42:20:1e:29:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 3 14:56:12 2026 GMT
Not After : Nov 1 15:56:12 2026 GMT
Subject: CN=067b6bd0-3de9-4f94-9346-98157447aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:37:34:b4:6c:f0:9f:aa:e7:ec:8f:81:ba:
7f:7e:e3:d9:07:f2:1b:aa:fd:dc:d1:8e:53:e6:9c:
2c:b1:16:41:49:1d:42:91:b9:0a:d5:83:7a:57:b1:
84:ea:df:93:b3:69:50:2c:79:94:a0:23:60:a4:39:
25:0d:8b:91:0b:d1:ad:b8:f8:d1:3a:fd:b2:36:52:
f0:bb:ca:cd:09:e7:c8:b4:28:98:e8:c5:97:38:7c:
a0:24:74:74:98:99:db:d7:3f:69:1e:e5:77:20:a3:
03:eb:99:e3:4a:2e:8f:65:fa:17:79:cd:b6:ec:df:
3f:22:1d:8a:95:f9:91:3a:cf:0d:84:1d:5a:1c:56:
5d:64:c9:97:66:cd:4a:d0:c2:36:0e:08:41:88:b1:
cc:cc:f9:4f:7f:0d:27:68:b6:3a:6f:6f:b6:c7:0a:
fa:cf:9d:68:55:69:37:c9:05:b6:4f:8c:f5:ac:4e:
e9:5c:8b:93:02:1f:30:d2:48:ec:00:9e:43:9b:bc:
48:01:ee:11:fe:43:10:48:c4:50:ee:a5:92:1b:b3:
0e:63:f0:34:16:57:f2:05:cb:5b:a7:27:81:e0:73:
83:08:cb:92:c1:d5:cf:e5:38:ac:75:66:e5:f5:e3:
79:41:b6:ff:ff:b3:b9:b8:ab:93:bd:31:9c:51:50:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:53:FB:C1:8E:DF:37:A1:6A:74:63:4A:A1:B3:4F:D3:71:3B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aff5d35-497e-3063-8506-399e6fc05262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.244.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:58:8f:24:0c:35:eb:c6:c4:0e:6d:05:40:04:e5:79:7d:f4:
c7:52:b2:4e:a2:02:d9:5a:40:e3:16:c6:10:50:b4:96:d6:70:
7b:6b:2a:42:ff:6f:03:3f:22:d8:51:7e:27:8c:97:fd:c3:4f:
82:db:12:d1:d2:15:89:5a:8b:e9:09:db:75:ba:50:87:64:23:
96:63:bd:52:bc:c5:73:b4:70:ed:1f:46:8e:f0:2d:ea:6a:2a:
77:53:5f:d4:98:f9:4a:1e:4a:ad:16:3a:a9:2f:25:e9:28:3c:
de:e2:0d:7a:78:f6:37:e3:04:b6:de:83:ab:35:51:ec:e0:0a:
29:a9:1a:5b:c5:df:d6:7e:97:46:98:ba:b9:05:ee:a8:69:87:
18:bd:38:dc:20:8b:b2:36:ad:88:43:da:e6:91:28:b0:47:5b:
0c:c9:c7:20:51:5a:e8:24:14:eb:15:28:0b:1e:ef:92:59:7b:
c3:2b:ac:5e:31:44:ec:e8:52:3c:f7:22:a9:83:11:62:2c:89:
3f:08:cd:b1:b1:b6:d4:89:b7:07:68:74:1d:9f:d7:7a:e6:d4:
73:45:8e:4f:0a:9f:7c:b3:e7:56:f2:52:1f:5c:c2:2c:74:d4:
6c:6c:6a:03:42:0f:03:c8:eb:00:a4:09:81:6c:b4:fc:67:9e:
f8:88:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:52 2026 by rpki-client