
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa
File: 683becb0-477a-3173-b330-2b640f5dd3b4.roa (raw, json)
Hash identifier: ohgBBOWshaM15nuGAPHBeCRNtuCRsxSCC+29w8k6Wik=
Subject key identifier: 31:4C:77:AF:3D:CC:94:57:A2:8C:67:24:E7:7D:D9:AD:B0:FA:39:CB
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D92C92ECB8258003275FD7F40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa
Signing time: Mon 20 Apr 2026 21:54:57 +0000
ROA not before: Mon 20 Apr 2026 21:54:57 +0000
ROA not after: Sun 19 Jul 2026 21:54:57 +0000
asID: 274202
IP address blocks: 38.127.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:92:c9:2e:cb:82:58:00:32:75:fd:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 20 21:54:57 2026 GMT
Not After : Jul 19 21:54:57 2026 GMT
Subject: CN=b576246e-c925-4dd0-9599-04f516b44054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:82:b3:64:13:31:31:e6:70:33:c9:47:85:
a0:21:fb:20:f9:10:94:d1:b5:c1:31:90:62:88:e6:
5d:57:b5:f5:a8:d4:55:5a:07:58:3e:7a:13:9c:22:
76:7b:71:63:d6:93:7f:a3:d6:66:b6:6e:29:72:c4:
2d:f2:fd:15:04:10:6d:a7:eb:5d:72:a9:df:ad:b4:
91:3a:e4:10:cc:e9:15:3e:46:53:7a:7f:60:40:7c:
97:4d:83:1c:e3:fb:bf:25:b8:01:5b:27:ac:d2:ec:
8a:dd:05:a3:52:6e:72:a8:f8:d7:58:27:90:65:1d:
3c:99:87:62:96:9a:ad:d2:bb:35:78:0f:cb:40:60:
81:77:6e:50:cf:4b:0b:5b:a5:a1:8f:f6:46:44:9a:
f5:7b:ba:49:d0:7d:d7:7d:ab:ff:fc:02:e5:18:91:
c3:8c:c2:ff:11:c8:63:95:dd:b2:fb:cc:77:2e:77:
82:f4:2c:88:94:c4:ff:b0:a9:38:98:ba:d3:2c:cf:
31:a7:fa:c5:05:2c:d0:da:b7:02:c9:9a:27:32:0a:
e3:48:3c:23:4a:3d:d2:5e:5e:d3:38:e5:41:49:62:
7b:dc:64:0e:50:f1:96:cc:10:f2:af:8c:32:48:e2:
df:c6:a8:83:84:05:45:eb:ba:82:a3:27:fb:25:fa:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:77:AF:3D:CC:94:57:A2:8C:67:24:E7:7D:D9:AD:B0:FA:39:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.127.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:5e:bc:94:55:3c:5c:d3:b1:a8:a6:fe:c0:be:76:77:ff:bc:
14:22:a8:65:ee:57:7e:7a:62:d2:1a:64:e1:82:4c:0c:93:c7:
0d:d8:5f:da:36:db:4b:7a:9f:af:c7:23:4a:0b:89:60:df:ed:
41:fd:bb:a8:94:58:a6:da:d9:ea:87:88:08:83:28:83:d8:14:
99:26:23:a3:10:97:bc:dd:ae:10:6a:5c:26:54:be:88:4e:64:
da:8f:0c:39:fe:13:89:1f:c0:9f:e5:01:53:1f:67:99:a9:a2:
a9:e4:a4:1e:df:0b:e2:ec:85:dd:97:1d:23:53:04:11:ce:9f:
8f:0f:b4:be:85:29:01:0b:01:5f:42:59:fc:b4:a5:98:b0:f5:
4c:4d:42:ba:ec:7d:fb:f3:81:23:2d:b7:12:ab:87:f5:6a:00:
c6:11:7e:50:5f:d4:f3:8d:99:55:de:d2:39:5b:ed:92:11:0b:
a7:de:08:9a:ca:6f:7f:a3:0f:c9:e6:f9:75:70:7a:8c:a8:95:
e8:79:41:0c:84:33:bf:ea:65:ac:47:d5:39:76:c3:25:c1:ff:
93:99:3c:cb:95:38:7f:e2:78:f5:f2:f4:05:56:a2:36:e0:2a:
3e:24:48:f3:d6:55:fb:a6:15:af:fc:77:b5:0f:33:55:8c:54:
13:ea:2b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:11:58 2026 by rpki-client