
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/699116c1-1fd4-3acd-b45f-e168fcad9ae1.roa
File: 699116c1-1fd4-3acd-b45f-e168fcad9ae1.roa (raw, json)
Hash identifier: BiKYtsFOaEXAdR+YJ04hGNuvJ/VOFS1lLdrUdJhqXx0=
Subject key identifier: 4F:24:F4:E3:B2:D8:99:47:2E:DE:E3:6D:44:72:DA:DA:9D:88:D3:0E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EFF7775C310A26F585A48BC80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/699116c1-1fd4-3acd-b45f-e168fcad9ae1.roa
Signing time: Sat 29 Aug 2026 13:00:12 +0000
ROA not before: Sat 29 Aug 2026 13:00:12 +0000
ROA not after: Fri 27 Nov 2026 14:00:12 +0000
asID: 274122
IP address blocks: 38.18.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:77:75:c3:10:a2:6f:58:5a:48:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 29 13:00:12 2026 GMT
Not After : Nov 27 14:00:12 2026 GMT
Subject: CN=da6427c1-19ad-437e-83ec-eed47198c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:f3:49:4a:13:19:c6:96:5a:21:37:32:33:
dd:57:95:64:04:5c:d3:e9:a1:c5:09:ca:b7:fb:3c:
d6:81:3d:d9:ee:34:60:90:ba:98:fd:ed:71:fc:05:
cf:bc:2b:31:83:c3:ca:2d:e7:80:90:a9:73:3c:b4:
d9:86:45:7f:37:ac:93:b4:f0:69:73:af:38:64:ca:
c9:c1:fe:13:3e:34:ca:db:4a:d8:33:0d:0a:96:38:
58:0e:b1:8b:74:7c:51:56:81:94:4f:27:95:34:bf:
01:6d:4a:e9:c2:36:d3:e6:a4:61:bd:39:5d:a4:73:
df:05:40:65:66:1f:60:93:03:85:de:8f:26:78:1d:
06:24:e4:d4:fd:cd:ef:22:f8:bf:88:ba:ce:91:dd:
0d:08:c0:71:76:1d:8a:59:0a:c8:65:04:48:e3:7e:
1a:d6:a5:c7:b5:24:89:63:19:ab:e3:95:c6:29:cb:
f3:6e:b0:64:86:14:09:c8:f1:04:50:ec:1b:33:11:
96:39:1a:aa:62:51:20:a2:5a:6b:5b:8a:2c:d9:b6:
7f:c8:c6:a8:e6:1b:8c:8d:f0:d7:83:7b:88:5b:a3:
97:6c:c7:14:6f:fa:08:25:a1:3d:c6:08:49:21:fc:
98:10:53:9f:3e:ed:e5:61:25:92:52:80:28:b4:54:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:F4:E3:B2:D8:99:47:2E:DE:E3:6D:44:72:DA:DA:9D:88:D3:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/699116c1-1fd4-3acd-b45f-e168fcad9ae1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.18.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:65:25:67:0b:52:c8:2b:f7:28:fa:4b:35:90:a1:a6:ba:b8:
c0:7a:05:78:0f:6d:a3:f4:d1:8b:0a:96:e5:ea:44:e0:88:60:
5e:0f:02:2d:59:67:f3:c9:12:cb:35:3e:15:b3:b1:e5:df:cc:
bd:2f:6f:0a:ac:ba:31:75:7b:de:ab:52:af:99:73:fe:f2:e4:
77:ce:e1:db:52:be:92:65:d7:d3:95:81:8a:e2:11:e3:b4:c1:
2f:7a:4b:35:91:9e:fb:8f:1c:0d:4c:d6:c5:42:7a:6d:98:d6:
c9:5a:d3:bb:b1:11:0d:61:aa:83:93:63:2f:2c:8b:74:d0:58:
ce:a1:f4:6f:58:fe:c0:b5:01:44:b5:df:89:4c:a5:cb:e1:34:
53:2c:0e:b7:e8:8a:6e:88:4a:92:d6:95:cb:99:80:2b:14:7a:
0a:58:8c:24:11:87:cf:25:44:9a:d6:f1:b7:b7:95:45:d9:05:
9e:7b:e1:b9:3e:51:5f:35:ff:b6:3a:7c:11:b1:55:c3:4d:61:
dc:ec:c0:5a:17:ef:28:d2:1e:81:e5:2b:ed:eb:f1:62:ce:ad:
11:8d:42:94:8f:17:f6:44:bc:50:68:47:fb:7e:16:95:74:88:
d3:d2:2b:ed:3d:62:18:08:97:34:65:8c:e0:18:a4:6d:6a:d7:
49:6b:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:28 2026 by rpki-client