
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa
File: 703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa (raw, json)
Hash identifier: ErOnJXwWqzJstEOCtKNya56hYbLM3U+8DEey2Ammt1Q=
Subject key identifier: C4:C1:53:7E:EB:B2:56:EE:7A:2B:C6:9F:04:BE:BE:2D:8F:B6:0F:F8
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EF5B206C2F2056B2105095F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 56902
IP address blocks: 38.190.104.0/23 maxlen: 24
38.191.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:06:c2:f2:05:6b:21:05:09:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=1b66d7d7-85e6-4372-9a64-e3e458092a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:7d:1f:1a:93:2e:90:ba:ee:1c:2e:84:9d:
ba:3d:0b:69:87:a5:4f:fe:e0:44:40:b5:5d:92:08:
5c:35:82:3d:81:25:61:b9:3e:23:49:43:7e:78:ba:
fc:a0:da:7d:28:0f:dc:e1:dc:5e:37:85:0e:33:13:
8f:df:65:f4:20:7b:65:86:35:bb:38:07:f1:0e:e2:
c3:49:80:3e:72:b5:47:ab:20:9b:a9:f4:50:56:2e:
3a:2e:69:ae:3e:a7:39:90:50:d5:19:2b:4f:78:fe:
f4:c9:d0:c9:7a:ef:52:ce:2a:9c:91:e4:45:58:5f:
07:b0:38:31:69:c0:53:cb:68:0f:b7:15:73:e9:80:
1b:fc:2d:b3:99:b8:d4:59:11:eb:97:1d:92:f5:20:
fa:fb:0a:8b:73:d6:40:61:f8:42:61:03:50:96:62:
42:a5:40:72:09:ba:e3:ac:88:2c:a6:f4:7b:6b:9b:
68:86:44:92:f6:b5:46:6b:63:e1:46:bb:25:5c:52:
a1:94:44:f1:0b:b1:bd:ad:49:4f:48:8e:78:a4:e6:
49:92:5c:c8:63:6b:3a:65:c2:05:42:07:15:6f:28:
f1:d8:1e:b6:cb:20:b2:07:d4:d7:37:7c:aa:76:52:
5d:dc:64:82:4d:2d:25:e9:d4:29:0d:42:ec:18:13:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C1:53:7E:EB:B2:56:EE:7A:2B:C6:9F:04:BE:BE:2D:8F:B6:0F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.190.104.0/23
38.191.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:96:e9:ef:ac:a7:95:d1:76:76:87:cc:d8:c4:b9:30:80:23:
cd:86:0e:d6:36:18:e8:51:2b:d7:72:ab:a4:79:82:7d:76:45:
0e:f7:b4:f3:c5:69:c3:1b:94:cd:bb:6e:52:2b:9b:c4:a3:8c:
76:85:40:a1:24:ee:a9:99:bd:5b:a4:94:b3:c8:0d:47:9a:76:
99:a3:c6:ac:45:b5:54:dd:17:28:72:d4:4e:5f:6f:b3:92:8e:
a7:8c:ec:da:8a:02:b8:fb:3a:ea:8f:2f:43:11:38:09:5c:da:
72:4f:c1:00:86:c0:56:bb:bf:cf:77:82:b5:41:36:8a:b7:df:
da:02:4d:c1:11:b1:86:b7:48:44:da:fd:16:f3:70:e7:d1:49:
da:b0:a9:62:3b:7f:d9:cf:70:8e:41:72:b9:02:89:77:28:4e:
ce:3c:43:f9:a8:eb:c6:98:4a:07:6c:9c:5a:09:b0:e8:53:d9:
d9:ba:3d:f7:8b:e9:37:8a:2e:5f:35:d8:89:90:0a:00:63:da:
1e:8f:61:ca:e3:60:8d:61:5c:45:43:a1:e2:b2:de:85:48:cf:
cd:f6:1e:78:64:fb:70:9a:8d:33:83:fe:e9:10:c4:3f:66:e9:
fc:d7:fb:5c:6f:96:8c:4d:d9:b5:b0:75:9f:ee:e9:1a:23:2a:
15:f9:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:14:27 2026 by rpki-client