
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7daa5064-4a7f-3099-89cc-27d6938bf87c.roa
File: 7daa5064-4a7f-3099-89cc-27d6938bf87c.roa (raw, json)
Hash identifier: Bu5fri5s8+JcdvNQ+RcxQ0zyIBqhqQe0034DcBLkJCk=
Subject key identifier: 6F:97:8E:E8:DC:A2:27:BD:F6:FB:4E:A3:32:09:C7:9F:8D:28:2D:E8
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F9A68C26ADE002D4F4A228CC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7daa5064-4a7f-3099-89cc-27d6938bf87c.roa
Signing time: Sat 24 Oct 2026 01:00:12 +0000
ROA not before: Sat 24 Oct 2026 01:00:12 +0000
ROA not after: Fri 22 Jan 2027 02:00:12 +0000
asID: 5651
IP address blocks: 38.246.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9a:68:c2:6a:de:00:2d:4f:4a:22:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 24 01:00:12 2026 GMT
Not After : Jan 22 02:00:12 2027 GMT
Subject: CN=367ef00e-80b9-45fc-b395-ea7b02d8c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:37:e7:a6:27:87:53:12:1d:c7:9b:97:ce:
d3:17:36:2f:91:75:00:46:e7:8d:d9:bc:11:53:f2:
f4:ca:e5:04:50:8e:f0:fe:a7:ac:8f:2e:3f:cd:31:
3c:24:1c:94:e3:b0:b3:b8:c0:07:9c:39:89:12:0f:
1e:51:b1:e6:fe:8e:30:f4:56:01:de:e9:94:cc:45:
e5:9e:e8:26:dc:ec:db:af:e8:32:63:ea:91:9c:a2:
3d:35:2c:93:b6:b8:1e:d7:b1:44:32:5d:54:3a:92:
87:6a:95:5b:98:2e:6d:a5:b6:12:98:2c:a6:71:e8:
7a:6b:4b:bd:ee:a6:c7:7c:39:90:26:94:a0:d8:52:
f0:d0:c7:19:6f:47:0e:2e:67:c7:b6:35:da:eb:62:
a8:ff:72:db:66:00:78:e6:76:8f:f6:64:e4:70:ac:
a0:5b:1a:38:60:2a:b8:09:ea:bd:82:65:a3:bb:81:
bc:12:d2:4e:f4:80:ee:d1:c1:62:b9:e4:2e:0b:06:
68:3c:16:eb:4c:72:a3:79:95:a8:7c:fc:9f:31:08:
56:7d:b4:04:ea:9c:4c:32:04:90:56:05:5d:77:ca:
1a:86:a4:75:10:c1:bc:80:7e:b8:d9:d3:65:29:55:
29:c4:3c:a1:d6:f5:e2:b1:0c:16:5d:96:62:21:2c:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:97:8E:E8:DC:A2:27:BD:F6:FB:4E:A3:32:09:C7:9F:8D:28:2D:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7daa5064-4a7f-3099-89cc-27d6938bf87c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.246.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:50:55:c6:30:6e:3e:e7:56:48:bf:fc:2b:be:59:d4:9b:a6:
b5:be:7c:18:2a:d1:28:c6:fa:77:ac:d5:8e:4a:15:18:71:20:
97:29:e3:d4:06:26:9b:67:97:73:bb:1c:7e:f4:7b:ee:07:10:
d6:f8:aa:4e:4d:56:e1:3b:e1:ea:e8:42:83:06:de:bf:a2:5d:
68:fa:54:39:31:ba:68:12:e7:71:42:95:ca:3f:be:f8:e2:14:
a1:d5:11:86:05:2f:0c:d3:8c:bd:1e:b2:b2:25:14:20:04:0e:
92:79:b8:99:2a:bc:74:de:f0:f6:f6:63:e0:32:82:3a:3e:54:
e6:f4:1d:6f:8f:40:ab:7b:8a:6b:4b:6c:4e:56:18:c2:c9:42:
a4:1b:a1:59:67:f9:0c:5b:4f:b5:da:6f:b2:1a:5f:cf:d2:3a:
35:18:9e:82:d9:63:9e:58:9d:4e:92:4e:0d:36:06:05:b7:73:
a1:25:f4:1c:22:db:b0:46:51:dd:cc:e5:40:8f:9a:01:41:37:
f7:82:6f:82:49:3a:7c:b2:fa:ec:82:21:05:70:95:41:88:83:
bb:69:d1:ad:ba:44:e0:c7:07:50:64:e9:d1:80:f9:73:73:82:
37:2c:f0:14:9e:bc:b4:ab:02:cd:a1:ac:0a:7e:8e:d2:4a:a7:
ca:5c:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:03:04 2026 by rpki-client