
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa
File: 84840b0a-e228-38dd-87c4-2a9194fb0372.roa (raw, json)
Hash identifier: 44Hhu7Ui+H7jeOg07z60MsqUmKs0D3kQs2NTr+CmT24=
Subject key identifier: DD:67:1F:7D:B9:50:12:B7:62:29:E1:07:75:12:1D:19:7C:82:7D:C5
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F8DD897480DB04B676F920D80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa
Signing time: Mon 19 Oct 2026 13:00:12 +0000
ROA not before: Mon 19 Oct 2026 13:00:12 +0000
ROA not after: Sun 17 Jan 2027 14:00:12 +0000
asID: 262231
IP address blocks: 38.21.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8d:d8:97:48:0d:b0:4b:67:6f:92:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 19 13:00:12 2026 GMT
Not After : Jan 17 14:00:12 2027 GMT
Subject: CN=ccb2cf4b-d1dd-4c7e-88f0-7d957ab8d4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:44:fd:f6:42:29:d6:29:6b:8a:17:5a:fd:
fc:ad:80:89:f3:68:e1:aa:e2:48:dd:96:d2:d7:11:
47:6f:c9:6c:f9:f7:f1:ca:c7:83:46:c6:5b:40:ce:
13:49:f1:f6:a8:e9:92:48:e7:df:8d:b7:3a:cb:f4:
c2:1c:77:6c:5c:3f:ed:e6:23:85:96:35:0c:d6:1a:
c7:b2:76:48:28:2c:80:d0:e7:d7:9b:6a:1a:08:a6:
00:73:5b:a7:ef:ab:0e:65:c9:c7:2d:e1:a2:ab:1a:
c3:42:83:fc:78:ed:31:bd:5f:51:59:dd:fc:44:7f:
34:3f:72:81:8c:df:a5:f6:e4:a4:90:22:5d:85:22:
4c:33:26:76:54:89:09:11:2c:b0:a5:65:c4:4a:6e:
da:9c:ce:e1:ec:b0:c4:0b:f8:3f:21:24:80:03:0f:
45:8f:e4:87:36:67:af:93:3a:a0:4e:b5:1b:b4:5f:
79:10:4e:1a:02:34:89:17:1c:a5:f6:63:77:a8:32:
0b:1f:f5:64:53:4f:a5:6c:24:49:86:e1:67:05:56:
de:fd:88:46:80:1e:1f:6b:f9:ee:33:b8:85:11:cc:
74:e6:98:b2:9c:f3:9f:97:69:c4:aa:f6:a8:19:c0:
ac:fe:7c:8c:ee:80:fb:90:cd:9a:ca:5b:05:ca:78:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:1F:7D:B9:50:12:B7:62:29:E1:07:75:12:1D:19:7C:82:7D:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.21.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:67:68:39:2c:da:1d:5f:9c:42:6c:7e:67:6e:41:c4:1b:6d:
36:29:09:5b:8e:c1:d8:6a:b3:18:75:a3:a5:88:41:d3:65:f2:
3e:1a:f6:b8:9e:d5:65:14:49:17:f2:85:35:0c:16:41:60:f7:
42:42:f5:4c:9f:29:77:00:ce:f0:62:5c:76:e1:25:56:e4:77:
ae:bf:4a:d6:60:31:e0:c8:ce:1b:0c:99:cb:12:0c:b7:5b:12:
d9:0e:4c:1a:14:ee:1a:0e:ac:df:e1:a4:2a:f5:17:23:b9:73:
f9:8d:2f:83:90:b5:ff:67:3a:4f:64:be:b1:75:de:35:e6:ad:
f1:69:29:87:0f:44:fe:30:f0:1b:66:be:5b:64:18:3b:19:90:
0f:e7:19:8d:6b:8b:3e:2c:0f:32:71:9a:60:4c:65:f9:a4:3a:
a3:f7:5e:97:03:e3:4d:ca:3c:38:f7:71:1e:5b:0d:08:4d:d9:
74:17:a0:e6:81:8f:5b:85:26:2a:cb:f8:d3:60:c3:8f:6a:76:
ee:d6:52:c4:b3:c0:89:8b:37:52:a3:8c:ed:4a:cb:42:0c:c3:
ea:fd:64:fb:7e:c2:49:fd:ff:34:8b:8e:4f:14:c4:01:3e:d0:
df:b8:59:2b:87:06:83:6a:ee:b3:a8:f6:2e:43:47:c8:79:a9:
bb:01:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:14:48 2026 by rpki-client