
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa
File: 88c3b85d-80cb-3648-8429-3a6687384ef5.roa (raw, json)
Hash identifier: ksaqzrB5d/ZTjwVC2KXZtmnV/IGTi7sIq451Am/Y/Pw=
Subject key identifier: 18:41:22:0F:4E:80:8C:C1:BB:02:88:AF:42:0F:E4:87:5C:3D:B0:0D
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CF94678C7B2C9A49E1C9898C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa
Signing time: Fri 19 Dec 2025 22:49:47 +0000
ROA not before: Fri 19 Dec 2025 22:49:47 +0000
ROA not after: Thu 19 Mar 2026 21:49:47 +0000
asID: 213971
IP address blocks: 38.67.22.0/24 maxlen: 24
38.68.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f9:46:78:c7:b2:c9:a4:9e:1c:98:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Dec 19 22:49:47 2025 GMT
Not After : Mar 19 21:49:47 2026 GMT
Subject: CN=fb80fde4-8ec1-4370-bed3-983467c5a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:c9:52:db:61:ec:44:bc:f7:c1:ad:b1:0e:
4a:61:23:df:86:23:31:7a:cd:3b:96:36:18:ae:18:
3f:a1:ee:01:87:8c:61:99:39:42:a5:61:1d:cd:69:
f1:86:8e:ea:9f:60:7a:39:77:8b:a3:20:d0:4e:33:
4d:9a:b0:f9:02:69:d1:4c:d8:ae:b1:2f:18:1c:ea:
b1:67:59:af:5a:44:b1:7f:34:87:5c:17:ed:20:6a:
59:2c:f5:0a:d0:dc:da:3e:96:bb:db:80:f9:99:76:
f1:df:99:36:4b:96:44:43:c9:9d:96:19:c7:6d:f5:
dc:d8:95:90:d0:4d:4f:be:18:3b:72:54:9f:28:96:
bd:0d:ea:b1:cb:03:d7:0e:ce:00:0f:c2:21:e1:f8:
b7:50:c9:18:7e:ca:19:33:7e:a5:34:90:44:1c:6a:
f3:66:11:38:b3:99:bd:25:d2:c3:b5:76:09:24:54:
74:1d:3a:d5:a2:87:f0:26:ce:bb:ea:7e:71:b4:7f:
5f:bd:7b:fd:06:d6:f4:72:6f:eb:11:3b:50:df:89:
a7:2e:cc:7b:8b:b5:4a:89:41:c4:0b:43:97:c7:2f:
1f:85:8e:e7:4b:2e:f8:b0:1d:d8:b3:94:dd:9c:a4:
e4:64:13:12:24:25:e9:44:f9:67:43:8e:3d:ea:57:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:22:0F:4E:80:8C:C1:BB:02:88:AF:42:0F:E4:87:5C:3D:B0:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.67.22.0/24
38.68.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:30:6b:da:8a:60:02:ab:6f:0c:23:10:ce:d5:8c:48:f6:7f:
f8:da:43:5f:1b:41:a6:a6:b6:3e:41:03:fe:c0:6f:7e:25:fe:
99:3f:e4:73:4d:e2:ab:ba:f3:e6:d0:a9:78:ab:9b:a4:0c:2a:
dd:44:b0:90:23:e3:50:bc:44:b7:f3:18:80:55:5e:77:8f:92:
2b:70:82:89:92:d2:bc:ba:eb:5b:29:ce:e7:db:42:25:c0:6e:
24:9a:b5:96:bd:91:04:b0:bd:e3:40:2f:f0:f5:37:e8:34:cc:
bd:57:b0:3e:69:92:6a:d8:57:39:88:19:d1:da:32:cf:f7:17:
56:52:8f:e3:40:e6:49:33:1b:63:c5:15:be:96:18:3f:44:b0:
73:ab:04:7f:67:b7:4f:df:ee:71:7b:d5:83:6c:77:b9:5e:b8:
01:b0:3a:d0:a4:3c:99:74:1c:38:47:70:d0:65:e1:44:56:05:
5d:e0:a9:d8:79:5e:f3:cf:fd:fa:70:34:cd:f1:a3:ca:25:8d:
b2:2a:38:e0:02:dd:af:32:53:e2:12:c5:04:a4:99:ec:4d:f8:
0e:00:00:2e:0f:92:a3:b8:38:3d:b4:fe:fe:65:22:91:1a:13:
7e:10:7b:4d:06:56:ca:10:1e:cb:f9:97:74:26:49:54:14:17:
02:72:1a:a9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz5RnjHssmknhyYmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTIxOTIyNDk0N1oXDTI2MDMxOTIxNDk0N1owLzEtMCsGA1UEAxMk
ZmI4MGZkZTQtOGVjMS00MzcwLWJlZDMtOTgzNDY3YzVhODhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxinJUtth7ES898GtsQ5KYSPfhiMxes07ljYY
rhg/oe4Bh4xhmTlCpWEdzWnxho7qn2B6OXeLoyDQTjNNmrD5AmnRTNiusS8YHOqx
Z1mvWkSxfzSHXBftIGpZLPUK0NzaPpa724D5mXbx35k2S5ZEQ8mdlhnHbfXc2JWQ
0E1Pvhg7clSfKJa9DeqxywPXDs4AD8Ih4fi3UMkYfsoZM36lNJBEHGrzZhE4s5m9
JdLDtXYJJFR0HTrVoofwJs676n5xtH9fvXv9Btb0cm/rETtQ34mnLsx7i7VKiUHE
C0OXxy8fhY7nSy74sB3Ys5TdnKTkZBMSJCXpRPlnQ4496ld2UQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBhBIg9OgIzBuwKIr0IP5IdcPbANMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODhjM2I4NWQtODBjYi0z
NjQ4LTg0MjktM2E2Njg3Mzg0ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJkMWAwQA
JkQ4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABowa9qKYAKrbwwjEM7VjEj2f/jaQ18bQaamtj5BA/7Ab34l
/pk/5HNN4qu68+bQqXirm6QMKt1EsJAj41C8RLfzGIBVXnePkitwgomS0ry661sp
zufbQiXAbiSatZa9kQSwveNAL/D1N+g0zL1XsD5pkmrYVzmIGdHaMs/3F1ZSj+NA
5kkzG2PFFb6WGD9EsHOrBH9nt0/f7nF71YNsd7leuAGwOtCkPJl0HDhHcNBl4URW
BV3gqdh5XvPP/fpwNM3xo8oljbIqOOAC3a8yU+ISxQSkmexN+A4AAC4PkqO4OD20
/v5lIpEaE34Qe00GVsoQHsv5l3QmSVQUFwJyGqk=
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:14:11 2026 by rpki-client