
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa
File: 8bf9e516-3556-3db3-9710-effea1eb1175.roa (raw, json)
Hash identifier: MMUNsPuKolWXJKFhOlly3WHejVfHpTE6SHh6LjbODCM=
Subject key identifier: 36:B4:BD:5A:7E:3E:BC:AB:0D:47:03:F2:11:CF:B9:58:3A:90:AA:C5
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EF01CB083866D270140730180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 271922
IP address blocks: 38.210.56.0/22 maxlen: 24
38.254.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:b0:83:86:6d:27:01:40:73:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=ad15e726-55b9-46e5-b575-4f30a7649674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:19:35:8c:44:0e:90:19:2f:ec:25:06:03:
b4:1b:47:13:bd:38:b2:66:ef:6b:3e:e6:7f:f7:04:
45:fd:33:b5:75:3d:36:51:1a:73:5d:83:b7:51:59:
a4:55:2e:1c:6f:73:b3:9d:d0:87:43:2a:12:c6:29:
8f:08:c0:1f:c5:15:53:be:e6:92:c8:b3:f4:5d:30:
c8:cd:c9:50:2b:1b:da:e9:7e:7b:2d:20:0c:e5:7f:
11:60:da:71:0d:37:40:42:ec:36:86:63:f8:96:c5:
63:9d:75:f9:00:9a:41:4f:b2:6e:67:73:30:3b:57:
d2:17:0d:23:0b:46:98:f9:c9:ba:0f:79:62:70:8f:
91:63:30:b6:e1:fd:fe:3a:5c:24:63:00:78:ff:41:
35:68:f4:ec:4d:83:04:d1:b7:58:ff:04:54:62:6a:
2f:a3:b4:75:a9:57:8a:e1:47:f9:3e:20:5f:f1:fa:
da:aa:1e:26:c4:12:dd:4a:7b:14:4e:31:57:ff:16:
6d:37:39:6c:20:1b:02:af:d5:08:8c:59:24:d8:7d:
68:90:50:5d:b9:ee:11:12:69:a9:37:8f:f2:44:a1:
2a:aa:00:8c:b9:92:58:fb:ee:3d:67:08:75:83:34:
1e:d9:2f:e5:81:df:04:90:45:14:18:bf:d1:d3:34:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:BD:5A:7E:3E:BC:AB:0D:47:03:F2:11:CF:B9:58:3A:90:AA:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.210.56.0/22
38.254.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:1d:b9:e1:a0:b8:26:5e:c8:20:1d:a2:3d:92:78:6a:dd:e0:
7b:3c:9b:e3:76:5e:8f:0c:83:7c:78:83:e2:a9:33:ad:7c:96:
9e:be:b6:cb:18:0c:b3:87:54:83:95:63:4d:e8:9c:ed:d0:8f:
d4:d2:b3:b8:be:9d:f5:8b:88:78:85:64:39:97:c5:1a:7f:b6:
2d:b1:79:d4:2c:19:e7:dc:71:f1:6d:1f:a3:a0:03:c2:f2:32:
e9:89:1b:ff:78:08:72:b6:2c:bc:62:1b:82:95:8e:1c:91:25:
09:69:39:99:50:00:1f:f8:3e:43:fc:bc:63:c4:15:33:92:5a:
cc:85:ab:9c:74:6f:b4:50:ef:9c:1d:fd:76:89:d1:cb:ef:85:
4f:85:0a:19:45:ad:23:5e:f3:a2:e8:fd:a5:9d:94:8b:5f:3e:
34:9d:24:ff:8c:2a:6e:c4:bd:fe:e3:2b:4d:5e:0b:f1:4d:1d:
38:94:a1:c9:5d:1c:e8:76:b0:49:08:54:74:1b:88:4c:d0:d1:
7f:27:c6:d1:70:aa:93:c9:97:69:77:98:07:9d:0d:c4:66:66:
b0:ee:27:e6:5c:ce:e6:00:06:af:1f:5a:61:d4:97:e4:ff:bc:
aa:e0:d4:a4:e5:98:8b:24:c4:9f:45:ce:cd:0b:5d:83:5c:90:
a9:f7:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:52:15 2026 by rpki-client