
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa
File: ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa (raw, json)
Hash identifier: 5HIBwZz/OjZhF7aGx3y7Nx8hnT5SvNFVrxhDjyICYd4=
Subject key identifier: 5D:98:04:50:AB:39:CE:8F:4C:A1:AE:55:DB:B0:B5:E0:E3:FD:39:F6
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EF5B2117B9D8113E3AD503B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 35197
IP address blocks: 38.190.104.0/23 maxlen: 24
38.191.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:11:7b:9d:81:13:e3:ad:50:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=54d85d22-3592-4284-a369-94ef9cc0be2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:5e:dc:f0:8f:58:39:77:0d:80:b1:08:f3:
33:e3:f2:a9:df:67:44:a6:a6:36:2b:38:6e:f6:18:
19:d2:4c:0f:80:a7:ff:3e:6f:32:b4:42:b2:f2:e0:
ee:9b:59:c2:ac:1f:b5:2e:b5:27:2b:59:13:42:5e:
cc:99:e1:71:e4:d3:25:09:90:7b:a0:49:dd:f3:7b:
ab:db:e7:18:a0:bf:77:f2:8f:64:35:b3:9c:f4:7c:
0d:c8:d5:7d:cf:e0:23:27:dc:34:4e:96:e1:70:74:
ad:da:b5:04:d8:02:72:13:25:52:a6:e8:58:ad:d7:
6d:f6:8c:b6:55:b2:43:08:aa:87:94:41:29:3b:3b:
e0:6a:fa:33:e6:2b:a4:6e:e1:38:1b:5c:4b:18:02:
63:53:00:b5:a1:d8:8f:7f:3b:ec:ee:37:58:e0:bb:
87:8b:16:88:df:54:a5:8f:84:02:c9:ee:55:c3:78:
d0:bc:05:0e:78:cc:2c:be:26:08:ac:a4:4f:0d:5b:
f0:d2:0f:a7:2f:7b:67:e5:fb:e4:53:0b:1b:a9:60:
1c:3f:d6:da:b8:33:5a:05:32:39:16:08:27:2c:17:
9a:79:41:00:d0:bb:93:57:28:5e:4b:39:53:88:74:
88:68:f7:1e:66:ae:88:92:c5:7d:ed:b5:d7:ed:7e:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:98:04:50:AB:39:CE:8F:4C:A1:AE:55:DB:B0:B5:E0:E3:FD:39:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.190.104.0/23
38.191.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:bd:66:8b:74:0e:df:1c:41:1e:66:5c:04:f5:c0:18:a7:0b:
3a:66:71:b3:b7:e0:3b:03:38:2d:e0:1a:b1:c2:bf:c8:7e:1b:
15:f5:80:8c:c3:ea:46:37:ed:5f:3a:ef:ad:31:51:c9:e0:d5:
a7:84:7d:85:0b:dc:0d:55:8f:92:29:44:8d:dd:db:b4:0e:58:
ad:a6:f6:f0:a6:47:c8:45:f7:21:a4:f5:35:d9:37:94:64:19:
dd:b6:0c:69:6d:33:a6:71:7b:a9:14:1a:7a:66:3e:b2:6f:1e:
fd:30:87:85:23:f9:05:6b:49:73:0c:d8:b9:0b:78:2d:b1:7f:
94:0d:85:61:10:bd:e6:90:96:9e:8a:34:88:d8:d5:ba:82:d4:
40:47:b3:1c:bc:80:c1:3c:09:25:2a:02:73:ce:5d:73:8c:c8:
96:e2:2a:53:ff:02:21:1d:64:63:bc:2a:76:47:16:0e:7d:e8:
ee:96:76:c1:72:ed:b2:d6:59:df:bb:1d:32:ca:5e:51:79:0a:
73:25:2a:ba:e1:33:ec:c6:fe:65:7f:00:3d:77:d7:86:83:23:
f0:56:90:8a:88:84:32:05:46:00:5a:2a:b3:cd:45:c2:76:17:
63:b0:95:12:26:49:8e:9f:9e:b1:1b:db:77:c0:a0:d7:5d:67:
fa:70:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:53 2026 by rpki-client