
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa
File: ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa (raw, json)
Hash identifier: Yv79m5sWk0y52rQLHb0skq9eoNFNEmWCBodfgNs1QHs=
Subject key identifier: A6:6A:C0:A5:BC:D1:12:C2:FE:22:40:3A:AB:9A:FE:43:62:87:BF:0A
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F979DC69F904114F18DFE9380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa
Signing time: Fri 23 Oct 2026 01:00:12 +0000
ROA not before: Fri 23 Oct 2026 01:00:12 +0000
ROA not after: Thu 21 Jan 2027 02:00:12 +0000
asID: 35197
IP address blocks: 38.190.104.0/23 maxlen: 24
38.191.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:97:9d:c6:9f:90:41:14:f1:8d:fe:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 23 01:00:12 2026 GMT
Not After : Jan 21 02:00:12 2027 GMT
Subject: CN=6e6dc781-795e-42e1-ad65-0ac865d01528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:60:39:6a:8f:6c:bb:c4:c3:79:22:8f:16:
a0:e6:1c:c8:be:7a:76:e1:17:27:aa:cc:51:1c:5c:
16:46:c9:07:f7:a1:51:71:5d:a5:c7:a1:8a:1d:0d:
c1:2d:37:12:a2:93:5f:01:b2:91:7d:93:ce:1c:fb:
45:34:08:6b:4a:a6:07:16:88:09:16:e5:9f:5b:11:
a7:d8:f8:8b:9b:6e:35:68:ea:ba:51:69:3c:fe:ab:
f8:49:fc:ac:44:d1:fb:09:90:b7:81:01:50:85:75:
b6:58:99:f9:07:23:76:42:21:1b:f6:6e:43:39:f0:
9b:c2:50:d5:8e:68:b1:be:0c:bd:1e:ee:76:41:2f:
aa:2a:2e:09:e0:3f:cf:37:39:fb:3d:3d:72:d8:1e:
13:81:ef:32:07:e4:2f:dd:8c:52:05:36:d9:1f:09:
8c:a6:87:93:94:c9:42:4c:6e:44:6e:9c:8f:32:48:
bd:65:03:1c:55:16:36:7f:32:53:85:98:7e:ef:7b:
24:e9:37:c6:41:02:27:1c:a5:3b:64:05:3c:e4:1e:
2a:d2:03:80:b0:49:6b:cf:b1:77:1a:6b:9d:fe:c0:
6b:ac:88:aa:bd:c4:29:e5:ef:e5:d4:93:97:a2:d1:
b1:c1:37:84:53:8f:55:e5:92:0e:7b:48:4c:0d:0c:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6A:C0:A5:BC:D1:12:C2:FE:22:40:3A:AB:9A:FE:43:62:87:BF:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae2c68ba-71f5-37fd-a57f-d48f4acb0873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.190.104.0/23
38.191.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:5e:d4:eb:58:13:44:7b:e2:67:0c:0a:26:01:a2:49:9c:71:
1a:80:14:18:42:9c:07:4a:70:65:8a:f5:99:bf:7a:0c:d4:75:
33:cb:b6:94:fd:f8:2d:4f:cb:c6:72:43:4b:5c:d1:99:df:84:
55:65:63:07:e5:b5:73:95:bd:50:99:06:1c:2d:3c:56:df:6e:
37:9e:40:fe:7c:e1:70:b0:6a:f0:67:50:9e:38:93:5a:ce:9b:
df:15:ab:45:12:ee:5f:ed:a1:db:3b:23:94:fc:d9:24:9e:17:
9f:60:8c:50:f7:70:3a:27:f4:f6:78:51:c4:9f:11:0c:e3:f9:
11:65:8a:17:7d:a8:cf:7b:3a:49:7f:f8:82:23:44:bf:e6:e6:
a1:0d:18:32:c4:09:5d:97:c3:42:32:0a:91:d3:5c:50:20:89:
95:68:78:c1:62:67:f1:30:15:b0:fc:8a:4f:0f:f1:de:82:f9:
ad:d6:24:fc:76:4b:60:8c:06:de:ce:fa:1d:34:fa:69:38:69:
73:b7:57:d6:da:ab:81:27:24:59:71:dd:16:b8:67:d6:fe:27:
5b:29:40:f6:5c:b3:c1:47:d2:68:51:ba:7b:2f:c5:40:2c:e4:
28:b9:b5:41:71:94:3f:6c:60:70:51:c1:32:85:df:46:b2:6b:
2b:ca:9b:b8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+XncafkEEU8Y3+k4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NmU2ZGM3ODEtNzk1ZS00MmUxLWFkNjUtMGFjODY1ZDAxNTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia5gOWqPbLvEw3kijxag5hzIvnp24RcnqsxR
HFwWRskH96FRcV2lx6GKHQ3BLTcSopNfAbKRfZPOHPtFNAhrSqYHFogJFuWfWxGn
2PiLm241aOq6UWk8/qv4SfysRNH7CZC3gQFQhXW2WJn5ByN2QiEb9m5DOfCbwlDV
jmixvgy9Hu52QS+qKi4J4D/PNzn7PT1y2B4Tge8yB+Qv3YxSBTbZHwmMpoeTlMlC
TG5EbpyPMki9ZQMcVRY2fzJThZh+73sk6TfGQQInHKU7ZAU85B4q0gOAsElrz7F3
Gmud/sBrrIiqvcQp5e/l1JOXotGxwTeEU49V5ZIOe0hMDQx/JwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKZqwKW80RLC/iJAOqua/kNih78KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWUyYzY4YmEtNzFmNS0z
N2ZkLWE1N2YtZDQ4ZjRhY2IwODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJr5oAwQB
Jr+iMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAL9e1OtYE0R74mcMCiYBokmccRqAFBhCnAdKcGWK9Zm/egzU
dTPLtpT9+C1Py8ZyQ0tc0ZnfhFVlYwfltXOVvVCZBhwtPFbfbjeeQP584XCwavBn
UJ44k1rOm98Vq0US7l/tods7I5T82SSeF59gjFD3cDon9PZ4UcSfEQzj+RFlihd9
qM97Okl/+IIjRL/m5qENGDLECV2Xw0IyCpHTXFAgiZVoeMFiZ/EwFbD8ik8P8d6C
+a3WJPx2S2CMBt7O+h00+mk4aXO3V9baq4EnJFlx3Ra4Z9b+J1spQPZcs8FH0mhR
unsvxUAs5Ci5tUFxlD9sYHBRwTKF30ayayvKm7g=
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:04 2026 by rpki-client