
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4b540b5-bd55-3d1d-8be7-cdb72b7b2d63.roa
File: b4b540b5-bd55-3d1d-8be7-cdb72b7b2d63.roa (raw, json)
Hash identifier: 59fwMZ+vJkxH7CDXTPgiNtPhMYdUoHHxVEUSSx3VlA4=
Subject key identifier: 62:15:6F:43:D3:3A:C5:ED:5A:88:9C:62:3D:A0:1F:5A:EE:56:8A:2C
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F0801E553098D494437C931C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4b540b5-bd55-3d1d-8be7-cdb72b7b2d63.roa
Signing time: Tue 01 Sep 2026 14:25:44 +0000
ROA not before: Tue 01 Sep 2026 14:25:44 +0000
ROA not after: Mon 30 Nov 2026 15:25:44 +0000
asID: 135687
IP address blocks: 38.246.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:08:01:e5:53:09:8d:49:44:37:c9:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 1 14:25:44 2026 GMT
Not After : Nov 30 15:25:44 2026 GMT
Subject: CN=8e6da920-16c7-46cf-9073-1d70473535aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:ad:5b:75:d8:7e:e0:a4:1a:17:b5:3d:21:
71:e9:42:b5:31:a3:4d:87:07:e6:f2:47:c9:97:ec:
e5:16:0a:67:c0:e1:c4:7d:b5:45:f9:99:90:69:1e:
24:aa:cd:96:81:3e:6b:79:50:b2:8d:30:cc:7f:17:
f9:a3:ef:d4:26:86:f4:86:65:f7:dc:66:dd:c5:3e:
be:79:9e:28:74:83:73:71:b5:28:7b:06:a9:00:7d:
2c:cd:f6:31:17:56:95:5f:86:e1:c6:07:79:9f:a2:
5a:0d:60:9d:0a:b0:85:05:99:70:02:4d:37:b6:59:
1f:20:8a:6f:8c:83:76:a9:56:e5:3f:dc:90:b4:72:
b1:d7:7b:7e:09:60:e4:fe:15:0d:0d:65:32:2c:0e:
f2:c1:17:72:65:94:58:94:da:01:1b:aa:af:15:a1:
a4:7b:de:b1:10:24:11:c4:c7:c5:e8:17:08:5e:43:
8a:d6:a4:62:be:e4:2b:ee:86:0a:db:b4:5a:79:24:
ae:aa:e1:b7:23:f9:eb:0b:de:07:a5:46:ac:3a:07:
2e:11:44:8e:08:06:30:ee:c7:e7:1b:91:b5:d6:a4:
51:71:92:24:70:ee:a0:e2:fc:68:f4:cd:91:dd:0f:
b4:93:a7:41:46:fc:42:ee:ff:1b:d6:be:16:6c:e2:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:15:6F:43:D3:3A:C5:ED:5A:88:9C:62:3D:A0:1F:5A:EE:56:8A:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4b540b5-bd55-3d1d-8be7-cdb72b7b2d63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.246.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:d3:4e:20:3f:8e:5c:31:cd:99:d5:36:3a:fa:0e:ea:55:16:
83:46:f8:81:2d:0f:be:04:76:fc:d1:e3:dc:59:d6:f3:8b:3b:
f7:e1:f4:8a:c6:f4:99:14:28:24:e7:d6:2b:92:6a:f9:ec:de:
e1:24:44:8d:8c:d9:71:a1:b9:cd:33:fb:8c:41:01:6e:41:43:
23:ac:b9:93:6f:02:b3:1f:4a:c2:a0:b7:98:cc:68:68:b9:6e:
81:94:1c:2a:53:43:cd:ff:12:9d:f4:51:c3:e0:90:4c:89:61:
50:87:2b:3d:2e:b9:02:80:d8:0e:9c:b5:91:17:c6:b2:cb:3a:
17:b8:48:e6:20:00:14:92:2c:75:10:d1:48:e6:df:7c:83:41:
ef:3e:73:60:c9:9d:e5:f5:98:fc:e5:63:d3:5f:47:db:e2:a7:
92:6c:bd:b9:14:b4:10:61:f0:bf:22:b5:a9:7b:0a:e5:28:4d:
bb:29:84:c5:ba:1e:0b:b2:1d:4e:c7:b4:51:16:b8:f4:c5:1f:
6e:61:7c:71:20:be:a6:b8:ed:70:04:dc:7e:87:ed:c4:32:5f:
e3:db:00:ad:9a:90:8d:fd:83:5a:0c:66:fb:b9:7d:cf:1c:b0:
b3:b5:17:3b:f7:71:e4:22:3a:7b:15:20:99:36:1a:cf:1c:23:
5e:e0:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:02 2026 by rpki-client