
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba5eb127-a921-3d36-9408-d8e6d4f4b7b6.roa
File: ba5eb127-a921-3d36-9408-d8e6d4f4b7b6.roa (raw, json)
Hash identifier: fgKDoX/uvPr5yHAzpvu99Ds5yxUn9pVlIlCJ0BFnzYE=
Subject key identifier: F3:C5:C5:61:68:4D:69:F0:C3:57:21:DA:2A:68:F7:55:36:EC:B2:9A
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584DF4DB9D1CF5810C527A0D2540
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba5eb127-a921-3d36-9408-d8e6d4f4b7b6.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 151354
IP address blocks: 38.68.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:9d:1c:f5:81:0c:52:7a:0d:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=d7fa6c2f-7a76-4804-a999-65e5c937bb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:a3:4c:3a:70:06:41:52:fe:32:2b:ce:44:
af:74:49:2e:ef:b1:f4:e4:59:47:0a:7a:11:52:fd:
ff:e9:8f:b1:7d:a3:3b:1a:41:de:6a:34:14:d6:d9:
e3:b1:ca:ee:fc:ad:48:e8:fa:62:6a:e1:c6:b9:b8:
c8:2f:5f:1e:2d:4e:85:c9:c8:ff:57:11:ed:1d:8e:
7a:fe:92:23:b6:ca:4a:cc:b5:06:3c:57:6f:92:31:
95:51:15:ae:4e:5a:53:68:18:9a:19:ea:71:6a:b9:
1a:e8:8e:9a:70:b6:cb:e2:f0:37:db:0f:2a:25:ef:
70:5b:d7:68:63:fb:2b:92:55:c3:b6:69:1e:11:a7:
9a:47:68:1f:b0:91:91:7f:39:43:09:c1:0f:3d:17:
ef:41:3c:48:cf:7c:4b:5b:6c:7e:1c:04:a7:73:b1:
43:81:fe:85:a1:33:cd:47:75:ea:1e:35:96:0e:5c:
0d:96:90:28:54:02:4c:36:eb:0d:90:5e:4d:8b:03:
84:30:90:fa:4a:09:0d:ba:13:d5:33:cf:26:de:86:
fc:f9:aa:ed:db:b7:f5:18:a0:96:fd:6f:d1:5c:1b:
4d:37:7d:1f:d9:25:f1:05:b2:48:ed:55:f8:3a:06:
06:5f:6b:67:f8:e9:5c:02:75:da:61:e5:42:62:0e:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:C5:61:68:4D:69:F0:C3:57:21:DA:2A:68:F7:55:36:EC:B2:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba5eb127-a921-3d36-9408-d8e6d4f4b7b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.68.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:24:4f:8e:3e:87:e3:cf:94:04:c9:36:c5:f5:b1:76:64:53:
e3:28:d9:11:e9:f0:d1:ef:a9:50:89:e1:2a:58:fd:ac:e7:c5:
e3:89:a5:5d:e2:76:5e:29:ec:ca:e9:04:c4:59:0a:9d:46:22:
99:24:7e:c1:01:ea:47:fc:4b:5f:f4:09:13:58:74:ed:80:17:
1b:99:fc:81:6f:fd:03:79:dd:4c:30:da:3f:ef:09:0d:f9:7e:
f5:f4:50:55:f1:44:36:a2:d0:6e:2a:7a:28:4f:a9:af:8f:30:
91:fa:de:3c:f9:04:f4:c9:25:67:26:a8:28:d5:6b:d0:a7:1f:
43:93:c6:af:9d:de:22:1c:0b:60:70:6b:aa:5d:b0:79:d7:d2:
49:68:61:74:40:83:b1:be:7c:63:bd:ca:28:23:6c:5a:60:24:
f1:6f:73:64:0e:dd:50:3e:5c:d2:22:c4:9c:4e:b6:8d:b3:30:
ad:3a:94:d1:35:55:7c:61:74:62:12:c0:92:2b:c3:9f:52:b1:
f7:f2:a3:c8:42:9f:9e:67:7b:90:55:a4:bc:b4:1b:70:7d:c5:
99:d6:db:69:f0:2a:15:c6:80:de:1c:5d:73:fb:a7:b1:29:40:
c5:4e:ca:89:99:ec:66:98:4c:95:ad:74:65:b5:c6:9a:71:63:
3c:b9:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:36:55 2026 by rpki-client