
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c64e7d5f-9d04-373e-8c70-a1d1130ee880.roa
File: c64e7d5f-9d04-373e-8c70-a1d1130ee880.roa (raw, json)
Hash identifier: eZYrFBP14Rpzv3k+jsQ9SZv01RFOP6N5dFSRE81Emks=
Subject key identifier: B7:1E:D7:E6:4F:E1:AB:C4:E7:68:F2:B8:6B:11:D1:58:AA:D3:A2:76
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F03A84D350D62BDFEE1271900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c64e7d5f-9d04-373e-8c70-a1d1130ee880.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 269804
IP address blocks: 38.211.68.0/23 maxlen: 24
38.211.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:4d:35:0d:62:bd:fe:e1:27:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=3014bbb0-bf01-4e2c-ba55-8142e991a041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:1e:5c:12:03:3f:b3:64:6a:eb:7f:b8:b9:
e0:11:84:a9:d4:12:44:d5:c8:08:d7:04:a1:32:90:
75:0b:0f:b4:7f:3c:f2:99:65:d8:79:a2:14:d8:73:
fa:d5:a9:01:f1:b4:14:4f:ca:82:b5:3a:a0:db:88:
b8:1f:ec:57:bc:e8:26:4f:0d:d4:eb:6d:b6:0b:e9:
e0:d1:18:85:b1:8b:57:ad:d1:d3:a0:f1:69:07:55:
52:72:e2:59:db:7d:97:1e:cf:96:53:b3:29:fe:73:
29:67:bc:f3:8b:67:23:29:7b:3f:b7:09:da:83:76:
fa:ac:4b:19:9b:a2:24:3c:82:98:bd:e6:a2:dc:90:
50:50:ee:29:db:37:8b:a5:57:21:1b:12:ad:39:98:
82:e5:92:09:f4:ee:2c:33:78:57:ae:a2:0c:64:30:
7a:6f:1e:72:35:c7:6c:e9:3a:41:85:7f:b7:47:8c:
ee:da:92:d8:c8:3f:a9:19:ba:14:d2:d3:c4:54:01:
b9:33:f3:1d:3c:f2:03:15:5b:55:a5:39:70:1c:45:
3f:3a:2c:9b:7d:c4:ec:62:c4:43:c1:56:9c:bc:4a:
8c:33:82:4a:4a:10:94:06:67:d9:60:c7:f4:8b:f9:
80:3f:80:0f:8b:19:c5:da:fc:41:24:6f:0b:a5:d5:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:D7:E6:4F:E1:AB:C4:E7:68:F2:B8:6B:11:D1:58:AA:D3:A2:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c64e7d5f-9d04-373e-8c70-a1d1130ee880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.211.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:0f:18:49:b4:af:9b:61:24:cb:23:32:83:e3:10:e8:75:90:
84:9f:01:1e:0c:1a:33:8e:2f:c4:71:c5:ff:b7:10:18:8f:ea:
23:4d:8b:9e:a2:dc:8b:b6:74:99:88:1e:f6:61:70:dc:e2:50:
a3:d4:74:ed:ff:33:26:50:1e:18:01:e6:92:eb:c7:c5:3d:41:
24:3e:d2:29:99:11:11:d4:cb:e5:e9:70:89:10:e3:6d:72:85:
9d:aa:c0:69:a5:69:5d:d9:b9:bf:02:7a:a3:f2:a1:cd:85:75:
70:91:27:ee:fe:bd:08:84:8e:c6:f2:41:ad:ec:ca:f0:ff:88:
ea:13:a8:b7:de:da:9f:72:9d:51:40:de:fd:e4:68:81:6a:eb:
c3:8e:23:13:38:17:79:ef:7d:b0:47:80:61:b8:4e:13:34:ea:
f6:97:fa:b6:e0:7b:12:18:e3:02:5a:08:27:59:d0:5f:60:14:
a6:58:0b:aa:02:d7:ac:af:81:df:9a:d3:02:96:95:da:42:2c:
b1:64:eb:fd:ee:56:b5:6e:28:04:9a:dd:98:c7:e5:ed:71:85:
46:0c:9f:62:3d:a8:bc:bb:f7:d5:e8:72:27:8d:36:fb:a6:14:
63:34:2e:12:b4:e2:4c:45:9c:90:0b:1a:e8:74:51:06:8b:e1:
d4:74:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:30 2026 by rpki-client