
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d869f1b7-aee2-3f29-982b-5bb9def9e93f.roa
File: d869f1b7-aee2-3f29-982b-5bb9def9e93f.roa (raw, json)
Hash identifier: 5JFi+geaprm8R0Z1xyfVl7kpRmFNGixIhxP0RxYXc/Y=
Subject key identifier: A8:22:25:DD:86:26:5D:D4:DB:A4:32:25:13:0F:D9:75:64:13:DD:B6
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F5A332EA65CD50A6D54A59000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d869f1b7-aee2-3f29-982b-5bb9def9e93f.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 137535
IP address blocks: 38.47.192.0/18 maxlen: 24
38.181.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:33:2e:a6:5c:d5:0a:6d:54:a5:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=d1e94ebf-f951-422e-8ebc-1d8d6fea565c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:3b:34:b4:01:11:dd:f0:e5:1a:7b:4e:64:
92:ee:72:5f:5f:a9:a6:fb:23:d0:76:8b:8d:f7:eb:
17:15:c5:34:72:22:ab:71:c0:ce:23:fd:cc:69:35:
8f:1f:7c:6a:8a:c6:c5:ca:55:b6:65:f3:e1:d9:e0:
83:65:41:02:ce:d3:8f:98:99:a7:3a:3f:6c:5c:80:
a7:ad:ba:30:39:f1:99:c3:98:a5:62:6d:7b:0d:e7:
97:89:7b:d8:ea:e9:bc:5f:a7:eb:ca:5a:38:6c:92:
e6:46:6d:27:96:0e:ca:50:ce:27:56:ba:4a:e5:38:
53:a9:4f:76:1b:91:99:67:99:9a:de:7c:59:c9:ea:
a8:a3:9c:83:a9:92:8d:2e:7c:80:10:86:a4:df:92:
f1:6e:1e:c7:2c:36:81:07:51:9f:ae:07:c5:8a:c2:
7c:f9:63:8a:53:3f:a4:89:12:29:13:b2:f5:35:f4:
0b:de:c7:fa:f5:c9:e4:06:a5:e5:7b:5c:b6:18:a0:
92:9e:0f:c1:b5:0f:68:d7:15:f6:6e:0b:a6:8d:c3:
b7:78:c7:a2:e2:dd:59:60:45:6d:51:76:37:8b:3d:
0b:74:61:78:b4:ee:5d:a1:85:50:0d:e3:79:c1:4c:
a2:85:64:6d:fb:49:49:77:ec:12:0f:9f:0c:cd:e8:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:25:DD:86:26:5D:D4:DB:A4:32:25:13:0F:D9:75:64:13:DD:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d869f1b7-aee2-3f29-982b-5bb9def9e93f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.47.192.0/18
38.181.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:94:60:e9:d4:cc:97:6c:61:e6:cf:f9:20:b7:d3:f6:b5:e9:
78:61:57:dc:c7:f7:ad:2c:d0:dd:b6:ca:25:52:47:d7:ec:ee:
c6:bf:a6:38:4e:d6:39:e4:86:4c:4e:f0:d9:c6:56:f1:43:9d:
a7:ab:7d:3e:90:b1:1b:ed:4a:2b:1a:7d:39:b4:6d:39:4b:48:
09:ac:18:27:5f:fc:00:c2:b3:5f:07:39:35:9e:27:1d:59:7e:
dd:de:de:71:b4:9f:cc:63:f6:d6:5f:b5:bd:9b:e7:14:92:1d:
34:b5:42:dc:69:91:5d:63:ba:04:0f:a6:db:b9:c0:a4:5f:49:
71:6e:98:c8:72:49:0b:6b:bf:fb:df:f3:7d:ef:f2:eb:b2:84:
0c:a1:83:6f:93:cf:94:bf:ac:ab:fc:46:b8:9f:36:d5:4d:03:
bc:7c:6d:44:43:60:55:8f:ca:41:ce:e1:0b:5a:cd:ff:b4:fe:
20:6f:55:4d:56:90:e2:3c:29:d9:f1:76:5e:9c:99:ee:4a:de:
3c:1c:82:23:ee:ce:63:c5:71:9e:7b:b0:3b:5c:99:5c:cd:9a:
c8:d4:a7:92:ee:ce:d0:08:4d:59:eb:cf:c5:42:11:5d:43:8e:
96:50:e0:44:01:c9:d6:c8:b7:87:78:66:e0:5e:6c:05:20:79:
44:fd:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:14:10 2026 by rpki-client