
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9d17ec5-9bbc-3dc0-9d0d-226493c641e7.roa
File: d9d17ec5-9bbc-3dc0-9d0d-226493c641e7.roa (raw, json)
Hash identifier: Yr3a2cvZWxjcktbEQDr5W21RTClh2NDwxxYzuCQoiZo=
Subject key identifier: D9:B8:BE:BC:A8:6D:65:52:6C:D2:39:DC:A7:ED:5C:7B:D8:0C:64:51
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F1732487BA5F8FB2AFBDCEBC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9d17ec5-9bbc-3dc0-9d0d-226493c641e7.roa
Signing time: Mon 07 Sep 2026 01:00:11 +0000
ROA not before: Mon 07 Sep 2026 01:00:11 +0000
ROA not after: Sun 06 Dec 2026 02:00:11 +0000
asID: 28467
IP address blocks: 38.225.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:17:32:48:7b:a5:f8:fb:2a:fb:dc:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 7 01:00:11 2026 GMT
Not After : Dec 6 02:00:11 2026 GMT
Subject: CN=056579d0-6f91-49cb-8a0b-0cb756541472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:b2:04:7a:6f:ce:19:87:e7:95:c0:7f:6e:
1b:e5:60:7f:6b:a4:be:b5:e3:67:f4:99:1b:72:41:
59:18:db:cb:77:12:9a:42:8d:ea:e8:06:28:6f:bf:
04:1b:11:a4:c5:c9:fb:82:48:5b:e7:61:bd:12:91:
e9:0c:db:8f:6a:6a:8c:c3:2d:c1:56:1d:3f:d1:95:
7a:2e:31:9b:b7:4c:5f:f6:44:e3:9d:e9:13:5a:eb:
be:57:63:47:43:ce:68:e0:a1:48:5b:88:24:57:2b:
f0:29:82:14:bc:8a:37:44:1b:60:f9:4c:58:37:94:
1c:46:d9:87:db:04:b7:58:d0:95:91:e2:d5:98:90:
72:1a:fc:d6:3e:c1:d8:2f:a9:7c:a9:30:46:b5:29:
20:42:c4:2f:35:3f:25:80:13:25:ed:92:66:e6:89:
5c:ed:bb:ae:02:2d:03:ca:04:df:8f:93:76:71:27:
ba:ea:81:c6:d2:6c:34:bb:99:68:05:6c:ee:39:a9:
5b:33:83:eb:50:a2:66:81:6b:6c:6c:2d:c2:f1:fb:
51:75:14:73:b1:77:ae:31:db:55:28:0b:c5:9c:97:
00:f3:bb:6d:1f:fc:77:f0:2f:43:a7:d6:89:12:db:
76:26:d3:f3:e1:f9:28:c4:c9:b1:1f:3d:77:dc:eb:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:BE:BC:A8:6D:65:52:6C:D2:39:DC:A7:ED:5C:7B:D8:0C:64:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9d17ec5-9bbc-3dc0-9d0d-226493c641e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.225.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:14:fe:49:5f:e3:1e:fb:f1:d2:9c:f3:a6:51:0b:5a:33:c4:
a6:9c:61:9b:da:53:59:a4:c1:f6:ff:32:1a:1d:4f:56:78:d6:
12:68:ef:19:f9:de:e2:b7:4d:2d:96:1b:6d:da:21:14:eb:44:
96:cb:f3:46:60:ae:88:e9:1b:b2:c1:90:ba:58:62:c3:f4:20:
ad:7d:5c:b4:ff:66:ce:9f:27:01:16:7a:55:5a:03:d0:84:a7:
54:26:99:3a:1d:55:64:b4:38:c6:46:c9:20:44:3c:82:59:f8:
56:ea:67:b4:41:95:14:8b:28:05:05:78:19:7c:41:33:30:0a:
fe:af:a2:50:c5:ee:4f:94:fe:cf:d0:54:2f:18:dc:0e:c6:02:
61:ec:15:60:c9:25:11:b1:f2:ee:0b:20:45:92:28:e8:9b:54:
b3:32:c2:66:df:a1:58:fa:45:dc:e4:60:d7:f7:d6:84:6d:e4:
25:6b:bc:f9:81:14:9a:dc:69:56:f6:30:e2:5b:6d:21:8d:59:
e7:ae:db:4d:11:e4:55:8a:cc:2d:f1:d6:14:45:dd:76:83:1f:
0b:be:94:3b:f9:8c:4d:c5:91:0b:8d:e4:df:42:46:55:5b:f1:
95:84:c8:29:ee:ac:ef:9d:b4:25:4b:a4:6f:ad:f6:fc:42:e6:
7f:ee:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:41:33 2026 by rpki-client