
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db6f5c8e-d10e-3186-95f8-6e755e65d5b9.roa
File: db6f5c8e-d10e-3186-95f8-6e755e65d5b9.roa (raw, json)
Hash identifier: bRB29iOOrV+ZMl5b18jFrqWEnrQbnJHg45u/+uQG6PQ=
Subject key identifier: 36:9A:90:10:1E:E8:CE:6D:CE:5B:CA:98:F1:7E:BC:2D:88:3E:C5:40
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F6292B0B2D80306F86BADA478
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db6f5c8e-d10e-3186-95f8-6e755e65d5b9.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 135407
IP address blocks: 38.249.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:b0:b2:d8:03:06:f8:6b:ad:a4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=87aca7b5-0b18-4887-9ee2-f8b890e04f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:ed:14:c3:75:36:31:5d:46:24:06:4b:ab:
88:28:69:03:fa:3b:db:5e:44:45:c4:04:5f:1b:b9:
2c:fe:05:8a:22:d6:a6:d3:c8:08:58:2a:b1:51:34:
53:c6:49:5a:97:cb:53:88:30:cf:83:71:60:81:1d:
29:9d:5d:0d:67:0a:90:14:27:8d:a1:fb:ed:5e:2f:
5f:5f:43:cc:93:8e:28:08:77:fe:fb:b4:d0:6f:17:
3e:16:5e:a7:4b:76:91:5c:c3:22:0f:35:dc:a5:85:
d0:ff:fc:01:3c:8b:da:b6:5c:26:43:cd:9b:63:68:
cf:46:71:70:03:43:db:94:f0:60:db:60:44:80:e3:
d2:55:fe:dd:04:d3:20:6e:4c:6e:ed:80:89:91:f1:
25:bd:46:a7:94:5f:b8:bc:1a:5c:39:96:e0:11:f2:
94:48:a3:50:20:f2:c0:7b:51:5e:f9:23:f0:ad:b6:
52:1b:a3:3d:da:21:45:3a:e5:52:3a:58:a0:2e:55:
b4:02:b3:b2:b0:ae:e8:c4:62:eb:8a:20:8d:5a:a5:
31:e4:2d:53:62:be:22:5b:4b:d6:bc:75:34:8a:aa:
61:bb:01:8f:a5:af:d4:2c:99:ad:3f:05:2b:4d:8f:
cf:f9:9a:37:e3:0b:10:19:1a:8f:06:33:69:72:22:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9A:90:10:1E:E8:CE:6D:CE:5B:CA:98:F1:7E:BC:2D:88:3E:C5:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db6f5c8e-d10e-3186-95f8-6e755e65d5b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.249.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:6a:d2:20:5f:99:05:fb:a0:75:a3:e3:3f:a3:1a:4d:88:c5:
62:d2:36:31:c6:03:13:b0:6b:fc:36:f9:de:b3:21:52:8d:ed:
9e:46:24:58:35:7f:36:ac:fa:cd:06:c8:5a:50:67:54:91:6e:
16:d7:97:5f:bb:73:bb:11:30:a9:43:46:a3:e3:3b:28:48:ec:
f6:77:10:e2:70:45:24:a8:41:13:29:32:e0:47:6b:81:74:6d:
6e:9e:09:9e:44:f9:d3:54:d1:e6:05:d5:75:1b:c0:71:ad:18:
db:a6:25:32:2d:16:bc:00:e0:3d:27:41:ad:ad:a7:b0:84:2a:
5f:20:00:6a:f8:6c:8c:c5:13:ae:48:b9:26:c7:f3:1a:08:d0:
e8:60:fb:04:d6:e3:c8:9e:20:97:fa:9e:32:35:7a:a5:26:2d:
75:15:e7:6f:c9:3f:e0:cc:e3:6e:3d:8c:0b:44:64:36:c4:cf:
3f:8b:f2:57:e6:f5:6e:d5:d8:1a:95:d0:33:e6:45:b0:ec:88:
0d:39:09:85:d4:a7:e2:cc:76:ea:29:d0:49:70:23:32:ed:0b:
20:96:55:9e:88:c6:52:a7:3e:2f:25:7a:f2:7c:f4:50:68:bd:
1b:d7:03:de:5b:ea:20:41:b9:9b:a8:b6:79:86:79:6e:d3:36:
6b:9d:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:03:13 2026 by rpki-client