
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa
File: db717c4d-e5e9-3340-ad9a-893770267318.roa (raw, json)
Hash identifier: SZhBKrPBU6mCennnpva9Uecqudh/quQoj54frosPEOQ=
Subject key identifier: 13:91:55:F7:CF:B8:A6:8F:3F:31:2B:E2:1F:60:D9:84:5A:EA:FD:AA
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F58CD64237A71DC8424F6F800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa
Signing time: Wed 30 Sep 2026 13:00:13 +0000
ROA not before: Wed 30 Sep 2026 13:00:13 +0000
ROA not after: Tue 29 Dec 2026 14:00:13 +0000
asID: 56376
IP address blocks: 38.88.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:58:cd:64:23:7a:71:dc:84:24:f6:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 30 13:00:13 2026 GMT
Not After : Dec 29 14:00:13 2026 GMT
Subject: CN=74b5c105-10ba-44fa-9699-b428c4db1d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:f3:f4:ab:28:9d:0c:be:1e:7a:38:15:54:
32:51:b5:96:2c:6e:48:ed:4d:50:4e:0d:66:46:88:
3e:7e:1b:93:04:a7:79:78:57:16:5d:14:a1:07:db:
39:ce:65:34:9f:7a:a1:2e:1d:e6:0d:5d:3a:d8:d3:
c3:ec:d0:0f:c5:44:90:d6:bd:5d:60:86:47:5a:3a:
18:c7:33:99:07:d7:76:34:10:56:63:f3:dd:d5:b0:
35:d7:43:ba:d3:8a:be:2f:7b:21:4a:9f:2e:89:02:
0d:06:de:14:66:2b:7d:01:a7:c9:45:d5:9f:26:53:
9a:eb:1d:d7:ca:ed:45:c4:c8:7f:1a:99:3e:76:bf:
e0:76:84:55:6d:3f:6f:5e:e3:64:b1:80:97:24:61:
dd:52:55:47:b0:6c:91:4a:8a:2d:26:e4:8d:fa:64:
a3:f8:44:9f:de:63:24:61:e7:b3:1d:0b:c5:a2:87:
62:42:6c:67:57:16:ff:69:2b:6f:80:94:e4:6d:2f:
8f:e7:85:59:56:4b:60:42:aa:1f:1a:20:ce:fa:a0:
e2:1c:d3:d0:8d:b8:05:ed:72:6d:47:14:1b:9f:db:
7a:ee:32:ac:e7:05:7f:00:92:f3:0d:bf:22:49:62:
a2:9f:97:a3:09:39:15:b9:f4:44:bc:5b:59:e2:5f:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:55:F7:CF:B8:A6:8F:3F:31:2B:E2:1F:60:D9:84:5A:EA:FD:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db717c4d-e5e9-3340-ad9a-893770267318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.88.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:1b:68:14:d9:ee:66:b3:e2:78:cb:fe:73:fb:eb:3f:b0:23:
16:a8:1a:cf:aa:52:64:02:5d:31:36:81:09:c6:ad:a8:40:6f:
8a:7e:5c:e0:88:26:a5:a4:c7:0c:a3:5a:26:b4:5d:e7:04:92:
e8:60:d7:80:ac:1b:8d:80:ae:2b:1b:91:2f:f0:4a:8a:8c:23:
8b:01:9b:32:ca:c7:52:12:aa:63:51:9c:e6:1b:45:15:df:01:
a4:f1:47:8e:4f:a4:b9:62:d4:32:78:2d:de:fb:97:38:a7:64:
08:72:e6:63:a2:1c:4f:c6:e1:6d:00:98:71:5e:e3:aa:5e:ea:
ca:e7:64:c6:0f:88:59:c8:30:f1:ce:ce:0a:bf:2c:9d:4c:67:
89:29:7d:04:60:89:09:ff:a0:b5:e1:f6:a0:ca:c6:ac:38:fe:
21:3d:04:dd:ae:04:f5:29:5b:01:a6:ea:8b:ca:81:21:98:1e:
fa:61:df:94:0e:41:fd:4b:eb:31:c7:a0:e7:78:0c:47:c3:2c:
5c:29:e0:e7:ce:51:c8:63:03:90:54:3d:45:bd:6c:ae:59:0b:
31:c5:cf:48:77:57:c7:e2:99:5b:44:3d:3f:41:27:d4:7d:79:
43:8c:01:b4:4c:c3:37:1e:d6:d7:e6:6d:da:b6:41:a7:fa:23:
dd:d5:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:09 2026 by rpki-client