
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa
File: e20b336c-beb8-3213-bee8-1f4676f34006.roa (raw, json)
Hash identifier: k3hhUfiQY31G0kKcXB6bl6OCl7JaTWxcA8Y4lEd4+lk=
Subject key identifier: 34:4C:D6:FD:E3:F0:1B:D7:64:CD:21:C2:FA:EC:34:F1:A0:10:30:5C
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584ED431DD142AD2377543FD28C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 141753
IP address blocks: 38.98.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:dd:14:2a:d2:37:75:43:fd:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=b87fabd3-3238-499c-af55-f21475d6842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:11:08:26:df:f1:1f:81:a8:d2:18:d2:79:
81:ca:0d:9f:46:af:b0:f0:fa:cd:56:90:ce:33:26:
01:3d:da:bf:1b:a6:1c:a6:6b:f6:ac:60:e1:40:d7:
e4:aa:5b:c6:76:63:f2:99:df:9e:2e:fc:66:c5:f2:
47:0e:0c:a2:1d:56:09:89:32:86:ce:31:2e:ed:4a:
29:b5:b2:8e:af:d4:0a:06:e1:bc:08:83:0f:01:aa:
30:f4:b3:a8:32:2f:10:dc:ed:06:92:26:6a:6d:c8:
86:d1:1e:b5:44:f8:2f:2e:c3:b5:10:0a:7e:2b:d6:
ef:7f:cf:c1:48:e1:73:a0:9c:a3:34:07:4b:61:a9:
4b:71:df:ca:6d:5f:8d:ca:29:23:55:69:2f:77:98:
00:89:47:1c:67:95:fe:24:98:37:59:4e:c1:99:c4:
5b:26:57:7c:c8:59:01:5f:de:3b:18:72:6e:bd:43:
7a:71:53:60:e9:6b:bc:2d:31:b0:6b:e6:67:9c:fd:
f4:9e:19:5c:95:74:08:14:8d:40:b0:79:f7:15:0b:
e6:9c:b5:e1:eb:7a:be:51:1e:d4:4d:6a:c7:42:17:
58:c4:4b:26:01:c4:9d:d9:f4:c9:9f:b4:38:7f:ca:
52:a0:83:e2:6f:43:84:57:f6:97:ae:9a:96:f0:e1:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:D6:FD:E3:F0:1B:D7:64:CD:21:C2:FA:EC:34:F1:A0:10:30:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.98.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:8e:cc:bd:8b:ed:3c:0a:1b:5e:3f:51:4d:fe:04:58:99:a5:
13:23:63:8e:b0:8e:01:2b:5e:bf:05:c3:7a:71:03:54:bf:a4:
8a:4e:f2:2f:39:df:bb:4a:7b:30:65:ff:69:18:e5:c1:fc:7e:
07:0e:1a:1d:db:4f:b3:27:10:01:da:96:12:aa:13:37:61:54:
c9:6a:fa:41:00:d0:69:60:af:26:ce:a3:6a:07:68:62:b9:74:
70:3c:3e:58:60:f9:1b:79:aa:5a:76:af:f1:a0:04:95:88:fc:
a6:04:6f:65:c6:ee:c0:fc:13:58:69:07:ce:e9:bf:c6:c1:3c:
7e:74:dd:9a:ca:b0:8c:a3:db:8d:fd:23:21:63:fe:ab:7d:1a:
f7:ce:16:ed:d0:1b:ec:9b:32:2a:0c:23:bb:77:70:a7:84:ee:
2d:cd:fa:ce:29:f7:d4:1b:bc:65:f2:30:0d:d8:db:c7:1e:30:
3b:27:d9:71:48:81:5a:03:bb:36:f1:2d:ca:81:2a:e9:17:fa:
8a:95:a1:fa:3e:8e:f0:15:2b:28:08:4a:02:7a:01:58:55:81:
5f:e4:29:06:d7:15:ef:d6:6d:f9:a3:e4:71:d3:42:32:2e:58:
8e:35:ed:c4:44:ee:17:fc:4a:89:a5:8c:45:65:5a:e4:3a:77:
24:54:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:03 2026 by rpki-client