
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa
File: ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa (raw, json)
Hash identifier: nCmevz8Wl3J5SQ1zMNHuXZGStw3879c8t39ZKakGjXY=
Subject key identifier: 4C:A0:C3:5D:32:02:62:C5:63:A9:F2:DA:03:A1:7B:11:37:47:1A:12
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F0AA2278F5B5749A8957883EC
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa
Signing time: Wed 02 Sep 2026 13:00:12 +0000
ROA not before: Wed 02 Sep 2026 13:00:12 +0000
ROA not after: Tue 01 Dec 2026 14:00:12 +0000
asID: 271612
IP address blocks: 38.3.172.0/22 maxlen: 24
198.242.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0a:a2:27:8f:5b:57:49:a8:95:78:83:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 2 13:00:12 2026 GMT
Not After : Dec 1 14:00:12 2026 GMT
Subject: CN=aeaf4b95-b5f6-4bd7-91ec-a3fc4b47ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:3c:dc:8a:34:02:8b:18:a3:78:6d:04:6f:
23:49:e4:50:c2:89:7e:8c:03:2a:0e:3e:03:45:08:
2c:33:d4:18:2f:ef:89:f4:06:55:77:07:9f:e6:68:
00:c1:8a:fd:e1:03:de:7e:9e:7c:95:2b:d7:16:8e:
f5:24:ed:a9:f2:89:d5:bd:bd:57:10:ab:59:f0:dd:
f0:30:8c:78:d2:b7:a4:e8:0b:3e:a6:3d:d1:df:2f:
8d:d2:eb:27:a3:56:4e:5d:da:bc:5c:66:44:16:c3:
47:df:0a:1a:42:07:93:d6:fe:9e:13:3a:bc:c3:13:
03:be:f2:70:02:0a:a4:8a:a3:b8:9e:1d:27:af:c6:
a7:83:b1:2e:26:fe:68:dd:0c:73:63:29:e8:97:a8:
bc:84:47:70:95:51:5b:fe:6e:5a:69:a6:02:87:f2:
8f:29:68:a4:a7:61:94:69:0e:5a:a2:fb:d9:bd:ee:
78:41:f8:93:dd:f3:93:c9:5f:db:9b:7b:8c:d2:03:
25:83:f2:91:97:58:52:22:07:cf:81:ba:e2:b3:11:
98:0c:4e:46:c2:90:9e:4c:13:02:ea:1d:50:63:ab:
37:c8:b2:09:02:2e:98:48:b1:1c:f2:cf:76:62:9f:
65:83:20:17:27:bf:bd:bd:94:d4:79:f3:b7:3b:5d:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:C3:5D:32:02:62:C5:63:A9:F2:DA:03:A1:7B:11:37:47:1A:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.3.172.0/22
198.242.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b7:46:99:81:a8:f2:9a:e5:b7:58:a6:df:40:e3:64:e2:94:
55:58:7c:c8:8a:1c:07:f6:95:cf:aa:f8:69:c5:a0:d2:54:d1:
a3:12:9a:90:13:2a:81:90:3b:29:45:b8:bb:55:2f:4a:17:94:
dc:0b:43:5d:0e:bf:dc:d4:77:d7:3c:3f:59:a4:99:f0:10:d3:
49:3d:93:d1:15:8c:a9:17:13:0b:f3:18:40:a3:9e:1f:3b:93:
dc:8e:ae:67:fb:02:d0:9d:94:ad:ac:31:bd:51:72:46:4e:89:
67:c6:99:ec:7f:5c:49:b4:51:2d:26:9f:0c:94:c2:2f:7f:0c:
4b:fc:7e:40:ff:1b:d5:45:82:53:70:af:07:5a:5c:8b:71:f4:
6d:79:06:50:c5:f4:d2:60:16:03:cf:09:47:da:64:1d:e7:10:
fe:5b:89:20:d0:e6:a7:2a:2d:a0:84:13:1e:6d:bc:6e:32:27:
73:c8:1f:24:ca:4e:d6:fd:c0:87:d6:b2:d2:31:2c:34:c1:51:
9f:d9:34:eb:5e:7d:39:64:1d:0a:ff:93:31:f8:f7:14:ca:5c:
2e:78:fa:81:59:98:54:98:a6:24:09:28:62:4e:30:d9:6f:77:
e1:7e:96:6e:85:a5:07:1b:f4:8c:3a:58:38:5a:db:b8:b2:ce:
16:0c:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:54:53 2026 by rpki-client