
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa
File: f78c02c4-77e7-344b-92b6-85a4ac10591c.roa (raw, json)
Hash identifier: KrCHBoZbl5m/GrFUtKZVPOr0TVQA4MiApXCuI5n0Kvk=
Subject key identifier: 29:5A:7C:9C:72:66:CF:A4:8E:63:64:91:18:C4:D1:36:94:DB:D5:CC
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EB9AC51225315C38C79588700
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa
Signing time: Tue 04 Aug 2026 13:00:12 +0000
ROA not before: Tue 04 Aug 2026 13:00:12 +0000
ROA not after: Mon 02 Nov 2026 14:00:12 +0000
asID: 28398
IP address blocks: 38.7.16.0/21 maxlen: 24
206.85.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b9:ac:51:22:53:15:c3:8c:79:58:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 4 13:00:12 2026 GMT
Not After : Nov 2 14:00:12 2026 GMT
Subject: CN=bbe68c2f-84e7-4d93-b452-eec136d2ea22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:79:65:18:f1:33:32:e9:8f:61:32:61:ad:
50:e2:4e:f7:4b:e4:1a:76:71:31:0f:64:69:39:74:
db:75:99:6d:2a:b7:63:66:dc:bf:33:42:71:61:80:
1c:02:f6:2a:43:aa:92:46:f5:4c:40:b8:73:d4:7d:
d6:3a:d6:e2:28:51:c8:00:dd:9d:ed:d4:81:b9:12:
f8:0a:ef:d4:75:3f:70:04:92:2f:9b:42:c4:3e:1d:
49:68:2c:8b:98:44:dc:54:7e:a7:46:db:4c:95:37:
a2:bc:ee:0f:b3:6a:97:ae:9c:e8:43:89:42:63:48:
d5:4c:a0:ef:05:2f:6e:1a:a3:37:47:86:00:8f:bc:
21:42:5d:46:95:3e:44:a3:94:00:a2:09:df:de:41:
24:fd:51:e2:eb:c2:3a:fe:14:f9:3c:17:28:ef:94:
fc:b1:bf:2f:9c:ca:bd:8c:4f:cb:76:f3:be:35:70:
2d:ca:25:a3:6d:de:f2:2d:87:e1:07:24:3e:5c:da:
e0:23:4f:3a:7b:e6:9a:34:55:02:96:77:0a:18:94:
fe:a4:7d:b6:50:30:03:4f:6b:c8:b7:f9:1c:ff:b5:
21:8a:c9:c0:6a:59:14:e6:38:e1:b1:28:42:20:4d:
76:9b:44:e9:63:36:9e:b4:dc:25:c5:03:cb:ad:5a:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:7C:9C:72:66:CF:A4:8E:63:64:91:18:C4:D1:36:94:DB:D5:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.7.16.0/21
206.85.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:0f:a9:4a:2e:88:96:16:ba:25:b2:f5:b6:99:04:53:0e:5a:
4a:f0:8b:50:8c:26:ce:d6:5d:ba:dd:02:3c:c7:e7:22:ef:c5:
9c:55:ee:66:40:83:cc:a8:ff:79:10:c8:dd:ef:b1:9c:20:14:
98:74:e9:70:77:24:ba:4a:6c:14:e0:29:6e:5c:64:02:e6:2d:
74:25:97:9d:b5:44:7a:0a:9a:3e:ef:25:42:c2:3c:42:13:73:
33:21:93:ec:02:4a:01:b7:7d:55:f9:98:46:c3:86:6a:09:de:
58:df:ad:a1:ca:47:3f:f1:73:b7:2e:96:e8:df:61:79:a4:69:
13:2d:bb:7a:3d:95:af:69:f0:db:34:e9:cc:eb:1e:8c:98:00:
0b:1d:a7:07:cd:ba:84:28:6c:91:3a:05:bb:f2:24:9c:d5:f9:
08:30:47:69:4d:ec:d6:0c:e9:c8:aa:d7:2b:12:c0:f3:90:b5:
92:24:47:6a:3c:44:0d:dc:6f:07:3d:c4:76:23:58:4f:be:d3:
04:37:aa:ee:18:ca:66:8e:ce:83:06:c9:97:41:b1:89:77:76:
b9:11:2e:1d:54:d5:49:5c:e3:63:dc:f7:23:c6:e7:a5:7d:ae:
bf:ed:65:f2:2a:df:da:3f:5a:6a:b1:48:c5:81:f3:c2:2e:47:
18:1a:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:58 2026 by rpki-client