
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa
File: fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa (raw, json)
Hash identifier: FUv/7MHP34jXNt8IdCj9zZEWwSndOyPqDDMDNtM+Qjg=
Subject key identifier: 34:C6:62:CA:9D:16:EE:6B:17:3F:77:20:0C:D5:35:E6:71:BA:E2:95
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F92087FEDDB42E97F493A3B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa
Signing time: Wed 21 Oct 2026 01:00:12 +0000
ROA not before: Wed 21 Oct 2026 01:00:12 +0000
ROA not after: Tue 19 Jan 2027 02:00:12 +0000
asID: 273893
IP address blocks: 38.20.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:92:08:7f:ed:db:42:e9:7f:49:3a:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 21 01:00:12 2026 GMT
Not After : Jan 19 02:00:12 2027 GMT
Subject: CN=1d9f7ff7-34be-4732-9d71-01bff10f8e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:90:c3:d1:9a:cb:ab:a7:f3:8f:ba:fe:3c:
a6:71:73:80:30:93:ff:7a:59:3f:ce:3b:ac:76:e7:
25:78:e4:06:b6:e5:18:cd:9e:54:d8:51:ec:2a:96:
05:ef:f4:9c:f4:31:14:0d:15:ae:ad:6f:fb:2b:5c:
bc:00:89:dd:60:ef:14:da:22:cc:ea:5e:ff:83:12:
e0:8e:2d:d0:80:ac:2a:e4:91:0f:de:02:6f:90:17:
76:a1:13:60:71:07:0e:ba:e1:f3:8f:61:3f:e0:5f:
ec:be:86:2e:ee:e6:c9:04:83:c5:04:37:f4:34:3b:
3f:ec:8a:3f:e8:4d:f2:4b:90:be:b0:1c:5a:13:15:
e4:10:d6:31:28:5f:00:e3:2c:e7:06:f0:a4:d4:1a:
4d:65:34:09:e0:7d:08:9a:04:92:0b:c0:d9:a9:f9:
7e:e9:7e:62:e9:ad:2f:46:23:a1:a6:05:24:19:b7:
0b:e8:ca:47:06:a7:b0:7e:66:03:77:27:ff:88:57:
d5:d9:96:70:41:8f:74:01:0a:a1:bc:9b:02:f6:99:
9d:2b:89:bc:e8:c0:0c:d9:dc:13:6c:71:ef:17:04:
6d:e3:aa:57:6a:5f:75:66:97:60:86:17:e6:e1:e0:
3e:1f:03:40:17:c3:ac:86:16:50:55:7e:6d:91:24:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C6:62:CA:9D:16:EE:6B:17:3F:77:20:0C:D5:35:E6:71:BA:E2:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.20.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:5c:2d:f5:cb:c5:29:54:c3:76:23:7a:68:04:44:a2:b3:17:
da:71:3e:6a:6d:2a:2a:8a:1c:a8:78:bc:0b:4a:03:5f:60:6a:
f2:ac:c4:df:5c:75:e9:89:3d:f7:4e:e9:30:13:3b:70:c4:6d:
6b:71:90:71:52:3c:f9:26:44:80:6d:09:13:10:11:24:b5:d0:
e9:b0:ee:d3:87:aa:75:16:35:b2:2e:bf:16:13:8c:90:e5:f6:
70:14:a6:a2:59:0b:17:aa:f8:e7:67:86:34:8b:f3:1d:73:df:
cb:f1:1d:54:70:d4:88:0c:d9:59:ce:a3:87:c2:33:e8:1c:ef:
62:cd:fb:dd:76:12:c7:a8:df:2b:de:80:13:d5:8b:fc:a7:41:
70:3e:50:72:5c:d8:64:32:09:a0:ff:0c:dd:24:ae:85:e3:b2:
34:88:1d:e4:c1:3b:d8:53:1f:13:61:ac:95:cd:87:75:5b:f4:
1f:29:0a:7c:83:89:28:64:5b:5d:8b:74:36:e4:24:d2:3a:fa:
6a:65:11:94:e8:fd:f3:1c:29:b7:b0:6a:4b:45:a1:80:c2:f2:
58:2b:e4:7a:b4:d1:e8:45:ae:22:57:4b:64:8b:7c:41:7f:08:
1f:0b:dd:dc:26:bc:3e:52:2c:2e:d4:04:fc:c5:33:77:fa:10:
db:02:06:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCH/t20Lpf0k6OwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk
MWQ5ZjdmZjctMzRiZS00NzMyLTlkNzEtMDFiZmYxMGY4ZTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI+Qw9Gay6un84+6/jymcXOAMJP/elk/zjus
ducleOQGtuUYzZ5U2FHsKpYF7/Sc9DEUDRWurW/7K1y8AIndYO8U2iLM6l7/gxLg
ji3QgKwq5JEP3gJvkBd2oRNgcQcOuuHzj2E/4F/svoYu7ubJBIPFBDf0NDs/7Io/
6E3yS5C+sBxaExXkENYxKF8A4yznBvCk1BpNZTQJ4H0ImgSSC8DZqfl+6X5i6a0v
RiOhpgUkGbcL6MpHBqewfmYDdyf/iFfV2ZZwQY90AQqhvJsC9pmdK4m86MAM2dwT
bHHvFwRt46pXal91Zpdghhfm4eA+HwNAF8OshhZQVX5tkSSLKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTGYsqdFu5rFz93IAzVNeZxuuKVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmNlMWNjZDgtZTExZi0z
ZWZlLWE0ODItNjFiZmUzYzIwZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhQOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5cLfXLxSlUw3YjemgERKKzF9pxPmptKiqKHKh4vAtKA19gavKsxN9c
demJPfdO6TATO3DEbWtxkHFSPPkmRIBtCRMQESS10Omw7tOHqnUWNbIuvxYTjJDl
9nAUpqJZCxeq+OdnhjSL8x1z38vxHVRw1IgM2VnOo4fCM+gc72LN+912Eseo3yve
gBPVi/ynQXA+UHJc2GQyCaD/DN0kroXjsjSIHeTBO9hTHxNhrJXNh3Vb9B8pCnyD
iShkW12LdDbkJNI6+mplEZTo/fMcKbewaktFoYDC8lgr5Hq00ehFriJXS2SLfEF/
CB8L3dwmvD5SLC7UBPzFM3f6ENsCBik=
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:17 2026 by rpki-client