
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa
File: a958d35b-5bff-30c1-9a51-b65ae1791370.roa (raw, json)
Hash identifier: k38sIkZfHyZTZu+eqYJWxk3E48aoFwAQu2GXtTW/ZZs=
Subject key identifier: F2:C7:37:F7:BD:0C:BE:69:36:3B:2A:7A:96:FB:85:49:6D:43:C4:8B
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584E104ED876BC36CC05E6DEB980
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 396253
IP address blocks: 149.19.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4e:d8:76:bc:36:cc:05:e6:de:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=e8b1d6dc-d012-47d2-9ba7-6995ff96ac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:aa:63:7a:a1:b1:69:c1:23:d4:d7:ee:5c:
24:49:20:c3:06:a3:8b:e7:81:81:0d:94:43:1b:ae:
ac:ea:20:e7:61:c6:81:1e:06:8d:6d:be:f6:88:63:
23:24:98:48:cc:94:5a:a0:7f:de:80:e5:19:f3:32:
2e:cc:27:e3:29:f1:4a:fa:cf:0f:05:05:95:e1:fc:
c8:1b:05:34:6c:94:3c:c1:4c:10:5d:31:c2:04:a6:
5d:6b:7a:2e:c8:c4:d5:82:ff:c4:bd:da:95:3f:fa:
f0:3e:1b:c6:a1:3e:4f:9c:ef:70:b5:37:ed:7f:79:
db:0b:5b:ce:80:e5:93:0d:06:1e:35:94:55:6e:2b:
02:9e:3a:e9:8a:d7:4d:17:1d:2d:9e:42:12:6f:73:
ea:58:55:3c:32:1b:58:cb:20:43:ed:be:e3:2d:e4:
0b:50:cb:1b:02:62:46:d3:76:39:bf:d0:f6:48:b1:
45:f3:4d:1e:94:02:13:68:8e:c2:8c:4d:a0:52:0e:
e8:24:9f:65:64:28:3b:de:55:a0:c8:2f:cc:45:78:
f9:de:be:4c:1c:84:5e:d2:47:cc:36:58:5a:d0:47:
a2:07:bb:cf:cb:01:e8:c7:75:e9:e4:f1:78:2b:49:
9e:7d:cb:38:d3:da:a3:64:50:e8:0a:ca:5c:63:5c:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:37:F7:BD:0C:BE:69:36:3B:2A:7A:96:FB:85:49:6D:43:C4:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c1:2d:92:5d:69:42:a1:13:8d:8a:cc:a9:a9:ea:ce:a8:29:
f0:75:5d:91:85:60:2d:27:4d:b0:44:6b:0b:7e:ff:05:89:e3:
22:21:5f:04:88:10:bb:4c:30:58:b8:b2:09:e1:39:7e:cf:e0:
71:ff:5a:24:1a:13:8d:2a:19:b8:3e:39:94:f4:bf:76:2f:f4:
b7:24:d7:fe:75:4d:1f:c6:59:55:5e:95:84:fc:3d:9c:24:a7:
e6:7a:45:2d:bb:8a:f5:a2:42:f3:d7:88:08:b8:87:3a:8d:8d:
08:13:9b:b2:28:c3:fd:62:47:44:21:fe:6b:16:85:60:11:7d:
c4:8a:d4:d2:72:41:d8:53:78:8b:02:29:aa:c7:f0:88:d2:19:
c4:58:20:d4:0d:2c:2a:22:35:86:62:73:bb:31:b6:63:1a:58:
87:f3:11:0a:1e:d8:cd:78:4f:10:cf:fa:df:03:2c:2d:ce:27:
fe:45:eb:02:81:8d:f4:43:a7:08:3d:77:eb:f2:26:f4:54:f0:
f4:68:71:99:f3:68:f9:3a:84:5e:5c:1e:67:ae:bb:e3:13:ce:
32:53:83:5c:95:ca:12:12:95:75:db:f4:56:d5:d6:73:ec:70:
ec:3c:a9:48:a0:dc:40:ec:86:a9:7b:16:84:24:61:9b:8a:79:
38:77:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:22 2026 by rpki-client