
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
File: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (raw, json)
Hash identifier: EjK8q39M9VQrL5vtx4Duf6w7VH9beXqFLbRvP9oP8Fs=
Subject key identifier: B5:3A:73:3A:88:E4:89:3E:EA:42:00:23:DB:31:F1:E0:43:E8:6D:F6
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F4328584E1B799440AF2E7ABB4302B600
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
Signing time: Mon 08 Jun 2026 21:00:12 +0000
ROA not before: Mon 08 Jun 2026 21:00:12 +0000
ROA not after: Sun 06 Sep 2026 21:00:12 +0000
asID: 33039
IP address blocks: 142.248.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1b:79:94:40:af:2e:7a:bb:43:02:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Jun 8 21:00:12 2026 GMT
Not After : Sep 6 21:00:12 2026 GMT
Subject: CN=6fe7b693-65bb-4c5b-acbd-a13c53ea0b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:de:ca:10:56:96:70:62:8b:97:09:7e:94:7f:
ce:b8:ee:ca:88:01:cf:d6:c5:d7:c0:c0:6e:77:04:
76:fc:32:a7:ae:19:b3:18:18:2e:33:d9:48:03:8c:
1a:41:f0:88:5c:e3:f6:13:1d:59:80:f3:d4:77:d5:
ad:f1:2a:fc:53:36:73:b3:43:ff:9c:2e:cf:52:58:
e4:cd:86:4d:26:36:5b:06:25:a7:8d:ae:8d:7b:8a:
38:40:a8:75:ff:63:1e:d4:0a:b4:8d:c6:e2:80:df:
ec:29:ba:f0:5a:15:2f:c1:22:96:dc:44:03:bc:e5:
e4:0f:de:ae:fd:48:d7:39:03:fc:3b:9d:25:39:75:
b4:5e:16:13:00:0a:ef:97:37:37:53:cb:d9:36:52:
2e:3e:bc:2c:46:b4:82:31:a4:06:56:36:4c:32:84:
d8:94:39:54:30:67:b1:e1:21:a3:2e:a7:be:82:e2:
1b:a0:ed:1f:4f:af:fa:d7:38:76:2a:b6:12:2a:07:
13:cf:3d:fe:b8:e6:c5:c4:ee:76:05:af:be:ea:df:
cb:9e:50:3b:d5:54:7d:8d:44:7f:b9:fc:89:a2:a0:
d3:bf:ab:68:0c:a3:38:bc:b2:0d:c8:24:dc:a2:36:
10:68:0b:c9:4a:d5:a3:86:57:ab:ba:f4:b6:4d:bc:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:73:3A:88:E4:89:3E:EA:42:00:23:DB:31:F1:E0:43:E8:6D:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:42:bf:f2:4c:ed:58:10:d7:59:27:6c:99:c1:04:f6:8a:89:
48:f2:1f:78:94:72:b2:1b:f2:0b:f8:3e:f6:78:3f:1b:2e:45:
6c:3e:6f:e7:78:f2:53:5c:d4:a3:21:a6:4e:bc:d5:50:9d:35:
61:48:c9:a7:75:a4:5b:b1:f5:20:61:fa:48:33:0d:96:bd:13:
a3:2e:af:63:56:0a:5e:b6:65:4d:e4:f8:67:07:dc:22:16:fe:
25:1d:27:5d:cc:8c:cd:59:8b:ff:f1:93:d5:ab:c4:5b:6c:3d:
da:48:e6:3a:3a:03:ff:ae:8f:03:ab:79:af:95:ee:68:2e:20:
3d:c1:cd:76:a0:df:96:4c:86:ec:85:76:b3:3c:0e:d6:4b:37:
db:4a:c9:56:cf:52:09:be:55:17:d3:ab:0f:db:d9:5b:74:8e:
8f:61:16:5c:d1:52:f1:ad:10:6f:13:86:9d:19:03:e3:bf:2c:
f6:c5:5a:86:b5:86:c4:59:62:f1:96:24:e1:c9:c5:90:da:f3:
f6:f1:ac:7f:2e:7e:4d:80:9f:d3:18:23:9c:3b:7f:60:0f:1e:
65:6e:7e:04:83:70:de:53:53:cb:5b:0b:f5:7a:59:51:53:26:
89:32:a2:fd:b9:48:8a:66:fd:26:c3:b7:23:8c:4a:1a:01:d0:
e4:bf:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:07 2026 by rpki-client