
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
File: 84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa (raw, json)
Hash identifier: 3fP1u2+runALcnXIC8kRGYeEb5+jmnqc+R8jrQBn5V8=
Subject key identifier: 21:E3:46:3F:20:AB:EC:30:D1:7E:81:27:5E:35:FA:C6:3A:95:4D:AF
Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial: 010D0C9F4328584EA78751392F33EF569908ADC0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11260
IP address blocks: 148.64.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:51:39:2f:33:ef:56:99:08:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9f8560ac-283a-49d8-9b62-84cf1bb0f982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:9c:76:a6:3b:28:08:91:7f:1c:ff:08:9d:
30:87:c8:25:8a:8d:40:e4:ec:5e:df:9a:a4:b9:e4:
43:82:66:a2:77:0c:e2:51:92:37:88:ea:d1:0a:a7:
eb:47:df:d4:21:b6:69:40:b6:3b:fd:92:07:95:48:
55:89:85:0f:13:1b:03:b3:3d:df:5e:96:45:4f:d8:
b9:21:50:5d:d7:4d:4a:96:55:55:73:52:fb:04:ba:
a6:6d:c6:89:ba:3d:53:5f:7b:29:95:5d:73:0d:01:
04:ee:b3:9a:57:8e:9a:39:6f:b2:39:f5:35:a0:81:
b7:7e:da:3f:54:6a:97:07:0d:76:7d:3f:9d:cc:eb:
3e:ff:27:19:e8:61:bd:26:3c:0f:a2:2a:22:57:84:
6f:0d:cd:40:90:85:6a:fe:92:e6:89:64:78:b8:31:
1e:e4:7f:25:68:66:e2:8a:a9:8d:dd:ad:99:16:87:
f4:e1:a0:f0:e2:4c:85:da:ca:0a:c1:d9:fc:4d:d4:
50:a6:c4:6f:2f:ed:02:6e:93:d2:c5:fc:25:11:d2:
e8:f2:bb:0a:6e:08:9d:ac:f3:49:db:e5:ba:94:95:
c9:56:7f:45:e0:79:d4:b8:68:56:46:cb:a0:7b:c9:
27:83:b9:ac:f5:ea:9d:62:a1:27:a6:9f:45:35:ee:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:46:3F:20:AB:EC:30:D1:7E:81:27:5E:35:FA:C6:3A:95:4D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
X509v3 Authority Key Identifier:
keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
sbgp-ipAddrBlock: critical
IPv4:
148.64.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:e0:34:cc:f0:c2:20:4b:a9:e7:63:e5:4f:fe:cc:be:3f:8e:
8d:98:0f:1d:0b:61:26:fa:ce:9d:10:54:51:db:fc:97:ce:e8:
34:b7:ff:6f:61:da:b0:26:15:5c:3c:00:1e:24:3c:c2:09:f5:
23:d3:dc:e4:51:99:5e:3d:ab:d0:0f:52:a5:98:cf:86:08:3e:
ab:4d:54:16:7c:96:c6:bf:5c:66:1c:1e:e3:30:17:b9:8d:ce:
6a:09:bf:81:38:7d:71:13:d5:3e:37:84:59:fa:1d:1f:5c:54:
8d:9b:8e:a3:db:5b:49:74:29:b8:0d:35:bf:3b:96:4f:94:16:
2b:da:ef:72:f6:f7:70:99:ee:bd:1a:db:4b:5c:1a:d9:e1:f0:
27:73:9f:22:fd:e4:8e:04:b8:5b:b7:27:44:b7:88:0a:26:e6:
3a:cf:26:47:78:ba:be:f5:7c:8c:9a:6b:5f:dc:96:39:d6:fd:
40:3c:9f:f7:57:6e:42:b6:fa:4c:d2:ea:a0:5a:4f:09:26:a4:
22:bf:7a:0b:df:49:ab:9c:0c:b3:dc:03:65:43:1e:99:43:ca:
81:4b:50:3c:f5:78:9b:45:ef:0c:fe:17:df:a0:12:8c:06:f0:
00:a8:ed:01:91:94:a6:dd:85:c0:62:12:4c:22:29:53:a2:68:
cc:d2:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:30 2026 by rpki-client