
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa
File: 2b3d568a-37d1-3dc9-8848-b06220f406d6.roa (raw, json)
Hash identifier: IRqGjtKgptCHzezHHUTxGwnkD8bwOtcnx8CzBJ5fP9o=
Subject key identifier: BF:C3:DF:82:FC:5A:7E:DC:E7:6E:5C:35:54:65:FC:48:0D:2E:CD:94
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D021780A80C04524537F0A080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 273154
IP address blocks: 38.134.172.0/24 maxlen: 24
154.43.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:80:a8:0c:04:52:45:37:f0:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=21385c5d-055a-4df7-9fd4-00e6c44e79cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:f3:6a:8e:72:0e:a3:f1:0f:b8:29:f7:4f:
35:01:73:ff:73:c3:85:d1:12:bd:30:c7:dc:c5:f1:
6a:0e:8a:f4:55:f9:65:52:56:cc:d6:e8:49:0c:34:
d7:14:a9:65:22:53:e9:45:32:2b:4a:39:9e:5b:b4:
75:c5:eb:17:0f:c1:71:72:bb:2e:18:9b:16:c1:2f:
df:ed:9f:bd:0a:45:ab:59:2c:6c:91:c2:cf:a8:b0:
bf:bc:9f:50:c5:1f:d8:de:7b:49:c1:12:ab:a0:33:
90:32:f2:09:08:a7:63:57:e4:0e:e0:37:18:a2:64:
c8:9e:79:5b:65:a1:0b:8b:a1:0c:77:db:7f:6b:36:
92:3d:ea:ad:1f:40:ee:bb:f8:4d:1c:88:39:46:50:
cf:0a:d5:63:c4:46:fb:36:40:7f:59:22:15:90:31:
26:fb:6e:df:ee:41:7a:54:9d:73:76:d0:e3:85:7e:
ae:0d:38:54:92:13:a0:ce:1d:6b:5f:8f:21:c3:48:
c3:37:ad:35:bf:9a:d5:9f:c7:49:e6:a8:6e:58:65:
3c:8a:ac:aa:d4:5a:be:8f:9a:8f:f7:cc:62:a9:cd:
7d:4a:29:4b:58:47:7a:f9:68:0f:0c:11:62:c9:1f:
f5:08:ee:70:28:42:61:fb:ce:2f:57:6f:c0:e7:45:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:DF:82:FC:5A:7E:DC:E7:6E:5C:35:54:65:FC:48:0D:2E:CD:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.134.172.0/24
154.43.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:7a:68:39:6a:ef:0c:9e:93:43:cb:43:78:d5:6d:98:c8:85:
69:49:19:ab:c4:44:2a:10:a1:66:fe:9d:b0:9f:47:a0:ab:29:
a3:95:07:0c:6f:28:90:95:05:fe:05:22:dc:12:f0:71:aa:ae:
a8:56:80:ce:36:35:e6:3f:f0:d0:07:16:d8:8a:11:96:e5:d3:
21:9e:ce:74:70:14:09:c2:89:70:8e:f3:e7:d9:09:67:f5:72:
a0:ae:21:1e:47:a2:9f:99:d4:00:5e:1f:86:07:04:45:1d:a0:
49:7e:26:2f:e7:2c:8a:88:59:fc:11:26:3d:5f:25:98:3f:90:
be:46:7a:40:f3:9a:e8:5d:f0:f0:92:4f:61:e6:00:2a:61:08:
b2:e2:84:f5:4a:c1:cd:dd:20:00:dd:da:6d:28:01:0c:15:40:
19:d0:4a:ee:28:03:02:ea:f3:1f:1c:0e:f7:2c:e2:d9:3b:3c:
38:0b:2d:8d:b3:02:be:99:c3:3d:c2:f1:57:7a:db:8a:80:c6:
42:0c:a2:3a:85:09:70:f8:96:1e:84:4a:1c:13:3c:6f:2b:06:
79:0d:42:dc:73:9b:fd:6b:51:83:1c:7a:9d:78:1c:14:93:41:
25:a5:dd:3a:f1:01:0b:25:ae:2e:0d:5d:22:a3:af:03:bf:de:
8a:3e:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:35 2026 by rpki-client