
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa
File: 2b8e69f0-b314-36f5-b386-293e3802994a.roa (raw, json)
Hash identifier: a9X/upiGr4eOybqRs+YzC+Bp1dFahsHSDisDPxiVsrU=
Subject key identifier: 2C:2C:BB:0C:19:24:CA:22:68:36:86:14:20:D5:3A:71:7A:F8:3C:9E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584B8844A5225960665538103680
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa
Signing time: Wed 15 Oct 2025 17:55:57 +0000
ROA not before: Wed 15 Oct 2025 17:55:57 +0000
ROA not after: Tue 13 Jan 2026 18:55:57 +0000
asID: 272106
IP address blocks: 38.224.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:88:44:a5:22:59:60:66:55:38:10:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 15 17:55:57 2025 GMT
Not After : Jan 13 18:55:57 2026 GMT
Subject: CN=badfdf37-0687-43f9-a23f-800b350ce317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:f3:91:ec:95:31:92:5e:12:ce:82:1f:c2:
23:b9:f7:2d:08:f7:92:f2:eb:cd:48:e3:11:00:46:
60:58:13:06:03:b1:82:6a:06:dd:e4:02:02:ea:11:
82:36:a9:7b:39:a5:89:02:ed:8c:7a:7b:7e:6f:43:
89:3a:c2:ef:a9:55:fc:40:91:fb:63:5d:c3:f0:aa:
e2:e9:71:eb:2c:e8:d4:84:79:c6:58:6f:2f:0d:38:
42:53:1d:6f:24:f8:c9:4a:ac:b9:25:c9:71:48:ed:
e5:30:6e:7c:1d:62:2a:9e:a0:df:33:c5:d8:3a:d6:
0a:96:37:3d:68:5f:f3:44:81:8b:e5:61:5f:0d:b2:
f9:b3:7f:41:5a:d6:23:88:ac:61:26:80:b2:c3:95:
03:15:2f:15:60:fd:91:85:96:73:75:35:c5:6b:91:
24:b3:27:ae:2b:1b:7d:b8:92:90:69:64:d9:69:11:
09:44:25:43:52:32:7e:de:57:4d:b7:83:52:52:2e:
74:fd:46:35:a3:fb:df:c3:fe:9c:66:30:d1:15:23:
5f:b8:24:3f:b8:49:d6:56:c6:1f:2a:26:91:f3:1a:
5b:8c:43:bb:95:ad:1f:ff:9f:4f:b8:b1:2a:7a:ce:
8f:74:96:f2:52:ed:82:f1:26:7a:89:cf:ea:50:de:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2C:BB:0C:19:24:CA:22:68:36:86:14:20:D5:3A:71:7A:F8:3C:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.224.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:52:bd:18:52:82:0e:a2:1a:9d:e2:85:f1:ff:65:59:89:d6:
e0:a5:da:55:3c:6b:d4:f6:58:cc:c6:b5:17:ce:3f:a6:cb:1c:
35:9a:12:47:b1:b8:2f:00:11:3b:62:b3:bc:72:93:4b:4e:a1:
3c:9a:84:97:6f:8f:55:92:c6:04:fe:5f:4a:00:50:70:98:46:
9c:80:18:f7:a0:a3:27:2a:b3:8b:7f:f2:10:bd:81:0e:5c:5c:
59:9e:f4:0f:15:ec:d3:1a:e8:40:22:12:62:e6:6f:59:9a:a0:
2f:51:16:b0:3c:34:2a:ba:f9:ad:72:f2:18:42:22:a6:42:10:
65:ae:b5:d6:05:dc:1c:fd:39:67:be:a9:bf:e7:1c:36:c8:39:
76:ca:d5:00:7b:d1:a3:e0:2e:f6:78:89:ee:28:5c:c5:35:08:
86:e2:3a:bd:b0:44:d1:f5:5f:3f:b0:15:0b:8a:4b:f2:35:80:
6a:12:0c:fc:47:5f:2a:e5:a7:74:dd:c8:f0:bf:89:ac:25:38:
12:67:ec:b1:5f:f3:34:a4:ee:32:3c:af:23:72:56:d0:e8:b8:
db:13:54:dd:d9:d9:21:72:ff:61:5c:3d:ef:8f:45:48:14:bc:
71:5c:06:e8:2a:4b:ed:75:8d:11:ab:14:0b:b2:b4:ff:85:5a:
37:6b:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:07:16 2025 by rpki-client