
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cc449ff-5fb8-37a5-9bd9-b279f766be96.roa
File: 3cc449ff-5fb8-37a5-9bd9-b279f766be96.roa (raw, json)
Hash identifier: tmv33yiwWp1KpDZo7tc7T8yMnQO3zvMs29dfG2wP+wU=
Subject key identifier: 10:B8:28:CB:87:95:06:4F:6D:C5:A2:05:63:74:A6:3E:21:93:68:4B
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584B9B6DFF1B685E09281E6EEB80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cc449ff-5fb8-37a5-9bd9-b279f766be96.roa
Signing time: Wed 22 Oct 2025 14:39:37 +0000
ROA not before: Wed 22 Oct 2025 14:39:37 +0000
ROA not after: Tue 20 Jan 2026 15:39:37 +0000
asID: 135600
IP address blocks: 38.188.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9b:6d:ff:1b:68:5e:09:28:1e:6e:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 22 14:39:37 2025 GMT
Not After : Jan 20 15:39:37 2026 GMT
Subject: CN=d2fbae71-a655-424b-b2ba-d121597802f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:81:3d:1b:5b:fa:a4:d5:d8:39:66:4b:61:
bd:36:e8:fd:42:f3:29:88:4e:e0:2c:b8:c0:53:2c:
67:fb:ff:b8:ad:a1:30:a5:37:e6:54:1b:72:9c:f8:
14:ac:25:da:fb:ee:69:1b:82:2e:a1:1a:02:4c:ef:
dc:66:a3:ab:c3:b3:84:ad:24:fa:85:89:c4:17:ff:
06:5c:85:49:7e:44:13:e0:69:33:d8:f2:e5:95:2b:
10:76:0a:ec:4d:02:d1:7f:ee:cf:45:f0:c7:bf:ff:
7c:0d:80:03:93:20:66:cb:71:c4:39:5c:4e:1f:5e:
5e:16:06:57:cd:49:c5:92:94:6f:b7:ee:c3:83:2a:
eb:4e:13:82:37:44:11:ba:3a:68:aa:14:c9:2b:9e:
18:55:b0:3f:76:5e:08:71:94:de:9d:e6:2c:60:82:
f8:04:95:d8:35:4c:8b:20:fc:15:b0:68:df:90:81:
a1:33:ee:0b:cf:c5:6d:02:15:af:a1:6d:39:a5:56:
50:95:ab:39:81:3b:4c:07:c4:62:02:23:1e:03:1c:
eb:c7:2a:b5:68:2f:3d:ff:22:4f:fa:6b:34:89:30:
2c:7b:27:71:58:e3:4f:9e:f7:ad:61:ef:f0:34:43:
5c:53:2d:8c:2d:60:fa:55:05:c9:c9:19:67:d7:0d:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B8:28:CB:87:95:06:4F:6D:C5:A2:05:63:74:A6:3E:21:93:68:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cc449ff-5fb8-37a5-9bd9-b279f766be96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:c7:e2:8f:2b:e5:42:d8:6d:62:86:bc:a6:bf:23:54:4b:69:
57:ea:73:67:33:c2:81:69:73:0c:1d:65:4e:75:f2:a3:8f:3b:
10:83:99:67:8d:04:39:eb:3c:76:13:9d:89:3a:b5:5f:84:2c:
67:f7:13:dd:88:c3:59:bb:a3:4a:f7:50:ff:f4:97:17:52:63:
c9:0b:31:84:e7:f8:92:17:5c:34:aa:82:17:db:db:c1:d5:c4:
52:58:d3:b9:66:b5:2d:72:aa:3e:63:bd:d8:39:80:45:e8:a5:
d2:05:5c:89:84:73:21:9b:c5:a6:7a:77:55:ac:47:d9:79:aa:
5f:08:3d:fa:68:34:42:c2:63:04:16:ee:57:69:61:3c:7f:3a:
ae:fc:1a:5a:9a:d3:e3:89:50:ad:38:55:99:e7:b2:f2:76:44:
e5:d3:29:ac:f7:c7:5d:a5:c6:df:e0:85:d9:66:2d:1e:c6:7f:
5d:02:a0:02:3c:db:c9:a4:5d:a2:db:80:c1:37:e2:a1:4a:dd:
76:a9:bf:f3:1b:e2:4b:9b:24:a7:20:32:76:6a:11:05:e5:de:
52:60:c8:f9:1f:50:0b:f1:8d:ce:95:d6:28:ef:61:4b:af:3e:
8d:ce:e2:d5:57:12:ff:72:1a:b7:91:d5:72:bc:e0:ec:45:e6:
8c:1c:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:24:00 2025 by rpki-client