
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa
File: 5af6404e-b862-3f39-82aa-0122630f1a3a.roa (raw, json)
Hash identifier: lYNlPNOzp6LAu1B9Vr79MQupoBuUtvy1DXcvoOqNdFI=
Subject key identifier: 85:C3:0C:BB:97:D9:EB:D5:F4:1E:33:D9:74:D4:B3:92:E8:FB:80:93
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CCA41D36B51F8C09728566B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa
Signing time: Sun 08 Feb 2026 02:00:32 +0000
ROA not before: Sun 08 Feb 2026 02:00:32 +0000
ROA not after: Sat 09 May 2026 01:00:32 +0000
asID: 204731
IP address blocks: 38.126.80.0/20 maxlen: 22
154.62.164.0/22 maxlen: 23
154.62.168.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ca:41:d3:6b:51:f8:c0:97:28:56:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 8 02:00:32 2026 GMT
Not After : May 9 01:00:32 2026 GMT
Subject: CN=efa09ba9-acd5-43a4-b628-91e38c4d04c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:20:f6:f8:3c:d3:92:fb:bd:4f:86:e1:36:b1:
0c:4e:72:9d:70:14:52:a0:f3:ff:f5:a2:89:66:36:
5b:26:2a:36:cf:32:b5:44:eb:07:0e:b7:bb:eb:e0:
ad:2d:0b:be:b6:5f:23:d9:f6:2f:67:6c:33:b6:4d:
86:a8:f9:e0:d1:6c:2c:b6:c9:d4:25:dc:cd:a3:6b:
78:da:ab:2f:4d:ef:4d:67:83:fe:e3:7f:2a:d7:ab:
19:3d:54:37:38:47:18:de:00:b2:6d:60:02:c4:29:
47:2b:c9:8c:0a:f2:d3:34:ed:51:3a:be:44:19:82:
13:8e:91:53:84:77:3f:33:00:6e:bf:c7:b6:54:4a:
b2:76:f4:24:9b:a3:c8:f0:40:ca:5e:d7:7c:07:e0:
99:16:05:3a:58:98:4e:64:47:e3:2c:d4:87:68:c3:
e5:22:78:ea:5e:0e:58:dc:7d:ca:1a:35:4e:5f:26:
fb:c3:6f:da:0c:a0:e0:b3:e4:97:02:de:c9:ac:56:
9b:9e:b8:04:cb:f2:af:37:0a:04:c2:e3:61:72:5b:
7c:da:56:47:c6:f3:77:c1:06:83:b6:39:18:3a:6b:
e6:50:d1:26:cf:4d:1f:ab:15:4e:58:fb:4d:b5:96:
f7:a8:2a:5c:8e:4c:1c:82:ac:a6:b7:27:70:97:9c:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:0C:BB:97:D9:EB:D5:F4:1E:33:D9:74:D4:B3:92:E8:FB:80:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af6404e-b862-3f39-82aa-0122630f1a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.126.80.0/20
154.62.164.0-154.62.171.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:43:9d:05:cf:9a:17:b6:46:e9:60:aa:15:3d:76:72:13:d0:
3d:34:36:10:bd:62:59:28:ff:cc:a9:3f:d6:44:60:95:da:0a:
43:5f:8c:3e:3d:e2:5f:60:3b:dd:d4:0d:f0:c5:c8:05:10:2c:
13:4d:a1:48:14:f2:12:9a:c3:5d:d1:a2:3f:2b:fc:6f:2c:fd:
82:db:67:e9:3d:4a:16:ac:5d:a3:23:46:bc:71:ab:e1:06:ba:
e7:9b:76:e7:ab:55:23:d5:5e:50:5c:6d:2a:0f:be:66:87:27:
0c:24:3a:d7:31:c6:4f:3f:21:b6:68:2a:79:9e:ad:e3:7d:55:
99:e4:c5:36:3f:27:8f:37:ea:8f:9b:5c:37:b7:cd:84:fb:aa:
79:08:b8:77:9b:17:ad:17:3e:fe:53:60:ad:0e:8b:87:e0:3a:
f9:2e:af:8f:45:73:6f:a3:06:9c:65:33:5b:9b:c4:f4:38:04:
f2:3e:78:13:d2:11:47:db:33:3a:74:fe:fd:99:6b:84:14:07:
6d:4d:e3:3a:07:85:b4:98:15:54:2f:47:35:e5:5b:c2:eb:6e:
ef:23:78:8e:e1:88:8f:c7:ad:f1:3b:64:83:41:d5:c8:0d:46:
e7:ac:28:4f:3c:cf:56:dc:cd:1b:21:b6:99:cf:a7:75:36:1a:
e1:35:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:47:18 2026 by rpki-client