
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68831743-8e6e-3647-b946-2661b597d6b4.roa
File: 68831743-8e6e-3647-b946-2661b597d6b4.roa (raw, json)
Hash identifier: Ci4fIkHpGtUGjYixULUMZpFIYmveqTIyJCe+RNiQkac=
Subject key identifier: B7:C6:62:E8:82:D6:6C:F9:07:D8:EF:69:F6:D6:1C:9B:6E:8C:A3:7E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F5B97FF9BB2840E3001CB0F40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68831743-8e6e-3647-b946-2661b597d6b4.roa
Signing time: Thu 01 Oct 2026 13:00:12 +0000
ROA not before: Thu 01 Oct 2026 13:00:12 +0000
ROA not after: Wed 30 Dec 2026 14:00:12 +0000
asID: 273090
IP address blocks: 38.135.16.0/21 maxlen: 24
38.196.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:97:ff:9b:b2:84:0e:30:01:cb:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 1 13:00:12 2026 GMT
Not After : Dec 30 14:00:12 2026 GMT
Subject: CN=1a2d0502-ef62-48f6-8dfa-f476e33b0d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:fc:c3:5d:cd:59:9f:99:3e:f1:bd:a5:74:
9b:1f:b8:e3:7f:41:20:8d:96:68:e5:0b:a3:9a:73:
10:fe:f5:04:b6:f2:9c:f2:38:ae:a8:31:b8:ca:80:
89:4c:9e:95:da:d5:e0:f3:1e:fd:85:f2:f7:62:7d:
89:e0:c2:ac:11:95:67:4e:e3:59:ac:5b:63:aa:de:
18:18:f2:fe:70:dc:64:5d:60:68:81:73:be:51:0e:
89:bf:aa:d0:fb:e2:5b:42:e6:1e:40:92:1b:76:92:
4a:84:2c:70:2d:9f:0e:71:93:3c:84:b2:ea:32:ce:
cf:13:9f:4e:bf:5e:cb:26:59:bd:1e:08:4c:ea:67:
73:bb:3d:eb:ba:73:7a:c0:31:c5:59:8f:49:36:23:
a9:1b:12:84:2c:d4:f1:09:6a:b2:8f:24:3a:cd:43:
54:a3:9e:c9:ae:40:bd:bf:17:e7:8c:83:b6:b3:67:
8b:f7:47:a8:31:e9:57:1e:dc:9a:e1:28:aa:3e:ed:
2b:95:db:43:62:13:73:29:4e:54:17:e4:8b:c2:c2:
9d:28:94:58:7c:22:7d:a4:f0:46:0c:d8:7d:b6:ac:
34:0a:15:81:97:6d:ab:f6:7f:6a:0a:b3:5f:63:45:
80:47:17:87:b6:16:41:f8:12:26:54:79:9e:07:14:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:62:E8:82:D6:6C:F9:07:D8:EF:69:F6:D6:1C:9B:6E:8C:A3:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68831743-8e6e-3647-b946-2661b597d6b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.135.16.0/21
38.196.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:36:de:50:02:81:8e:9c:04:ef:35:e7:0c:4c:4c:90:cd:c4:
97:98:4d:35:51:90:a2:7a:60:ab:00:45:8a:1f:52:b0:d6:8f:
e0:a3:25:28:ac:01:1f:ce:c1:7e:08:b9:82:a8:27:f0:c8:2d:
c3:41:12:cf:49:9c:ca:26:e0:08:1a:bf:13:c7:4b:27:21:71:
3f:d3:a3:94:3f:f4:ab:a1:7f:ff:1a:c4:bd:cf:f0:e3:fb:d4:
5a:c2:f7:76:e6:39:d2:d7:1b:e2:b3:5f:e0:79:26:35:ac:c0:
21:15:17:ea:7e:26:1a:41:f1:97:ed:77:84:87:38:e2:1a:0b:
3e:e8:a9:77:60:b1:b6:05:0a:e0:75:38:d3:b4:fa:b3:b8:e5:
7e:81:d6:c7:41:12:1f:85:20:0b:b5:70:0b:c0:cf:85:40:18:
d3:3a:b4:86:32:d2:48:95:40:63:fc:c9:41:7e:2e:fa:3f:88:
fe:1f:96:b0:a0:96:b8:ea:8d:b0:b2:07:26:77:4c:c3:9c:e0:
cd:f5:38:ad:91:69:16:68:ca:11:e1:82:6b:53:4b:54:bb:f8:
80:23:c2:fb:ea:b7:a9:05:e8:29:4c:68:65:91:cb:35:bb:77:
72:19:60:8e:f0:4b:37:43:8b:ea:e1:c8:eb:ed:e6:96:13:2b:
67:71:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:11:28 2026 by rpki-client