
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7aed72c0-fc6f-3536-8cdb-37be3d5cae36.roa
File: 7aed72c0-fc6f-3536-8cdb-37be3d5cae36.roa (raw, json)
Hash identifier: C5QL6A25V7ckBpMBXZLDfuU+UtG3Fz+97V0gtep0p68=
Subject key identifier: A3:EB:74:67:64:70:B7:3E:DF:01:15:3F:BC:4F:57:72:5A:9E:05:C9
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D02177F2DB11A1EAE11298480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7aed72c0-fc6f-3536-8cdb-37be3d5cae36.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 262503
IP address blocks: 38.236.72.0/21 maxlen: 24
205.164.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:7f:2d:b1:1a:1e:ae:11:29:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=0efe69c6-bf2a-4ed4-9619-2110daccc397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:5a:5b:70:a9:fa:93:22:64:28:08:e7:e4:
a2:63:26:ab:eb:ca:a5:b6:35:91:b4:35:36:3d:0b:
b9:13:14:19:9b:40:0f:e5:33:f9:8d:11:03:74:de:
34:70:67:a5:d3:cc:14:a6:f1:b7:31:12:dd:03:04:
6a:83:0b:77:e0:5a:42:40:36:15:c2:d6:d3:0f:71:
b0:f3:6f:f5:b3:dd:48:f3:de:69:44:f7:76:75:c7:
cd:a3:bb:46:98:56:4c:28:8f:a8:5a:f6:5e:13:65:
ce:34:fe:83:23:b9:42:ef:65:f5:24:fa:ac:80:93:
2c:0f:fb:a5:d4:eb:38:e2:48:04:ac:a3:dc:78:82:
9c:4b:ca:5c:89:32:f0:59:83:4f:6f:ad:ee:eb:39:
b3:40:0e:01:f3:0d:73:b2:ea:00:b6:66:85:57:e5:
5b:e2:cb:85:e0:55:f6:6c:12:96:74:d6:27:f5:42:
40:c3:72:7a:b3:d1:7e:d7:bf:83:67:60:f7:5b:0f:
ad:26:2c:15:28:cb:4e:59:e9:63:53:cd:f8:94:6a:
4b:d8:0f:a8:5e:3b:f7:56:6d:0e:2e:2f:0f:6e:94:
34:bf:3c:31:93:5a:68:d3:5f:6d:83:72:b7:55:57:
31:3c:f5:67:d6:ec:25:32:d8:e3:ec:af:e9:26:1b:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:74:67:64:70:B7:3E:DF:01:15:3F:BC:4F:57:72:5A:9E:05:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7aed72c0-fc6f-3536-8cdb-37be3d5cae36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.236.72.0/21
205.164.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:b5:9e:04:72:a1:9f:34:ee:08:bc:5d:62:31:b6:d8:6b:1d:
d1:47:01:18:ab:36:c6:f1:b5:e3:83:3c:60:65:ec:8a:5c:5d:
ef:af:4d:6f:a1:e5:f6:98:0a:5d:ec:c1:2d:78:31:6f:b7:eb:
e6:0d:ec:73:72:a0:f7:ce:da:e3:e5:80:1e:31:3a:a2:3f:a2:
e5:a9:98:42:f9:9b:60:af:7c:a1:ae:1b:21:94:f9:21:60:c4:
18:6a:27:41:09:e3:fc:3c:e2:34:d1:12:00:1f:83:3c:47:c4:
ce:52:4a:a8:e5:a1:42:de:97:90:5f:a6:7f:32:18:d8:75:9f:
50:fa:e3:2a:4d:7a:e3:83:87:9a:3a:cf:62:0f:b7:f5:b0:ca:
8b:2b:13:9a:cd:11:62:94:b8:13:52:51:4d:c3:e0:37:c3:69:
c3:d5:bc:2c:5b:90:f4:eb:81:c9:13:3d:91:b3:bc:e2:21:a3:
fd:b2:e7:a4:b0:e3:d6:51:52:eb:73:e0:42:98:ec:04:d3:7b:
1c:2d:e7:60:ac:34:1a:6b:b0:63:78:d4:e6:59:c9:34:0d:86:
81:2b:7e:67:ce:f8:4d:b7:5a:7d:33:46:be:93:3d:40:46:f1:
34:6e:2f:43:69:78:19:87:2f:a2:77:70:5a:10:77:f7:5d:89:
49:ad:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:25 2026 by rpki-client