
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89f2ea07-15d8-38e0-a079-f9b10d46ea70.roa
File: 89f2ea07-15d8-38e0-a079-f9b10d46ea70.roa (raw, json)
Hash identifier: WYGoCghbyiAAd6vkp+KycnFF6GajnIj91MuF4o5g9Ds=
Subject key identifier: A7:2F:34:D7:2A:EB:8B:54:EA:51:D4:E8:16:B5:C9:17:90:5E:0A:08
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CC4AC709D317B9B72A165B560
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89f2ea07-15d8-38e0-a079-f9b10d46ea70.roa
Signing time: Fri 06 Feb 2026 02:00:30 +0000
ROA not before: Fri 06 Feb 2026 02:00:30 +0000
ROA not after: Thu 07 May 2026 01:00:30 +0000
asID: 401672
IP address blocks: 38.135.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c4:ac:70:9d:31:7b:9b:72:a1:65:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 6 02:00:30 2026 GMT
Not After : May 7 01:00:30 2026 GMT
Subject: CN=c35b26c0-8541-4368-8487-12e4aded170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:a0:33:56:1e:cf:66:d5:bc:b9:51:1e:48:
42:ce:42:3e:54:f8:37:c4:68:a4:82:d8:b4:d8:a9:
aa:bb:d5:ce:fe:28:24:b2:8e:a2:b8:ba:86:36:b8:
41:41:c4:90:2e:0c:05:cb:a8:8c:27:87:b1:9e:c4:
58:4a:6f:b9:20:a7:a5:10:89:62:c3:ea:8f:53:04:
7a:62:55:05:56:9e:44:bb:b0:8d:67:74:d8:0e:57:
e9:8f:2c:18:8a:50:29:75:6f:a6:de:7b:d5:12:4f:
1b:1c:32:2f:e6:9e:aa:ae:27:a9:87:a3:dc:92:e8:
b5:39:6d:83:29:29:65:b2:c8:c6:df:28:57:f2:8e:
d4:39:a8:21:7c:a0:c5:79:c0:00:c7:ec:d7:37:6a:
4e:dd:05:4a:17:c5:c2:3b:1c:2f:88:6c:14:d7:e9:
3d:04:fa:fb:c5:fd:7b:66:9a:d0:13:7e:19:42:f0:
99:0d:98:4a:00:19:db:3a:e4:88:a5:8a:ff:46:79:
93:74:a6:55:09:86:9d:16:f6:5b:14:ad:f2:89:ad:
c4:42:bd:0f:c4:06:81:83:db:32:1c:92:6f:6f:28:
d9:56:5f:eb:fc:80:3b:0e:25:ec:83:4b:31:65:bb:
29:b3:75:e1:f1:39:b6:a5:c1:6d:be:d6:fe:fd:16:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:34:D7:2A:EB:8B:54:EA:51:D4:E8:16:B5:C9:17:90:5E:0A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89f2ea07-15d8-38e0-a079-f9b10d46ea70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.135.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:77:a2:6d:c1:ba:bb:9d:9a:1e:3a:c2:6c:2c:44:6c:db:dc:
af:20:58:0a:39:c9:39:6e:65:ac:65:5a:f6:a1:16:e9:f4:51:
4d:eb:d0:6e:27:f1:9b:be:6c:81:da:c7:d7:a4:4f:1a:e0:9f:
fc:6f:67:a0:c8:7e:30:f4:86:55:65:3f:d8:35:8c:4b:22:cf:
8d:7f:33:c7:3e:b1:e2:61:e7:97:45:b0:96:90:05:dc:47:6e:
3f:07:68:b0:e2:a5:4a:2a:f5:22:fa:89:d5:d3:b7:ad:c2:14:
1e:fb:30:3b:73:7b:6e:26:22:b9:0b:59:e8:5d:c1:61:a4:64:
dc:80:97:3b:ca:17:47:bd:e9:a4:e3:aa:a4:e7:a8:04:d2:75:
92:74:05:73:2f:06:67:37:0b:a1:e8:8d:2d:69:ac:f4:e7:bd:
d0:74:41:6c:43:a2:f9:2f:51:97:73:4a:1e:84:e3:bd:9c:b4:
53:9f:93:09:54:dd:10:64:0e:72:7e:cb:2a:c1:9f:76:c0:94:
13:8c:a2:e8:16:0d:0d:1c:94:73:79:eb:4f:dc:f9:a6:c9:08:
eb:9a:f0:f1:b8:8a:81:9a:73:1a:04:f6:10:a2:10:75:d6:e5:
67:48:07:d2:82:88:48:f0:09:db:52:22:49:f6:14:ee:54:ca:
e1:71:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:00:40 2026 by rpki-client