
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa
File: 8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa (raw, json)
Hash identifier: q6V6SazwFRlfXmJNW3ycEYLnZPqKM5a+uxsw5AnTLBA=
Subject key identifier: F3:C9:9C:43:18:92:28:12:CD:EA:7C:55:E7:E9:AC:1E:CA:D1:F5:BA
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EA797C96F895BE8732B9582F0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 0
IP address blocks: 38.58.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:c9:6f:89:5b:e8:73:2b:95:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6b35c2ae-fb0f-42ad-a21a-29c83db13043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:83:3d:19:bb:50:5b:18:9b:0f:ec:7e:45:
1f:da:2e:89:38:4a:d4:ea:3a:2e:62:83:fc:52:dc:
54:2d:f9:36:ff:7e:1a:c4:87:bd:fe:58:90:17:3e:
a0:2c:2f:50:3b:34:05:0d:30:86:1f:d5:2d:26:3b:
61:92:08:26:30:06:9d:e1:15:68:1a:54:c6:1f:c4:
a9:b4:55:be:d6:a7:b3:c8:4e:df:2b:22:09:93:84:
7a:e0:ed:38:3b:01:3d:c0:c4:37:7c:33:12:3b:72:
36:be:35:c2:48:96:bc:97:9b:76:89:28:e9:b1:0d:
0a:08:ed:0b:6f:b0:0c:9f:21:41:13:bb:ec:44:9a:
42:8a:d5:b1:df:39:3c:d5:3c:d7:12:23:ca:9a:03:
55:7c:c1:5d:0f:85:1c:e9:c5:78:22:67:9f:35:62:
29:68:9a:4c:1f:32:b6:58:48:d9:f5:33:fa:52:2d:
d7:5b:10:0c:27:f5:b5:9e:2c:ae:1c:96:8b:23:72:
24:8c:ff:38:40:be:0b:45:c0:28:bd:06:3e:ef:67:
53:00:81:56:36:a1:b5:21:d9:fd:4f:85:fe:64:83:
b9:38:5c:f7:8d:03:cd:ef:38:2d:4a:76:f2:df:5c:
dd:4f:55:63:ea:35:4e:04:fd:5a:62:8b:34:59:c7:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:9C:43:18:92:28:12:CD:EA:7C:55:E7:E9:AC:1E:CA:D1:F5:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.58.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:00:43:59:1b:99:5c:bb:8e:ed:a2:69:51:83:51:2b:c1:d2:
b5:b4:68:97:c2:eb:71:2d:38:28:6b:62:ea:a4:ae:52:96:6c:
c1:9e:9a:b4:94:58:9d:61:b0:05:e2:07:b4:cd:e1:8a:10:fa:
3a:e1:fe:34:f4:6f:17:4e:e7:be:aa:8f:a6:88:68:c0:48:0b:
4d:2a:e1:1d:ff:aa:9c:aa:fe:0e:0c:2f:ad:42:0f:1e:36:67:
e9:47:27:ab:f3:2c:9d:0c:4c:5c:f9:7f:6a:82:0e:b5:9e:df:
05:82:d1:2a:43:ef:cd:c3:24:33:45:21:16:8a:ef:9d:55:f9:
66:00:02:f4:44:f8:bd:27:d3:ad:30:df:91:fc:88:24:ee:c1:
ee:67:0f:f6:86:6a:7b:b5:5c:ce:0f:3e:4c:69:e7:0d:58:c7:
72:bd:cb:1f:b4:09:fd:15:d8:91:86:6b:fa:fe:3d:60:02:e3:
06:2a:b5:4d:53:33:fe:e5:4b:61:9e:e9:07:e5:53:64:1d:69:
fb:cd:9e:42:a1:de:3b:e4:0f:60:52:75:f0:99:ec:5a:ff:ec:
0b:98:cf:88:c9:66:cc:f9:1b:ef:f1:1b:d3:2b:d4:9a:ce:a7:
e0:2a:6e:ed:5f:2f:47:bc:6e:eb:09:94:ac:08:35:d7:ea:76:
13:8e:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:05 2026 by rpki-client