
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f02bf45-3624-33d4-b6c0-bfe8c0301b71.roa
File: 9f02bf45-3624-33d4-b6c0-bfe8c0301b71.roa (raw, json)
Hash identifier: i/NTExuIBulyKJ6EIHnz61e/1J8DcRIQ3tinssphI7Y=
Subject key identifier: 2E:A4:30:21:40:0F:7C:61:04:81:8C:CD:E0:84:A2:31:AB:6E:61:82
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F42DC962A876680A8E90C0DC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f02bf45-3624-33d4-b6c0-bfe8c0301b71.roa
Signing time: Tue 22 Sep 2026 16:23:15 +0000
ROA not before: Tue 22 Sep 2026 16:23:15 +0000
ROA not after: Mon 21 Dec 2026 17:23:15 +0000
asID: 274104
IP address blocks: 38.96.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:dc:96:2a:87:66:80:a8:e9:0c:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 22 16:23:15 2026 GMT
Not After : Dec 21 17:23:15 2026 GMT
Subject: CN=f4dcd6d2-4529-4dae-a313-afe1af944f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:29:04:aa:f8:87:52:54:96:4d:08:9c:75:
68:36:ed:e1:e4:de:88:fe:e0:92:73:a9:9e:de:57:
2d:9f:70:c5:50:27:03:bb:90:5e:e6:37:04:f7:97:
e5:a6:52:41:a5:d3:b5:d8:44:e4:0b:3b:c0:f4:a2:
3f:2b:c7:76:0f:90:ed:8e:41:05:5d:1d:da:84:3e:
c7:f0:49:12:e3:87:2f:c8:fb:a2:a5:76:21:e5:54:
51:2a:bb:f0:30:1d:4e:33:1e:ef:d0:4f:2e:be:04:
ad:39:d9:ef:e4:67:45:ee:54:33:d8:b3:27:fe:a2:
70:05:50:63:43:87:49:89:d2:92:98:ce:5d:3b:2c:
91:ee:1e:ed:28:5b:27:bf:f5:f3:d6:07:e9:8b:9e:
a5:5b:a6:54:aa:5e:cb:0f:c5:c9:25:bd:e2:d6:4a:
22:60:03:38:62:34:a1:64:58:23:ed:e9:0d:b1:0d:
e2:1e:1a:89:b2:85:2b:aa:42:a2:34:dd:e0:a0:b2:
d8:62:62:03:a4:6a:fb:96:09:ce:79:0e:4e:b7:37:
9b:b7:fc:59:cd:28:47:76:1b:28:23:0f:d7:35:7f:
96:b2:80:c3:4d:b2:2d:fb:f9:cf:cf:30:0d:c5:66:
27:8e:c0:5b:2d:11:82:a7:08:1e:9c:32:e1:32:2c:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A4:30:21:40:0F:7C:61:04:81:8C:CD:E0:84:A2:31:AB:6E:61:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f02bf45-3624-33d4-b6c0-bfe8c0301b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.96.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:ef:b5:49:cb:11:bc:63:b0:8f:76:1f:d7:90:c9:c2:de:68:
d6:df:7f:02:be:dc:43:87:be:d9:32:66:ea:95:8c:29:c4:ee:
42:f0:29:92:9a:14:c7:bd:3e:05:5b:10:4c:0b:61:de:d1:b2:
12:70:9e:95:ed:51:b6:c2:c4:8d:34:d6:1b:58:fd:af:a7:68:
6e:91:46:2f:b9:48:1d:a4:80:4a:f0:72:44:0d:fc:20:c3:c9:
47:9a:97:8a:59:0a:ac:ff:f3:a9:ae:5c:11:00:9a:a5:69:e5:
7e:70:1d:15:b3:21:70:10:3d:f9:2c:74:27:c1:2b:d6:29:49:
af:6a:48:dd:c0:e8:78:68:21:9e:c3:2c:ff:c3:25:a4:bd:cc:
d7:67:eb:b8:17:9b:d0:90:ea:b9:59:11:a0:c8:0e:ea:98:ca:
d9:56:cd:2f:9e:41:6b:cb:0b:3d:d6:38:6e:61:73:2b:35:e0:
16:a2:9b:10:77:29:33:ae:8e:92:32:4e:0c:b8:d9:7f:c2:6b:
47:74:63:36:fe:bb:f7:e8:ac:86:a1:0e:7b:47:22:57:be:9c:
84:77:bd:56:ad:f4:43:99:51:60:8f:4a:cc:3c:02:22:f7:ee:
fc:5f:83:76:c0:e4:66:f1:91:c8:44:8e:6e:a7:39:bb:01:fb:
54:8b:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:53:18 2026 by rpki-client