
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa
File: a24f0558-18cf-3fa7-9320-05ac0449745d.roa (raw, json)
Hash identifier: YeGf+qtIl982nU02aRs2aVukQQjlcNYCoP1fmpdSyGo=
Subject key identifier: 84:18:12:AB:6A:14:87:3B:CE:DA:19:CF:09:13:27:DB:E6:AB:6A:D9
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CEBC209577241145EC0DD5F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 273245
IP address blocks: 38.58.170.0/23 maxlen: 23
38.210.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:09:57:72:41:14:5e:c0:dd:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=a24f45c9-0c5f-42de-b787-241402a8993f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:d5:89:83:92:c0:aa:81:a6:46:a8:54:de:
18:23:4e:e0:eb:bf:f3:58:f9:4b:89:a1:7d:02:74:
99:31:4a:6e:03:f4:a5:7e:c3:86:fa:92:d7:8a:69:
24:78:a9:e1:4e:36:2b:c0:52:03:86:c8:4b:ee:7f:
2d:10:a3:bd:5f:a6:ba:1b:16:40:b0:f9:6f:26:25:
b2:75:68:a2:14:02:42:db:8f:af:f3:f2:c6:60:d1:
5c:ca:5d:59:87:8d:14:12:76:7b:19:0c:36:22:34:
22:ec:fc:13:6b:aa:5f:58:98:9f:95:7e:05:06:21:
e5:48:16:2f:04:0c:05:75:36:fe:54:68:74:45:19:
94:61:6f:c9:7f:b5:54:6a:ad:c6:f9:4e:75:e2:8d:
3d:30:7a:b8:f6:8e:49:d9:92:79:66:53:b4:55:3b:
6e:13:e3:a3:f0:49:b4:fe:30:4b:9b:08:0f:29:56:
fa:05:03:e2:4a:bc:8a:f9:a1:0f:d3:63:ba:37:98:
54:a4:a6:30:e4:10:ab:81:fc:55:8f:55:81:9c:ee:
ed:29:8c:4d:5a:0b:91:c5:86:06:fc:42:f1:0f:ed:
96:b2:94:d7:5c:05:b0:b5:c7:0a:4b:b8:e2:bf:c2:
8a:cc:74:3f:bb:06:a7:a4:c8:f7:e1:5f:3f:ba:3a:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:12:AB:6A:14:87:3B:CE:DA:19:CF:09:13:27:DB:E6:AB:6A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.58.170.0/23
38.210.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:19:58:5c:e7:dc:a1:c7:2d:67:7d:87:3b:a0:e6:aa:d1:f9:
38:bb:64:f6:43:da:36:ad:e8:13:0e:f0:35:35:ba:07:c1:57:
42:01:60:17:fe:7a:53:a6:3f:fe:34:29:45:e3:13:3d:d3:40:
22:8c:45:4c:3f:8d:ed:11:32:c9:09:17:a6:ab:4e:bb:6d:09:
7b:f3:5a:e0:2b:4a:2f:b3:85:40:f1:d9:63:c2:ae:fd:f1:70:
46:c4:de:d5:7a:51:27:65:7a:13:dc:1b:5f:63:26:19:09:8c:
e3:77:e9:48:70:1c:bb:bf:88:08:84:2c:f5:f9:cc:5d:c0:df:
3c:3e:f5:19:43:d1:48:4b:75:b6:8f:6e:8b:89:4c:17:10:90:
cc:a6:75:d8:27:97:42:ee:1f:dc:69:87:ef:2e:90:a6:88:1f:
84:ef:a7:7b:4e:dd:90:a4:db:5f:e4:56:7b:0d:e3:b1:66:d6:
3a:0e:43:c3:1b:75:f3:cc:bb:37:21:91:b6:7b:db:66:7c:ad:
6b:44:86:7d:6b:f4:b6:2d:a8:be:41:4c:1f:fd:a0:5e:7d:41:
22:2d:b7:72:68:12:00:81:0e:b4:e0:05:60:06:ac:48:56:cb:
03:df:c9:21:1d:e1:f7:af:a5:03:4b:3a:a4:a1:9d:40:3d:6c:
89:41:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:00 2026 by rpki-client