
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a5b1f399-deab-3b97-8c7d-e9cdba4b718c.roa
File: a5b1f399-deab-3b97-8c7d-e9cdba4b718c.roa (raw, json)
Hash identifier: 8Eb1KCGdsUf8m56AnBvklo7aXbQ0ievmiXgtPmhxxRI=
Subject key identifier: 49:B2:EB:26:A3:DA:D4:B8:C3:A5:E1:42:59:F1:F7:9D:3A:5C:A3:7F
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CF93C7964DAEF97632F0A1000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a5b1f399-deab-3b97-8c7d-e9cdba4b718c.roa
Signing time: Tue 24 Feb 2026 21:52:46 +0000
ROA not before: Tue 24 Feb 2026 21:52:46 +0000
ROA not after: Mon 25 May 2026 20:52:46 +0000
asID: 399898
IP address blocks: 38.40.0.0/18 maxlen: 24
38.62.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f9:3c:79:64:da:ef:97:63:2f:0a:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 24 21:52:46 2026 GMT
Not After : May 25 20:52:46 2026 GMT
Subject: CN=8ac8087f-a90e-41dd-bd15-6e79432ffceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:4d:ed:48:b2:1d:89:75:70:af:8f:1f:59:
dc:58:c1:d0:ba:3e:ea:86:5d:d7:88:96:52:2e:44:
e0:dd:fa:da:b6:69:e1:61:e4:ab:7f:c9:cf:fe:2f:
69:d3:1f:57:0e:2c:1e:c0:a7:a3:26:d4:94:99:ad:
27:3c:d4:4e:25:03:0a:24:f3:98:11:d5:3f:e7:81:
b4:a1:50:08:d7:d9:8a:6b:48:42:e9:22:33:1a:59:
4e:68:b8:31:87:57:22:6d:3f:35:de:7f:7d:b7:c9:
1b:2c:3c:9e:5c:92:d4:ce:39:25:ce:f2:29:43:8c:
6e:5c:63:f4:c0:6e:0a:62:c6:20:82:1e:b9:4d:be:
75:15:7d:1e:0d:8b:bd:36:d0:7e:ab:7c:8f:83:af:
20:3f:cd:de:0f:b9:78:b8:de:86:5a:1a:b2:fa:cf:
55:83:79:50:66:68:b4:fb:03:a8:1c:66:4a:e2:ec:
9e:fc:cd:72:3e:5f:d5:a0:3a:59:4b:9f:43:5a:01:
98:ea:05:8e:55:44:17:60:68:a0:39:4c:cd:cd:0f:
73:3c:01:22:fb:ba:cb:a9:6a:05:15:c2:07:9f:16:
64:67:4c:10:92:c8:2d:9e:ba:81:0e:d5:eb:3b:1d:
c4:17:27:44:6a:b0:b6:02:8c:77:d8:2e:12:0a:b0:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:EB:26:A3:DA:D4:B8:C3:A5:E1:42:59:F1:F7:9D:3A:5C:A3:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a5b1f399-deab-3b97-8c7d-e9cdba4b718c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.40.0.0/18
38.62.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:cf:36:c8:53:33:f4:4d:85:4b:98:5d:92:32:c2:99:56:79:
48:a1:06:56:bc:75:84:07:c1:1e:4d:68:15:62:eb:b8:45:d9:
74:17:db:a9:55:b0:85:d3:69:d3:c6:87:10:ff:13:5a:92:93:
14:11:ee:d0:24:e6:43:ee:94:6f:b2:02:6d:db:91:8a:c6:a5:
0c:06:3b:0c:a1:b5:8f:49:d5:72:b9:de:d7:e5:3b:84:16:9c:
d6:6e:d8:ec:5e:fc:f8:51:7f:f5:6a:d2:fe:7d:f2:e5:c7:92:
e9:18:9a:15:b1:6c:81:c1:33:4c:98:05:d5:5c:93:5d:57:a8:
c9:2a:b4:68:3f:f7:3b:0c:5d:a8:d2:57:18:bf:50:ab:51:dd:
e3:21:c4:0a:8a:1e:10:2b:95:e9:f6:33:b0:8b:e1:62:8d:fa:
e7:b7:db:2f:06:c0:b6:1a:c4:54:2b:16:1b:03:5d:59:f8:e4:
80:c6:50:23:ca:b0:40:d9:8a:b7:89:37:35:ad:d2:3a:f1:20:
cc:60:ce:cf:3b:37:a3:89:cf:62:65:4f:a2:d2:68:7e:8e:89:
06:5e:bd:90:0b:dd:7d:72:9d:29:11:bb:59:98:04:6c:9b:db:
56:20:0f:1b:e2:09:00:bf:f6:d3:07:ca:f8:78:0c:83:4b:c8:
0d:38:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:18 2026 by rpki-client