
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a9716041-f2fc-3ec4-aa5a-1e7352afd637.roa
File: a9716041-f2fc-3ec4-aa5a-1e7352afd637.roa (raw, json)
Hash identifier: 3j9ayTzhfYlGSH5Ttj22URHO4VPJd0XKtANn5n7wSF8=
Subject key identifier: F1:41:3C:DA:93:5B:14:A0:6C:29:9B:B7:AD:73:4E:3F:01:09:6C:EA
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D7CCFE48515A1BBBC75447580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a9716041-f2fc-3ec4-aa5a-1e7352afd637.roa
Signing time: Mon 13 Apr 2026 01:00:24 +0000
ROA not before: Mon 13 Apr 2026 01:00:24 +0000
ROA not after: Sun 12 Jul 2026 01:00:24 +0000
asID: 1421
IP address blocks: 38.247.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7c:cf:e4:85:15:a1:bb:bc:75:44:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 13 01:00:24 2026 GMT
Not After : Jul 12 01:00:24 2026 GMT
Subject: CN=d0d8ec50-3ed7-4b30-95b4-995c4e320d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:ad:82:39:f7:8a:a7:8a:93:4a:fc:03:6e:
ee:a4:da:32:4f:d4:48:cb:2d:39:73:12:80:12:c7:
b0:d2:db:ae:59:f8:0e:89:37:ef:9c:81:77:b6:75:
d4:01:57:f8:91:22:cf:a0:ed:98:63:b2:87:24:c3:
88:f3:d8:96:ad:cf:d9:16:9c:f2:ba:c6:09:03:d1:
06:bd:af:a3:7f:2e:6e:1a:a1:9e:4e:b0:27:76:09:
18:06:af:3f:ca:a2:a5:fb:e4:da:27:56:52:54:17:
8d:fd:c4:41:90:8f:b2:74:7b:58:81:6b:c9:a3:05:
d3:e8:58:eb:8d:af:52:d1:e5:ef:f2:f1:ec:db:5f:
af:79:09:ff:f1:45:dd:47:31:92:18:df:bf:90:a5:
e2:ec:ed:c6:e8:2d:4e:3e:6a:5e:0f:82:a8:5d:d6:
7a:9e:e1:39:7f:a6:61:38:74:d7:47:54:1b:45:bc:
6c:f4:9c:45:7a:b6:fe:75:a2:5d:93:d6:6e:bd:f5:
f5:ea:34:99:a0:3f:2d:b4:ba:44:4b:6b:e2:04:93:
38:fc:0e:30:20:fa:72:48:9c:86:56:fd:33:b2:65:
07:ff:02:68:af:ba:a1:93:7a:75:23:7b:f7:eb:03:
5f:58:f8:a8:62:13:5c:50:1d:ed:17:1c:f5:8c:7a:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:3C:DA:93:5B:14:A0:6C:29:9B:B7:AD:73:4E:3F:01:09:6C:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a9716041-f2fc-3ec4-aa5a-1e7352afd637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.247.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:91:bb:be:e0:c3:06:f8:c9:8a:df:b9:46:fe:77:46:04:1c:
2e:da:86:de:52:6e:b5:0e:c5:4d:a4:a7:7f:46:ce:59:33:33:
77:ea:04:0e:17:8d:b0:c7:82:57:77:3c:65:1f:fb:fe:ed:00:
43:79:58:9e:4f:03:46:9f:61:c0:ff:fe:de:a2:43:ac:ca:ac:
cc:a3:2b:9a:a5:8f:d7:57:9d:e6:46:57:4f:d3:5b:1b:a3:51:
a5:3b:d5:3d:c7:f0:78:c7:2c:bb:52:80:66:f7:0e:78:81:df:
fc:db:bf:53:ff:f8:26:09:83:fb:3e:34:2b:ce:44:9c:33:c6:
b9:dc:92:43:8b:93:90:bc:76:dd:bb:08:d6:61:05:bd:6a:75:
79:9e:80:36:49:67:12:fd:27:4e:38:fc:b2:1d:52:a5:3e:fa:
e7:15:83:c2:7f:3b:dc:d1:6a:37:b3:65:82:f9:ec:94:e9:5c:
65:2a:66:ac:0f:02:36:1b:3e:66:e3:1a:70:00:0f:1d:83:26:
b1:76:f3:40:b1:e4:87:ad:d1:25:a2:84:61:f2:24:97:f9:6b:
3f:8b:50:16:51:df:3d:fd:2f:81:b1:65:e9:4f:89:c3:77:9f:
6f:db:b5:37:f4:e8:3a:c2:37:16:f8:47:ed:05:79:49:cb:00:
d3:35:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:29 2026 by rpki-client