
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ca45ab97-2795-3da3-8914-8da176d1a752.roa
File: ca45ab97-2795-3da3-8914-8da176d1a752.roa (raw, json)
Hash identifier: ieuIUSlWh1VhEOa4VAQuD439wtlTi1ONgT+zQSYVRAA=
Subject key identifier: 2A:57:C6:B4:15:F2:1C:C5:C4:F4:6E:CE:AF:75:C6:36:B8:F9:E1:FF
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CEBC20A13867F2A08F1A9ECC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ca45ab97-2795-3da3-8914-8da176d1a752.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 151786
IP address blocks: 38.64.100.0/22 maxlen: 22
38.66.108.0/22 maxlen: 22
38.88.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:0a:13:86:7f:2a:08:f1:a9:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=62adcd14-ef2b-4b0a-89b2-fc1b7ce62509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e4:42:32:70:7d:02:08:73:d1:39:dd:ff:77:
7b:a2:de:17:ae:ca:af:ad:8e:49:17:18:1a:1a:ee:
f4:94:d4:b8:9f:51:dd:98:22:f6:78:c5:0b:8b:9c:
f6:e1:6a:2d:9a:06:ef:7b:c2:51:18:56:d2:be:bb:
6d:34:6c:16:91:27:e8:72:d7:cf:f2:62:1f:2e:ab:
53:38:f9:81:90:bb:67:02:88:0a:94:95:ac:6a:1d:
a5:e2:1b:e5:52:d4:b9:5f:a0:8e:4a:60:fb:f3:19:
f5:44:13:3e:1b:bb:3e:ef:24:23:4d:1f:f0:de:b3:
5a:7a:7e:13:9a:61:45:92:73:b4:1e:25:f9:d7:31:
1c:de:f5:6e:26:4d:74:bb:84:19:15:04:6c:a1:00:
37:54:6d:77:ac:38:a5:73:0c:55:0b:87:38:fd:77:
29:04:63:5a:e3:cb:1b:2b:0a:2c:cd:5c:02:32:3c:
a3:08:a0:35:3a:3f:73:58:0c:34:90:57:a4:62:d1:
65:5d:16:a7:97:83:24:10:c8:f9:05:20:c5:af:b4:
98:24:6c:b2:21:a2:e8:64:ef:81:6a:c9:42:16:60:
1f:be:cc:b4:d9:9f:a5:c5:b3:c9:3a:05:c1:97:06:
87:2a:c5:88:a4:aa:d4:79:2c:7f:f7:7b:74:9d:88:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:57:C6:B4:15:F2:1C:C5:C4:F4:6E:CE:AF:75:C6:36:B8:F9:E1:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ca45ab97-2795-3da3-8914-8da176d1a752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.64.100.0/22
38.66.108.0/22
38.88.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:95:99:59:5d:e8:dc:a3:1e:83:67:52:81:f9:38:88:3b:c2:
52:5f:9e:4e:40:60:ce:df:c6:c2:8f:f2:68:8e:6c:4b:ce:71:
a6:19:e3:bc:63:24:e4:c0:8b:11:95:48:6b:90:2a:76:00:09:
ca:28:95:1c:07:0c:5a:3f:a4:ae:a7:5f:3e:30:70:49:0b:6f:
67:7d:24:48:7b:25:d8:22:0e:46:0e:35:2f:d6:6b:73:31:8f:
0b:be:71:4d:12:22:12:c9:60:6d:12:27:84:ba:e2:02:b4:c5:
82:e5:7c:40:28:58:e8:5d:76:49:8c:9e:91:86:06:bf:f9:7b:
f9:90:bc:91:5d:c8:5a:cc:47:64:95:37:c4:6c:ce:a4:05:7a:
69:04:5c:1e:13:2c:5a:b2:52:74:b9:27:ff:9e:8a:4b:35:eb:
24:fa:63:60:1b:c8:a7:4f:00:47:9d:36:7c:88:c4:a2:ab:bc:
08:74:06:c0:31:1a:20:c9:e1:b9:58:e4:f6:cc:ed:77:dd:85:
5a:2c:98:6e:21:1f:20:38:cc:37:6f:7b:71:65:61:57:a9:6e:
ba:74:9e:b1:41:cb:c5:f5:95:cd:12:8a:ea:69:a7:71:11:95:
2d:83:a1:de:94:84:0d:83:d7:c2:bb:83:55:90:f1:d3:4e:6a:
02:4a:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:47 2026 by rpki-client