
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa
File: d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa (raw, json)
Hash identifier: 8gyC5CeUqIc7gtZ+onPW/LfZwbLvoMNCHtkWZUJulf0=
Subject key identifier: 17:BD:D6:AD:D9:82:16:4C:3D:0E:89:BE:01:76:C0:69:7B:EE:D3:74
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D5745C4B45FEEE163DA109600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa
Signing time: Mon 30 Mar 2026 14:17:29 +0000
ROA not before: Mon 30 Mar 2026 14:17:29 +0000
ROA not after: Sun 28 Jun 2026 14:17:29 +0000
asID: 274857
IP address blocks: 38.94.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:45:c4:b4:5f:ee:e1:63:da:10:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 30 14:17:29 2026 GMT
Not After : Jun 28 14:17:29 2026 GMT
Subject: CN=f99e27ec-3db0-4c74-9f57-607d774a8da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:d5:59:04:72:8f:ac:bc:30:4f:aa:69:22:
d0:46:96:1f:57:18:e4:1c:bf:04:07:be:cb:8d:7c:
6f:83:58:01:e0:13:ba:bf:dc:7e:d9:af:f6:6d:29:
b5:13:99:b1:48:32:dd:1f:39:39:93:4d:ee:7b:91:
3e:78:18:f3:f1:40:2f:3c:4a:45:78:ad:5a:dc:7f:
dc:3d:c2:30:d5:9d:cc:ae:8b:86:36:19:8d:b7:27:
1a:e7:d1:37:bf:23:96:d8:9d:2a:de:72:9d:a9:6e:
be:4d:fd:9f:49:18:97:b5:c6:45:af:d6:af:28:85:
18:2e:81:20:9e:72:12:7f:9b:83:c9:48:4b:3b:b9:
c0:4c:40:58:7b:f3:16:87:09:bd:45:d9:8c:ac:13:
3b:cc:1d:6f:cc:63:a4:8c:78:75:f2:46:4f:4c:47:
74:53:e6:c3:cf:b4:62:f5:5e:3c:0b:ba:34:5c:21:
42:51:c6:5e:ae:b0:78:4b:4e:ff:92:07:de:0d:c1:
8d:b6:26:b1:da:23:93:2e:74:81:aa:9c:63:21:71:
ca:dc:26:02:d1:da:f3:cf:c1:b1:b9:83:af:d7:59:
77:4c:ea:98:a5:70:c9:3a:9a:d2:74:e5:bd:bf:cb:
a8:9c:74:53:54:a6:46:c6:d3:db:3c:9c:ef:90:6b:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:D6:AD:D9:82:16:4C:3D:0E:89:BE:01:76:C0:69:7B:EE:D3:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.94.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:24:b4:9e:aa:3b:32:17:98:a7:b1:84:66:d0:70:e2:3a:14:
2f:61:08:1d:76:33:1d:98:d5:95:b5:b0:10:f4:a9:b4:2f:21:
72:49:d6:03:6d:fe:4a:16:94:f9:0b:fc:4d:e8:a8:a5:af:60:
ad:6e:70:e0:e7:60:6c:5d:a2:33:76:2e:16:ae:69:98:84:a6:
53:88:b4:a9:8d:f6:90:a6:9f:1a:9b:6d:19:84:b9:0f:21:ab:
b9:8c:e6:5f:f0:a2:1a:ba:ca:b5:56:1b:07:dd:fd:e8:71:08:
a3:58:55:ee:53:a8:8a:b9:ca:00:44:6b:af:00:fd:f1:5c:2f:
be:e4:fa:17:de:f0:2b:d4:ea:e4:43:be:a2:f4:f8:14:3b:33:
af:ef:51:75:74:c2:2c:44:ca:d5:6d:f1:72:3f:e3:03:5a:74:
9b:8e:a2:7b:5c:13:f6:04:cc:59:e6:77:4c:38:e7:3d:bf:8f:
d0:ba:88:e6:53:4f:de:44:33:cf:26:89:2e:38:ec:51:11:fe:
75:54:0b:a4:72:3d:2d:ed:dd:4c:5e:39:cc:3c:f4:4d:ee:80:
4e:81:b4:79:a8:65:ef:e6:e8:c4:b8:24:49:fa:ea:bc:e1:72:
1a:d1:40:6d:96:8e:eb:13:1a:96:d1:f4:dd:94:54:e8:45:c5:
98:d8:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:27 2026 by rpki-client