
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa
File: e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa (raw, json)
Hash identifier: eUB8oSK7My4L/PvDYtFWJNcIPBsb5mQYS37yjM5lKxw=
Subject key identifier: 6F:9B:A0:21:59:C0:37:EE:D2:E6:DC:6D:CB:39:F5:A3:36:40:C1:34
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D571FA95872C8BCBBB0B45AD0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 138064
IP address blocks: 38.3.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:a9:58:72:c8:bc:bb:b0:b4:5a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=7d0ed4a2-6603-4200-884c-c0a25aa1ba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bf:60:c1:5f:e5:5f:d4:39:0e:38:25:69:12:
52:b4:4f:c2:e3:f8:fe:98:ed:e8:25:56:fc:3c:58:
06:ad:79:2b:45:6c:0c:68:f1:fb:5c:53:5b:b4:d6:
32:c4:4e:1a:87:23:2b:ef:77:e6:68:a4:21:df:f6:
43:ad:e4:92:2c:03:6f:b9:ff:19:7b:b7:ca:f5:b0:
e7:bd:e9:12:da:b7:7a:cf:cd:03:44:cc:ec:f5:d5:
57:92:70:94:9e:42:ab:ab:11:d1:2a:18:a0:1c:53:
d8:0a:c9:6d:45:29:75:37:4b:9b:56:1d:c5:31:92:
c9:86:aa:4a:1a:b8:a9:4d:b6:46:30:d6:84:2f:95:
f5:a3:2d:23:58:1d:db:19:33:d1:6a:8d:97:f1:57:
32:04:12:d0:b7:6f:2c:a3:aa:0c:2e:13:6c:4b:d9:
85:08:1d:7e:68:97:c4:61:59:f7:6d:65:09:5b:50:
47:56:4b:75:c4:2e:a7:cd:c0:55:a2:82:9f:dd:0e:
5d:b8:3d:87:a5:ab:68:f3:c6:25:76:c1:00:0c:20:
b7:40:3a:77:89:ed:7d:d7:f6:67:61:40:8c:a9:9b:
2e:03:a2:5b:31:e3:eb:ae:22:d6:fd:62:77:eb:22:
9e:89:36:69:dc:c9:67:45:db:06:d4:32:9c:40:5d:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:A0:21:59:C0:37:EE:D2:E6:DC:6D:CB:39:F5:A3:36:40:C1:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.3.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:e3:fd:c5:16:17:c1:9c:80:fc:60:62:5f:f4:5b:1e:ac:59:
8a:e7:e0:83:f9:e1:6b:7b:4a:e4:41:93:81:9f:88:c5:c4:0b:
73:b0:09:d5:0c:59:83:5e:8c:e2:b6:d2:1a:72:9c:97:e8:1d:
2f:1d:95:8f:d9:7b:04:cf:bc:7c:d4:08:30:df:da:b4:77:f3:
6c:05:6d:33:cd:28:c8:d1:db:52:63:69:28:bc:8a:ce:7d:44:
f4:0b:18:4b:35:c0:70:96:5b:cd:a9:81:a7:94:07:e4:96:ac:
30:e8:c2:bc:fa:f5:47:46:93:92:3d:b2:42:3f:07:58:9e:bd:
a9:c8:26:5c:42:45:6e:99:22:5c:71:d3:b4:c2:b3:2f:d1:68:
d2:6b:3c:a1:fd:28:ff:c7:b7:da:7d:06:40:e7:31:22:fe:69:
75:84:48:f2:f2:c6:3b:ad:c8:f9:be:9f:2b:a3:82:11:f1:7f:
6b:ac:01:d4:0f:9b:2c:3b:bc:83:9b:41:24:ba:d0:5a:42:87:
2d:22:15:ff:f3:34:9d:18:43:32:38:82:bc:1c:38:b9:41:86:
d6:28:47:26:3e:08:32:53:c1:6e:f1:60:84:ed:16:16:45:88:
a7:bb:57:28:7e:fb:3d:da:59:54:c1:e4:8d:0c:85:67:72:fd:
93:0a:d7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:04 2026 by rpki-client