
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa
File: 98da9661-0d10-3896-a771-a2ee1d490a36.roa (raw, json)
Hash identifier: uDVnfHPJnSvE4KWOPMA4aUOL/VeB5SE7fIC7IqocsDI=
Subject key identifier: 91:14:B2:52:49:CB:8B:54:66:49:AB:AF:C5:DE:07:38:DE:A6:9D:C9
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F4328584CEA5CDBF2C9E4C75BEF952016
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 29867
IP address blocks: 72.10.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:db:f2:c9:e4:c7:5b:ef:95:20:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=10035277-4fd0-47f6-aed4-277f952cad2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:d6:72:92:69:e1:85:76:7b:6b:25:b4:00:
0b:34:aa:f4:fd:5b:9a:1c:61:25:ff:19:b6:c4:1a:
1a:a5:65:3e:86:f6:1d:17:82:f9:3b:84:80:6f:e7:
d5:82:01:7f:16:12:85:12:a4:5f:cd:c9:c3:7d:34:
5e:60:86:71:07:b6:4d:b7:fe:57:de:21:1f:b8:ad:
51:ac:8c:4f:bc:d4:3d:41:89:7e:63:a0:f5:9d:77:
45:a8:dc:29:81:b3:a5:03:25:ca:e8:26:5d:57:2c:
f1:52:b2:0d:cb:dd:4f:02:7a:9d:0f:5f:1a:31:d6:
d0:fa:f1:98:50:47:f3:4a:78:14:64:14:36:23:6f:
12:27:30:7e:74:ef:69:f9:0a:80:89:00:80:29:44:
d5:90:5e:16:f4:92:6b:3b:d7:6c:86:fd:63:71:6b:
28:9c:2f:6a:13:72:73:9e:a7:08:bf:17:4a:29:2e:
ae:1f:ca:07:6b:eb:94:92:94:0d:0a:79:f8:7e:97:
da:1d:49:8a:9f:19:d3:0a:cd:15:b4:23:13:c8:59:
07:c8:7f:17:f6:81:c7:9d:90:62:ce:0b:0b:67:b5:
03:47:30:a1:d9:02:58:5f:b9:df:a8:e3:64:31:59:
70:f2:ad:85:ea:69:e7:fc:da:25:25:7c:3d:9f:ed:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:B2:52:49:CB:8B:54:66:49:AB:AF:C5:DE:07:38:DE:A6:9D:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:93:0e:ca:0f:b5:49:97:a9:a1:3f:de:f7:1f:cc:1c:ff:1d:
8d:8a:1c:f0:0a:fe:18:05:ce:1d:93:f6:32:d3:a7:35:09:fa:
83:b8:cb:87:97:8c:9d:63:4b:14:34:f1:dd:eb:e1:71:90:a7:
eb:96:aa:3c:e0:aa:36:3b:0b:5d:98:26:a3:35:d2:d5:07:82:
24:2d:2c:c8:b3:c8:ac:66:a3:30:0a:28:35:f6:a7:a7:81:78:
7e:b8:84:2d:24:c8:52:70:ec:a0:68:d6:01:bb:12:a0:55:21:
02:68:34:fa:30:86:b2:bd:63:04:2e:00:6b:4d:52:89:4f:a3:
2b:22:fe:d5:af:4f:21:30:33:48:97:c6:37:b7:29:c6:8d:07:
65:f2:26:bc:3b:41:46:13:c0:45:bc:4c:79:84:b6:89:05:93:
bc:7a:c4:30:79:9b:32:75:e2:04:02:24:77:ed:08:8b:84:b4:
d5:c8:ac:41:52:f4:64:14:06:66:55:17:7c:16:7c:0e:2d:08:
35:09:0d:b6:95:46:d8:64:17:5b:f2:c7:ba:5f:84:6f:10:d0:
5e:4e:51:a1:4e:e3:82:a5:28:26:e1:1c:a0:dc:01:1a:4e:2a:
50:70:ba:12:bb:61:f8:4a:70:af:b3:0c:a8:1c:78:bc:11:99:
06:81:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:46 2026 by rpki-client