
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d2792d34-8325-33de-95c1-c090857924a5.roa
File: d2792d34-8325-33de-95c1-c090857924a5.roa (raw, json)
Hash identifier: PQ0MzdcYGn/WDENasdxmMd6IHeIc4ngpb5Ue2MyTz/s=
Subject key identifier: DA:66:45:D9:B2:59:DC:6F:09:DD:CB:D9:0B:FF:9B:3C:38:DB:1B:6B
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584D0EA7B5BDAB5CA2651A1D8860
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d2792d34-8325-33de-95c1-c090857924a5.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 396253
IP address blocks: 138.43.101.0/24 maxlen: 24
138.43.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:b5:bd:ab:5c:a2:65:1a:1d:88:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=e508ab12-3407-4e68-ac75-303ade7e039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:32:31:88:51:f9:1b:a3:08:12:46:68:85:
79:94:ec:69:f9:1e:62:a5:29:27:16:46:f5:58:6a:
5d:7d:af:54:c3:06:c7:60:c9:8d:44:49:f1:cc:30:
a9:b4:db:4e:12:cc:45:26:0d:d1:88:a1:b0:7e:97:
0c:bf:6c:75:81:c0:c8:75:ff:48:4d:b8:81:c7:80:
e9:65:0f:b6:7b:ce:ff:83:90:4d:88:51:b4:d2:d2:
1a:68:a8:91:cc:7e:41:b1:b9:1c:20:06:84:a1:70:
b9:a1:8c:d4:d9:52:ed:09:61:25:90:26:a7:50:fb:
75:27:0d:3b:82:fb:c7:02:2d:05:c5:c4:1f:f5:f1:
94:79:91:7a:1d:e4:ce:95:5d:7f:54:36:43:ea:83:
7d:61:08:8b:84:55:37:64:68:79:95:15:c1:c6:06:
9c:d5:16:55:a4:89:85:de:0b:b7:8b:9b:75:08:b8:
f7:38:88:0e:9f:16:a6:8d:39:ac:1c:58:c3:0c:24:
7c:1d:f6:46:f4:71:b3:2c:e9:3d:07:0e:83:c2:1a:
95:77:25:3b:07:ed:99:fc:ad:5a:02:ea:df:1b:54:
75:3d:20:2b:9d:1e:da:72:da:93:a7:e1:fa:3f:b7:
b2:0e:b5:29:b1:3b:29:24:14:22:ab:0c:c6:5d:5d:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:66:45:D9:B2:59:DC:6F:09:DD:CB:D9:0B:FF:9B:3C:38:DB:1B:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d2792d34-8325-33de-95c1-c090857924a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
138.43.101.0/24
138.43.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e8:06:e3:30:ae:f7:2c:11:be:1b:1e:97:90:11:6d:7c:19:
7f:71:43:f6:64:23:00:94:7b:fb:ac:fe:32:01:80:78:bf:e8:
a1:e0:9f:eb:31:b1:38:47:eb:e7:20:43:a1:2b:1a:16:94:ac:
e3:c6:71:a2:2b:79:cb:13:0c:8e:1f:96:d1:6a:b4:a5:cf:61:
f3:df:25:30:85:6b:82:c2:16:8a:1f:c1:ed:e9:7a:a5:b7:30:
0e:db:ac:36:55:3c:84:86:6f:c2:e7:88:03:bc:66:9e:98:3a:
8b:a5:14:6d:60:60:47:a5:19:3d:2c:b0:c0:b7:fe:f4:da:a5:
55:70:47:e3:4b:89:3b:86:5d:c9:03:49:3d:0c:e9:84:f5:d8:
73:df:dd:52:2c:3c:65:35:1c:cc:da:5d:76:44:f3:9d:25:69:
26:fe:b8:ff:af:42:92:4f:ad:aa:5b:87:ca:22:04:aa:2d:01:
5f:47:1a:6c:4f:2f:a7:76:e8:6e:df:0c:bf:d6:dc:67:74:83:
88:2e:34:38:cc:11:ce:ad:86:1a:8f:e4:47:e0:af:42:16:b3:
62:61:09:92:2b:7e:e8:b4:d1:9f:4e:1e:fe:b8:37:ef:36:1a:
72:d6:25:c7:4c:52:b2:57:56:5f:07:8e:32:d5:50:16:1f:ab:
88:94:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:12 2026 by rpki-client