
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b0f23c2-5693-3561-88d4-387c4641a857.roa
File: 0b0f23c2-5693-3561-88d4-387c4641a857.roa (raw, json)
Hash identifier: jx/sOi2KjIEucjv39lAnX3FQe0nvNfEAL4SmnPG7L/U=
Subject key identifier: 59:45:09:25:E3:B8:79:8C:9E:AC:D8:5F:7F:DF:F3:0C:9E:46:0E:85
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F49737BAF245BC832A88C72C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b0f23c2-5693-3561-88d4-387c4641a857.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 275743
IP address blocks: 38.236.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:7b:af:24:5b:c8:32:a8:8c:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=dc93fcdc-7798-4683-a814-a11c84ebb2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:50:bf:bf:c6:d4:00:74:d0:a6:ab:bf:c7:
ea:f8:58:b9:e7:36:fa:f1:cf:e3:cd:96:c7:aa:3b:
eb:1c:e5:51:db:08:d7:09:f6:99:06:39:bb:79:6e:
88:95:0a:eb:38:a5:a7:b1:cc:fc:63:47:42:74:13:
a1:40:e3:a6:8e:99:e3:b5:c8:80:94:93:f8:af:cc:
f4:37:19:bb:ce:65:f3:e2:9e:2e:16:b0:a0:cf:78:
a8:63:42:a0:bd:c0:20:14:60:ea:31:85:40:94:97:
3f:e4:6e:9a:d8:a0:65:07:8a:ec:c6:4e:f5:88:7e:
14:78:78:a9:86:23:e4:5f:27:66:a4:64:b1:80:b5:
1c:ca:71:65:a7:94:5a:89:3d:02:fa:69:2f:57:53:
f2:7e:51:6d:9f:05:3e:da:4b:a6:08:99:7a:32:36:
2e:35:dd:63:bc:2f:80:da:71:60:46:a9:59:0e:86:
37:29:96:42:b9:4f:d9:f9:2d:a8:38:ea:08:12:7c:
2b:8d:2e:97:69:15:34:af:8f:ca:a6:14:7c:bc:a3:
f8:cd:54:dc:b5:92:d9:e8:44:55:b6:b9:98:9d:c8:
e7:22:64:a6:ac:ab:9b:0b:88:18:0c:fa:87:08:da:
9b:e5:7f:d3:8f:b4:05:4a:40:d2:c2:4d:18:89:16:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:09:25:E3:B8:79:8C:9E:AC:D8:5F:7F:DF:F3:0C:9E:46:0E:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b0f23c2-5693-3561-88d4-387c4641a857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.236.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:57:b1:c6:01:43:4d:c3:26:f8:d2:ad:ac:13:1e:aa:03:f9:
0f:38:89:d1:80:06:f0:7d:b8:2c:f9:e2:e4:31:cb:ff:15:85:
69:3e:93:36:ea:6f:42:1d:5b:3d:76:01:72:40:f4:09:c0:f7:
6c:12:67:d6:64:9e:06:82:bf:2a:d6:42:23:45:fe:0f:36:d0:
fd:8d:5a:81:d6:fc:9f:d0:e7:f4:62:eb:4d:9a:a9:b5:43:06:
a1:b1:8d:76:4a:44:09:cf:33:3f:49:55:0a:a8:26:cf:d0:92:
1b:58:e3:62:3f:b0:4b:8f:49:bd:82:bb:f6:59:92:ad:21:5a:
52:d9:07:a1:7f:69:7c:2d:10:22:50:49:ef:70:d8:9e:96:4a:
3a:2b:ee:d9:af:bb:cd:6a:27:24:b7:f4:39:04:78:e7:db:82:
1e:ce:4f:04:55:2f:2c:e4:ee:17:a1:3d:bd:2f:ee:da:51:61:
f9:59:23:d8:3b:df:1a:bf:9d:5e:4e:bb:ee:e5:94:9f:b8:ab:
e5:39:48:4f:e3:df:c7:bf:37:b1:47:6a:a3:56:90:e2:d7:d0:
0c:99:83:29:4e:7c:3b:45:13:ee:3f:55:34:2d:a5:a5:9a:19:
8f:db:f8:0a:c2:93:5d:30:11:ab:3a:66:f8:8e:2e:35:28:4a:
3a:13:e3:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3uvJFvIMqiMcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGM5M2ZjZGMtNzc5OC00NjgzLWE4MTQtYTExYzg0ZWJiMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1RQv7/G1AB00Karv8fq+Fi55zb68c/jzZbH
qjvrHOVR2wjXCfaZBjm7eW6IlQrrOKWnscz8Y0dCdBOhQOOmjpnjtciAlJP4r8z0
Nxm7zmXz4p4uFrCgz3ioY0KgvcAgFGDqMYVAlJc/5G6a2KBlB4rsxk71iH4UeHip
hiPkXydmpGSxgLUcynFlp5RaiT0C+mkvV1PyflFtnwU+2kumCJl6MjYuNd1jvC+A
2nFgRqlZDoY3KZZCuU/Z+S2oOOoIEnwrjS6XaRU0r4/KphR8vKP4zVTctZLZ6ERV
trmYncjnImSmrKubC4gYDPqHCNqb5X/Tj7QFSkDSwk0YiRaKuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlFCSXjuHmMnqzYX3/f8wyeRg6FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGIwZjIzYzItNTY5My0z
NTYxLTg4ZDQtMzg3YzQ2NDFhODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuynMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJXscYBQ03DJvjSrawTHqoD+Q84idGABvB9uCz54uQxy/8VhWk+kzbq
b0IdWz12AXJA9AnA92wSZ9ZkngaCvyrWQiNF/g820P2NWoHW/J/Q5/Ri602aqbVD
BqGxjXZKRAnPMz9JVQqoJs/QkhtY42I/sEuPSb2Cu/ZZkq0hWlLZB6F/aXwtECJQ
Se9w2J6WSjor7tmvu81qJyS39DkEeOfbgh7OTwRVLyzk7hehPb0v7tpRYflZI9g7
3xq/nV5Ou+7llJ+4q+U5SE/j38e/N7FHaqNWkOLX0AyZgylOfDtFE+4/VTQtpaWa
GY/b+ArCk10wEas6ZviOLjUoSjoT45U=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:47:59 2026 by rpki-client