
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa
File: 38e74e1c-b86a-3296-8086-90ae60fb05a9.roa (raw, json)
Hash identifier: 904GYbxn3zKdwSgecy93D0zIf6jACzR8gebaNf6NWJc=
Subject key identifier: 75:F3:4B:DE:1E:CC:67:D8:07:F9:0A:15:B1:7E:07:C8:24:55:7B:FB
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E5E79F9E5A63A493CE1F88480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa
Signing time: Thu 02 Jul 2026 21:00:12 +0000
ROA not before: Thu 02 Jul 2026 21:00:12 +0000
ROA not after: Wed 30 Sep 2026 21:00:12 +0000
asID: 0
IP address blocks: 38.64.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5e:79:f9:e5:a6:3a:49:3c:e1:f8:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 2 21:00:12 2026 GMT
Not After : Sep 30 21:00:12 2026 GMT
Subject: CN=739faeaf-bbe2-475e-8256-8489bfaefc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:ac:a0:6c:5a:4f:fa:5d:2f:a0:da:c1:5f:
26:80:e6:8a:fe:5d:c6:36:b6:fb:7d:8f:74:0b:99:
fd:4c:69:7d:d3:26:a0:bf:3e:a0:e6:0e:e4:77:a6:
c9:b5:ab:1c:c2:29:c6:27:d5:26:58:88:d9:0c:5e:
24:62:aa:2e:6d:cc:c3:66:0b:2a:8f:c0:73:97:82:
ce:73:70:3a:19:08:4b:cb:a7:53:bf:cb:4c:df:75:
5f:0c:33:3d:28:14:55:e8:9c:0c:8a:c4:be:a4:47:
e5:07:7b:01:75:b5:e0:4b:d4:5f:44:3c:cc:fd:0a:
0c:cf:db:e6:cd:10:95:aa:53:f5:6d:37:20:11:71:
f1:bf:99:23:50:c0:32:db:d4:fe:bc:6f:6c:b8:d8:
f8:6c:b9:d0:8e:c4:f0:c0:08:50:44:f0:f1:d3:be:
fe:ba:23:ac:71:a7:ad:90:bb:7e:20:56:53:14:94:
b4:91:8e:c4:b4:50:6c:71:87:84:aa:34:74:8b:bd:
a5:fe:49:31:f3:bc:21:03:ee:59:04:8d:c0:25:bb:
a2:92:7a:64:78:06:a9:d2:e5:b0:e6:e8:7b:0b:3f:
5f:36:0c:30:e0:b3:a8:56:98:e7:be:af:17:40:ac:
f3:63:05:21:47:37:a7:55:d8:a7:21:30:0b:59:e5:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F3:4B:DE:1E:CC:67:D8:07:F9:0A:15:B1:7E:07:C8:24:55:7B:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.64.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d7:70:56:c4:93:86:ae:91:06:84:65:73:a9:f0:24:cb:e8:
6f:eb:cd:3c:f1:e2:c3:e1:3c:1e:f1:1e:44:40:f6:08:a8:96:
02:c3:41:24:30:a3:79:61:2c:bf:2b:3e:8d:e0:0c:49:90:56:
da:98:b2:07:94:a8:dc:72:f9:2a:a7:78:4b:c0:8d:f7:f8:98:
c9:e4:61:9f:f5:5a:93:9d:f6:6c:27:09:de:b0:a0:93:34:8f:
4a:9e:1f:26:4e:3d:c5:ce:21:56:a8:da:bb:69:11:69:28:98:
cd:2e:d6:eb:ac:78:b9:00:86:84:91:42:7b:0d:e4:de:8e:41:
f0:92:c3:dd:e1:e6:7b:0c:ab:dd:eb:5f:bc:63:b9:b4:fc:d3:
b9:2a:19:79:a5:e4:9c:10:9f:d5:fe:a6:b0:c0:5b:20:5c:b0:
09:0d:ae:6c:91:8d:60:6c:7b:0a:1e:21:35:4d:e6:9f:f1:97:
82:af:e3:38:df:7a:1b:61:b3:bf:ad:82:ae:2d:4d:8d:8c:f2:
ae:03:7c:58:ca:ee:bf:55:d7:5d:47:64:f9:0d:ac:bb:e5:80:
a7:d9:30:5c:c7:b0:07:99:53:3f:97:db:e9:b3:ed:5d:ab:44:
c8:8a:7f:0f:28:99:5c:92:32:eb:4f:3b:2e:8d:69:65:76:8c:
a2:da:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:41 2026 by rpki-client