
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a840bd2-2570-3f66-a11e-598318aba845.roa
File: 6a840bd2-2570-3f66-a11e-598318aba845.roa (raw, json)
Hash identifier: m++pvBtKuvSkcEh+6LTxdFymSQKo08ONyJxkjuwTQ8Q=
Subject key identifier: E9:68:4A:1E:F0:88:21:94:BE:05:BC:60:ED:E0:4A:AA:D5:EC:6A:C7
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E779A32E65A7DDD6CE71A8C40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a840bd2-2570-3f66-a11e-598318aba845.roa
Signing time: Sat 11 Jul 2026 21:00:11 +0000
ROA not before: Sat 11 Jul 2026 21:00:11 +0000
ROA not after: Fri 09 Oct 2026 21:00:11 +0000
asID: 32277
IP address blocks: 38.18.96.0/19 maxlen: 19
38.39.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:77:9a:32:e6:5a:7d:dd:6c:e7:1a:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 11 21:00:11 2026 GMT
Not After : Oct 9 21:00:11 2026 GMT
Subject: CN=2c1bff0b-8c92-4cfa-b123-4f45d5eedbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ee:66:0e:c7:4a:56:d8:3f:aa:58:d3:23:f4:
66:df:be:4c:bb:ec:90:44:12:1d:2f:ec:ca:48:86:
68:68:56:f9:72:01:76:e9:dc:5e:1a:49:93:17:4e:
66:41:79:0c:c1:5c:fc:03:7b:f5:73:c1:74:9c:18:
41:b4:bd:9d:77:24:b9:01:8b:ec:8d:14:f8:98:e5:
f1:e4:c1:59:22:28:3a:39:53:54:56:88:09:3a:fd:
a3:fc:78:d0:9e:b4:dc:4b:81:67:7e:8b:a9:85:3e:
4e:5d:9e:65:bc:5c:66:89:67:f7:51:7e:89:6b:65:
4a:1f:49:e2:d5:7a:50:70:8e:f6:97:42:d7:30:d1:
36:8c:64:18:e2:3e:15:71:fc:8a:16:6e:e6:6a:d5:
1b:bc:8c:72:b2:b2:d6:fe:24:0e:f0:a8:f7:ca:76:
8a:6c:c0:29:21:c2:40:59:06:54:fa:1f:2f:68:d9:
a8:cc:93:67:48:23:3c:68:25:d5:9d:7c:68:2b:1c:
72:f1:db:b5:e9:f2:83:89:ea:f5:2d:aa:12:89:58:
b0:25:9c:43:0e:89:38:67:b6:9a:3e:c1:61:5c:89:
1e:56:f4:df:89:05:8a:0e:45:d7:a8:e2:36:b8:ed:
05:ab:ad:de:29:e2:63:94:b6:b5:70:4f:1c:07:48:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:4A:1E:F0:88:21:94:BE:05:BC:60:ED:E0:4A:AA:D5:EC:6A:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a840bd2-2570-3f66-a11e-598318aba845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.18.96.0/19
38.39.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:68:bf:05:ec:13:1e:4f:68:5c:5f:eb:04:bb:9f:1e:3c:3d:
85:c4:53:19:38:12:23:98:ad:0b:5b:ea:75:a3:3c:9e:08:9a:
8c:86:8a:87:dd:6a:da:d3:98:a0:ad:77:d8:0a:27:a6:06:41:
1e:ac:5f:5b:ee:18:17:e1:5c:9e:a7:5a:ae:74:3b:83:ce:bd:
df:c3:79:61:df:e8:82:08:dd:8d:14:ca:b0:d7:b6:a1:4f:d9:
1e:d7:3e:6a:b4:bc:55:f0:36:3f:3f:e3:9b:ec:4d:a9:17:b3:
38:d7:c0:f0:6c:b2:12:f1:1d:35:b4:28:b2:a2:03:02:71:1a:
6c:e4:01:dc:07:f7:5b:d5:fa:37:dd:50:7f:5f:98:57:db:58:
a6:52:e8:8f:48:73:aa:b7:81:fb:28:78:e3:81:61:b2:21:ee:
b8:97:3f:71:e3:19:a3:92:dd:c4:a6:5f:9f:c0:b6:38:19:fb:
e7:87:96:39:fb:c2:10:6e:b7:cc:e0:dd:f3:4b:1e:ef:c9:07:
e2:c0:07:ce:d8:32:0f:36:46:c6:d4:75:c7:d9:8c:4f:83:65:
f8:fa:a1:14:75:22:75:3c:97:c6:95:b4:50:e8:74:f7:bd:01:
f7:8c:ab:2c:6c:9c:2c:24:d7:aa:de:44:e8:cb:eb:14:79:4e:
2b:86:35:54
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE53mjLmWn3dbOcajEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk
MmMxYmZmMGItOGM5Mi00Y2ZhLWIxMjMtNGY0NWQ1ZWVkYmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu5mDsdKVtg/qljTI/Rm375Mu+yQRBIdL+zK
SIZoaFb5cgF26dxeGkmTF05mQXkMwVz8A3v1c8F0nBhBtL2ddyS5AYvsjRT4mOXx
5MFZIig6OVNUVogJOv2j/HjQnrTcS4FnfouphT5OXZ5lvFxmiWf3UX6Ja2VKH0ni
1XpQcI72l0LXMNE2jGQY4j4VcfyKFm7matUbvIxysrLW/iQO8Kj3ynaKbMApIcJA
WQZU+h8vaNmozJNnSCM8aCXVnXxoKxxy8du16fKDier1LaoSiViwJZxDDok4Z7aa
PsFhXIkeVvTfiQWKDkXXqOI2uO0Fq63eKeJjlLa1cE8cB0hFuwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOloSh7wiCGUvgW8YO3gSqrV7GrHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNmE4NDBiZDItMjU3MC0z
ZjY2LWExMWUtNTk4MzE4YWJhODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJhJgAwQF
JidAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEdovwXsEx5PaFxf6wS7nx48PYXEUxk4EiOYrQtb6nWjPJ4I
moyGiofdatrTmKCtd9gKJ6YGQR6sX1vuGBfhXJ6nWq50O4POvd/DeWHf6III3Y0U
yrDXtqFP2R7XPmq0vFXwNj8/45vsTakXszjXwPBsshLxHTW0KLKiAwJxGmzkAdwH
91vV+jfdUH9fmFfbWKZS6I9Ic6q3gfsoeOOBYbIh7riXP3HjGaOS3cSmX5/AtjgZ
++eHljn7whBut8zg3fNLHu/JB+LAB87YMg82RsbUdcfZjE+DZfj6oRR1InU8l8aV
tFDodPe9AfeMqyxsnCwk16reROjL6xR5TiuGNVQ=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:25:08 2026 by rpki-client