
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa
File: 718c7d81-d37e-3832-a526-ea9f1f684b8e.roa (raw, json)
Hash identifier: 3PZMMk8BZfahnb4Ho6y+WY+9IPPl14X3mlIaxZYANsI=
Subject key identifier: 58:5E:67:D7:EA:64:69:11:21:03:A9:B4:B6:42:AC:1E:03:8A:64:B9
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584DA3E5691E13E32EA54268DF80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa
Signing time: Mon 27 Apr 2026 01:00:24 +0000
ROA not before: Mon 27 Apr 2026 01:00:24 +0000
ROA not after: Sun 26 Jul 2026 01:00:24 +0000
asID: 33647
IP address blocks: 38.158.32.0/19 maxlen: 24
206.85.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a3:e5:69:1e:13:e3:2e:a5:42:68:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 27 01:00:24 2026 GMT
Not After : Jul 26 01:00:24 2026 GMT
Subject: CN=d5d26ad5-804f-469f-be46-6818e6d78f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:36:ff:0e:ac:1b:6c:94:aa:03:ce:0c:bd:
7c:35:3d:47:a3:d7:13:da:1d:70:3c:97:f4:bd:25:
32:e0:2e:a0:8f:db:50:76:4a:e0:f4:c7:74:ce:cb:
81:03:c6:d7:99:03:a6:d5:9c:60:01:2f:7b:3c:1b:
25:36:c5:8a:f8:bb:91:e9:07:f1:b1:57:c2:5f:13:
0f:dd:85:52:16:4c:e4:51:be:9e:50:d9:fc:75:cc:
44:22:ce:0c:92:49:b0:99:44:c1:73:6c:e2:46:d6:
95:53:35:85:f8:86:d5:bd:20:f8:dc:f2:06:01:49:
27:a9:21:ff:61:39:1b:a6:93:c9:4a:4b:4b:0c:a1:
af:68:3e:a8:d2:5a:71:91:50:17:02:22:69:3f:0c:
27:4b:7c:67:5c:82:a6:14:ba:02:d5:c8:f5:e4:81:
b4:d0:c2:e3:36:c2:eb:d5:13:4a:01:d4:0a:21:d3:
8d:ff:78:e0:f3:f1:a5:b9:5d:7e:f0:a0:c0:ee:c7:
e3:b4:2d:47:d2:2c:30:75:a7:a5:31:ec:ea:e5:24:
5e:5f:40:88:e2:ba:5a:01:fb:cd:96:7a:02:3d:89:
72:55:c6:06:e5:82:65:c1:7e:a0:76:8e:c7:9c:42:
d2:d5:d2:79:41:e0:06:8b:37:60:df:c6:50:eb:00:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:67:D7:EA:64:69:11:21:03:A9:B4:B6:42:AC:1E:03:8A:64:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.158.32.0/19
206.85.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:14:ba:56:f2:d1:58:1b:ce:05:f1:b0:84:d0:da:b0:cb:60:
05:45:55:63:97:55:94:6c:e3:c0:7d:06:44:49:44:b3:a9:a0:
01:0d:dc:1f:85:05:75:c3:7d:b9:b6:8c:42:e1:9d:b1:5f:4f:
53:ce:bf:55:30:a5:e3:41:d0:a4:f5:8a:e3:d6:3c:5b:ae:38:
55:09:9b:8e:11:77:53:1e:3c:14:aa:77:c7:11:27:2b:41:c1:
b2:22:3e:54:38:5e:fd:d4:76:fd:d3:40:2e:3c:d1:20:42:22:
51:1a:69:92:c8:5d:b8:2b:f3:9e:e9:34:b3:fd:24:9a:b0:58:
34:97:64:d2:75:52:66:db:c0:35:eb:1e:99:48:ff:54:ef:e8:
8c:0d:f1:a0:98:77:83:50:c1:d2:a5:2a:c0:d4:0d:a7:fd:ad:
9a:de:e1:3d:f0:c2:d3:1e:f0:ab:99:35:d7:fa:ba:62:1c:01:
2d:9f:a4:ad:bc:10:3b:21:05:7c:93:c7:8c:cd:74:c7:db:29:
f5:d0:e0:eb:26:4e:b2:d7:61:19:95:a0:73:f8:5b:1f:cd:e0:
6f:6e:27:67:64:f7:34:83:94:a0:ec:3b:5d:b1:45:41:6f:86:
57:66:64:06:f8:75:6e:4e:60:b2:9f:c1:a5:f4:14:88:11:0e:
8e:ee:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:44 2026 by rpki-client