
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7406d49c-fa0c-3d2f-874f-5f6c7fd2c2b8.roa
File: 7406d49c-fa0c-3d2f-874f-5f6c7fd2c2b8.roa (raw, json)
Hash identifier: V8quDfwJgRfZ2ObSNpd0TcwZVdUItacb/YYkqVvxQeo=
Subject key identifier: 4B:69:5A:05:53:DC:11:55:79:11:07:D4:7F:C5:47:9C:3E:6D:01:46
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F498BE8DD5A77DB123E6E3C40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7406d49c-fa0c-3d2f-874f-5f6c7fd2c2b8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 198949
IP address blocks: 38.250.236.0/22 maxlen: 24
38.250.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:e8:dd:5a:77:db:12:3e:6e:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8e738845-522b-4001-b903-30386c072ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:2b:15:14:4b:56:b2:c0:6a:86:62:c1:c0:
76:02:eb:e0:25:96:4e:38:96:40:c3:21:5b:b7:6f:
4b:50:87:de:57:d2:db:47:88:71:64:71:c8:5f:b8:
46:72:07:fb:1a:79:7a:e8:97:33:e0:61:55:a7:ea:
d0:a9:fb:9d:2e:4d:50:c8:1a:2d:66:13:37:04:3b:
ec:02:c3:e0:ca:ba:56:ba:b3:df:d1:ba:d3:71:36:
c9:fa:fc:2b:dc:58:c5:43:d4:93:28:a7:18:b9:fc:
db:19:c5:2a:aa:bf:88:d0:d3:03:59:f4:59:bf:d4:
6e:b0:c0:b3:1a:4e:4b:d3:83:85:3f:c3:ed:dd:27:
04:4c:4a:3a:6b:70:23:84:f7:8a:36:3b:75:3f:21:
e7:e6:f5:72:3d:a5:e9:c8:84:4e:10:ac:6f:6c:e6:
06:52:80:71:0d:7b:38:2d:60:3e:29:30:7e:be:c5:
fc:0c:de:ac:d2:37:9a:0d:a5:03:af:19:a4:04:32:
f5:75:c5:3f:7c:e5:cd:3a:b9:fe:ff:92:e2:2c:ae:
28:16:40:cd:9c:6c:94:41:c2:01:52:df:2c:f5:1b:
42:02:e8:49:1e:c2:1d:7c:3c:9c:a7:20:eb:b5:ef:
e8:53:ae:99:1f:aa:43:b3:74:31:41:b2:01:be:d8:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:5A:05:53:DC:11:55:79:11:07:D4:7F:C5:47:9C:3E:6D:01:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7406d49c-fa0c-3d2f-874f-5f6c7fd2c2b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.250.236.0/22
38.250.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fa:91:fa:48:7e:d3:dc:e2:8d:a5:b3:57:10:bd:bc:5d:4c:
4b:f5:02:3d:73:21:fe:d7:05:fe:d6:b1:93:ab:8b:fc:77:9b:
5c:08:01:30:30:c9:eb:99:12:3c:2d:1f:e2:dc:5b:d3:12:2a:
4c:9c:87:d0:f2:a7:d5:74:6b:a7:06:fd:ff:db:9a:83:24:25:
1c:8f:f6:49:9a:47:85:a2:70:ef:45:2a:2f:b0:01:47:03:a8:
78:5d:e8:8e:7e:ca:40:7b:e9:ac:be:53:cf:13:39:8f:f3:8c:
0e:94:98:e4:e3:c5:85:82:1d:a2:9f:33:c8:07:46:2f:8e:c7:
22:aa:7f:70:cd:4f:06:a7:6e:ef:f3:74:dd:08:6a:7e:e2:2c:
c3:39:4c:d7:bf:1f:7c:06:c2:22:32:92:98:da:6c:17:bb:97:
26:24:3a:77:32:24:7f:1b:a8:a7:75:de:6a:4d:ed:62:b0:b5:
38:36:88:dc:29:2c:f3:34:e1:da:d0:fc:41:70:4c:a4:e6:82:
7c:db:83:bd:5f:b1:7e:d8:c9:13:ae:05:78:0e:13:dd:fd:4a:
f6:1a:cb:a0:e2:31:1e:0e:f4:15:16:ae:9f:89:ee:cd:f0:54:
4d:0f:27:ac:cc:db:f2:44:b3:6e:62:df:ee:62:e1:47:f7:7b:
34:b3:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:04:11 2026 by rpki-client