
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa
File: 84a611c4-8da6-3344-b367-ecd628352675.roa (raw, json)
Hash identifier: iNfoAUQIbsInb9uUxwDoQ+eVh4ls0gO0xeC7FP/tFMQ=
Subject key identifier: 2E:D4:6F:83:6A:02:7B:1C:ED:42:FD:4F:6F:E8:D0:0A:CE:A5:15:47
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F4987F3EC64DDCAA29A7B2A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 150161
IP address blocks: 38.175.0.0/19 maxlen: 24
149.71.176.0/20 maxlen: 24
154.40.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:f3:ec:64:dd:ca:a2:9a:7b:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e5c76046-fbe3-43ea-934e-90c4bff7a094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:ff:c1:17:39:64:fc:f5:5d:91:54:0a:8d:
fc:99:50:96:9e:e7:53:3f:2c:d0:2f:6a:12:9a:81:
db:16:c1:99:11:78:24:49:86:f7:97:70:a1:69:e9:
06:d3:3d:66:9b:e8:75:93:c1:5d:35:29:76:5f:a5:
42:b5:2d:80:75:96:57:d1:8e:57:0a:47:f0:b8:38:
2e:be:2e:05:ef:ae:4f:ea:98:7a:a2:38:11:8b:5e:
2e:c2:57:97:c9:b3:b6:89:84:62:4c:aa:00:31:83:
01:60:8b:a6:98:9e:31:ff:93:fe:c0:01:e0:81:4f:
b8:fd:89:32:60:0c:cc:84:f5:cd:88:7c:bc:eb:90:
78:34:e9:b6:15:ae:ca:65:fd:b2:dc:b6:60:a2:21:
56:21:26:f4:4f:59:68:e5:ac:c2:92:ad:e7:54:6d:
b3:1c:fb:e1:61:54:14:0a:a8:14:c0:2d:24:f7:46:
a8:c4:bb:c6:5b:e5:c9:32:16:88:fd:14:12:24:71:
46:60:0d:48:ca:15:48:fb:93:d2:d0:6b:5f:25:b0:
70:ff:59:3b:9b:4e:2a:28:0e:f1:03:b5:48:ad:99:
7e:22:ad:5a:16:e2:22:a4:9b:1c:dc:3a:08:76:3b:
1a:2c:a2:9f:55:b6:71:f4:41:35:00:bb:6b:d9:b0:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:6F:83:6A:02:7B:1C:ED:42:FD:4F:6F:E8:D0:0A:CE:A5:15:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.175.0.0/19
149.71.176.0/20
154.40.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f2:81:03:38:0f:8e:1b:20:cb:86:cb:4e:73:f3:3d:30:d2:
cc:b2:a7:d1:f9:93:15:0e:f1:5d:90:64:97:f4:20:d0:f1:12:
0d:3f:27:63:12:81:20:2b:80:7d:e8:40:dd:fa:cb:f2:f1:1e:
dc:16:ac:0b:e9:e8:70:92:df:bd:36:e1:e5:0d:0f:2c:59:0c:
b6:22:f1:c4:e8:19:c0:4d:37:27:39:00:83:0e:38:ca:b1:d7:
96:f8:a8:e4:db:ef:8a:a1:b4:09:9b:99:cb:7b:f8:20:96:93:
4b:4c:d5:b5:62:e4:88:04:fb:06:1e:76:c6:86:7b:b2:9c:ce:
41:48:45:13:c2:c5:a9:41:5c:ba:10:e6:85:55:87:44:fb:9a:
80:3e:0b:8a:bb:b8:5e:db:bf:c2:e8:e5:65:34:43:8c:19:b4:
e2:55:8a:e2:eb:75:d0:32:aa:58:cb:c9:8e:e3:dc:4b:72:3b:
5b:0c:83:f7:54:67:1d:ba:b8:b5:38:1a:90:68:8d:90:a8:5c:
cb:91:fc:b9:9f:35:03:29:04:6f:da:d4:54:93:d0:73:92:bb:
52:5a:da:bc:ec:f7:03:d8:69:b2:13:4a:2f:86:95:f4:5d:5e:
a1:9e:71:04:94:c7:85:cd:1d:3b:9b:12:dd:aa:72:3b:51:13:
cd:96:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:46:16 2026 by rpki-client