
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b93c1c29-94bb-3b4d-b32a-620d6c06bf95.roa
File: b93c1c29-94bb-3b4d-b32a-620d6c06bf95.roa (raw, json)
Hash identifier: BNOAxq4rF3SDeTyreJOFd4DzcQSlsx0vsobTRJGV5w0=
Subject key identifier: 57:49:6F:61:43:3B:95:35:9A:8B:4F:83:49:3E:24:F4:DC:4E:F4:7E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D39CF990E1F707E4C8A4ACC00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b93c1c29-94bb-3b4d-b32a-620d6c06bf95.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 151690
IP address blocks: 38.196.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:99:0e:1f:70:7e:4c:8a:4a:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=17dac99f-10e2-4e1d-a083-a179ef602789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c9:70:29:fa:e8:16:8e:a3:34:ad:b6:6c:11:
15:1b:57:b8:0a:f8:e9:82:85:10:26:f8:3b:8c:2e:
cf:53:fc:1d:79:3c:9d:fe:77:f0:50:8b:36:36:93:
0c:e4:22:da:3b:7e:55:12:7b:85:4c:d6:46:c7:41:
fd:65:31:a7:fd:3e:0e:67:e8:87:10:cd:63:a8:7f:
11:ad:cc:93:ca:00:40:89:e6:07:33:63:2e:26:ae:
5c:97:15:b5:0b:55:a2:3e:42:60:98:0a:60:4f:aa:
4f:4d:48:e2:2e:df:d9:be:ec:64:fe:e1:ff:c7:68:
bc:d2:5d:c0:dd:1b:ba:87:c7:2a:4e:d9:22:7c:4b:
68:c6:aa:b3:aa:65:b8:b1:40:75:b8:86:09:7c:9e:
58:5e:67:b1:ba:85:b1:14:85:3d:27:8a:d7:6f:a2:
d5:18:56:ff:be:0d:70:6b:64:91:73:47:c4:94:b3:
c3:90:dd:20:f4:9c:4b:77:cc:e0:78:8a:8a:ee:eb:
47:a0:0c:3d:96:60:dd:9b:79:96:3f:66:9b:03:12:
b0:24:6d:67:ea:8a:e9:8b:61:89:d4:ed:4c:b8:63:
08:c4:f8:f4:f7:1c:86:d1:c3:9b:0d:df:09:3b:cd:
1c:17:fd:71:5a:8f:cf:ab:02:12:b3:a1:b0:dd:64:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:6F:61:43:3B:95:35:9A:8B:4F:83:49:3E:24:F4:DC:4E:F4:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b93c1c29-94bb-3b4d-b32a-620d6c06bf95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.196.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:69:78:85:4c:b7:77:a2:af:d7:dc:61:af:26:0d:2f:f3:d1:
7a:0e:e4:f4:e6:ac:ef:38:35:24:bb:f3:e8:6c:b6:fd:3b:85:
d7:c1:d2:79:1d:0c:f7:95:64:09:57:fb:43:6b:10:9e:cc:af:
ea:9c:66:e8:4a:ee:bb:47:f4:6e:2c:30:f3:d3:72:78:50:64:
0e:65:4f:1c:a4:29:1b:3a:71:69:8b:98:0d:f2:d8:e2:50:a7:
65:5b:f1:52:b2:79:d9:27:61:5f:02:e0:c4:8e:fc:35:b4:27:
83:4f:93:89:a3:da:6d:f5:50:44:f9:ae:8a:bb:f8:05:36:3e:
de:d6:f4:94:22:76:5a:52:58:0f:87:48:bf:57:40:d5:ac:90:
8b:18:3e:86:2e:8a:92:e0:bd:3a:fa:46:bb:f6:1e:7c:81:58:
a3:e8:df:92:e6:28:4f:e9:c5:79:e4:fa:71:57:a1:17:a7:a4:
7a:6f:a5:7f:61:07:1a:b2:d5:a8:e3:d4:10:42:9a:80:7f:cb:
c8:22:fe:4e:ed:5f:ac:33:27:fc:e5:7f:db:d5:3e:27:e0:ce:
8e:4e:00:49:ca:50:02:b0:bb:d3:92:6a:76:e2:e0:f8:57:45:
9f:c1:70:4f:b1:5d:2d:19:c5:27:d7:12:d0:39:d1:f1:88:40:
38:d8:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:41 2026 by rpki-client