
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53bfc31a-5e01-3718-8453-b6243ee942dd.roa
File: 53bfc31a-5e01-3718-8453-b6243ee942dd.roa (raw, json)
Hash identifier: 8EsG2qOehzgot7Xz+zksTgBwAEzOGZ3SF0Kcs0U5ccI=
Subject key identifier: 39:53:AA:8C:E0:A7:D2:E4:FF:72:36:38:67:6E:20:AD:E7:44:F8:41
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584DAAE02103890891FEF6B764E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53bfc31a-5e01-3718-8453-b6243ee942dd.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 52354
IP address blocks: 38.7.32.0/19 maxlen: 24
38.226.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:21:03:89:08:91:fe:f6:b7:64:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=7fe9440c-967a-402d-a8a4-d92191259214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:1a:88:c9:2f:d6:cc:d6:9c:4c:a3:33:2f:
eb:c9:c3:91:6a:8f:7e:13:df:3f:fc:f1:7a:08:29:
07:4d:f4:98:28:44:8f:b4:7e:e7:62:73:28:b7:38:
bc:ee:50:79:33:2e:3f:ab:1e:2f:c2:92:46:71:6c:
c1:ae:65:30:b7:31:81:04:09:65:20:1e:e7:7d:bb:
a6:38:e4:0d:81:8a:c8:b8:28:ba:6f:76:c2:74:36:
03:0a:6e:36:1c:19:1a:2c:74:c3:c0:70:99:a9:27:
e1:7c:06:30:70:5f:b1:de:e9:68:f7:8d:fa:be:48:
e0:e2:95:22:4d:eb:eb:11:ab:dc:62:e2:a6:bc:45:
be:e3:8d:cd:bd:f5:60:ee:c9:f1:b1:2a:9e:6d:7c:
52:a6:59:b6:bb:cc:2d:91:01:29:86:cc:52:9a:24:
bf:89:fa:21:ee:7a:97:2c:92:09:8a:4f:d3:96:81:
34:a2:1a:b4:db:da:bc:73:dd:e5:b7:77:f8:ba:de:
74:8f:b9:9e:c7:a0:ca:3a:e2:a1:c2:b4:36:a9:5f:
1b:28:40:9d:0f:c5:a3:3b:e3:cf:6e:0c:5d:cc:80:
37:00:e5:8f:eb:0a:1e:8c:a6:8e:95:d2:7d:bd:0f:
7c:48:c1:bd:65:c2:2c:b3:bc:a5:df:7a:3f:a0:c2:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:AA:8C:E0:A7:D2:E4:FF:72:36:38:67:6E:20:AD:E7:44:F8:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53bfc31a-5e01-3718-8453-b6243ee942dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.7.32.0/19
38.226.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:79:91:5e:e9:4d:ee:7f:09:63:f9:5c:db:74:5a:66:60:2c:
90:c7:48:5b:72:29:36:66:55:96:18:0a:52:a8:fa:4a:b3:27:
11:30:13:b0:10:6f:f7:ed:9d:a2:e6:e0:f5:ec:50:6d:d4:2d:
a5:37:d0:93:7d:09:6f:63:62:43:48:78:98:67:05:1d:a5:19:
38:6a:29:39:18:26:07:6e:4e:08:71:ae:c9:54:bc:cd:57:9e:
f1:78:f0:8e:e6:e9:01:4c:30:aa:e4:e4:1b:6c:07:ce:fb:1e:
49:5b:59:fb:13:c5:67:cc:c2:be:d8:a1:d7:18:68:56:34:1a:
78:6b:c6:d1:e0:22:98:c5:1e:81:fd:db:2d:58:d9:44:43:64:
7c:ba:bf:12:7d:fb:84:f8:d7:eb:1f:b9:7e:2e:ae:75:ae:a1:
58:2c:50:15:cc:cf:d8:5f:37:72:22:e9:fd:1d:66:64:23:a8:
d3:b9:b8:90:a8:aa:d0:16:d3:23:cc:33:dd:ca:74:66:5a:f1:
37:54:c4:8c:96:4c:d9:40:83:92:59:1a:4d:c7:54:8a:02:90:
61:73:d7:43:a5:17:e5:2c:e6:c9:93:8f:46:5f:cb:f6:a3:95:
2d:ec:67:61:26:a7:27:6c:2e:9c:90:9f:4f:9b:2d:ad:77:55:
ff:0e:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:10 2026 by rpki-client