
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53bfc31a-5e01-3718-8453-b6243ee942dd.roa
File: 53bfc31a-5e01-3718-8453-b6243ee942dd.roa (raw, json)
Hash identifier: wi7qUIcZ412JPy3YBt0MPDhliK0wGSllUvJJ4Sxl3qA=
Subject key identifier: 07:39:3B:04:46:5B:3F:68:36:08:89:70:43:6E:A9:BA:1E:4E:64:95
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F2D87B49F1812BA49D2125800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53bfc31a-5e01-3718-8453-b6243ee942dd.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 52354
IP address blocks: 38.7.32.0/19 maxlen: 24
38.226.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:b4:9f:18:12:ba:49:d2:12:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=c5988687-719b-48c3-8921-b9cb7b012d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:0e:bc:2e:07:0d:3e:ea:96:5f:56:37:54:
ca:a1:5b:c0:1c:d5:3d:b1:40:ff:94:df:6c:e5:0c:
cd:95:6a:62:3c:31:ac:c3:84:3f:62:98:e8:30:25:
bc:5b:e3:12:19:08:3f:91:13:28:88:e7:b1:9e:68:
31:9a:a2:1b:c8:05:5b:8d:fc:29:d6:d0:02:da:30:
12:ef:10:ba:7b:83:a1:80:64:1e:55:b1:de:28:a6:
e7:12:a3:44:ad:b2:86:ba:30:6b:4a:5b:bb:6c:0e:
1f:1b:f2:fe:08:e7:63:17:72:b5:29:35:0f:25:19:
16:98:6f:14:7d:f3:88:39:45:ec:3a:f9:2e:75:f5:
d6:dc:4e:21:a8:c5:a2:41:88:09:01:e9:a1:67:97:
f7:63:45:64:9d:ea:b7:62:cb:a4:41:bc:94:86:ee:
b1:f2:7d:fa:2f:95:bd:7a:da:82:59:21:be:43:1d:
5d:1a:bb:a2:43:59:78:0f:43:3d:7b:be:00:ba:8f:
da:31:9f:46:0e:b8:48:1c:cd:66:14:f0:ce:b0:36:
ae:4e:8f:3c:ae:12:12:c0:cd:2b:e5:a7:81:b2:60:
f7:ef:eb:e7:e1:b7:f4:5b:0c:1d:b2:d6:72:29:f9:
3b:6f:20:5f:56:46:2d:c7:f2:7b:fe:2e:47:66:54:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:3B:04:46:5B:3F:68:36:08:89:70:43:6E:A9:BA:1E:4E:64:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53bfc31a-5e01-3718-8453-b6243ee942dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.7.32.0/19
38.226.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:20:47:c8:e0:b7:68:92:03:27:76:fb:90:04:10:27:b0:4c:
1b:8e:8c:d7:38:a8:03:c4:dd:01:2e:1e:16:3e:e9:78:f6:72:
2d:4f:f1:79:9e:02:a2:9f:5f:98:db:b9:53:84:ce:14:fa:8f:
0c:76:f8:fd:13:8d:1a:55:9a:1c:8d:63:a2:bc:1e:9e:09:5d:
08:c0:90:52:9c:e0:32:ef:8c:39:22:21:e0:10:f3:b2:e6:a1:
11:25:23:4f:e6:21:fe:82:91:b4:d4:d9:c0:5d:48:0d:65:24:
f1:70:c8:b4:92:89:12:31:ef:42:0e:47:82:e0:d6:45:a1:44:
fe:51:b3:5b:f2:81:92:39:5a:d3:e9:b7:a2:e5:18:cd:b1:d6:
c5:06:88:ae:32:a2:c5:03:ec:55:d6:1b:bb:60:0d:54:ea:25:
5d:23:93:11:ee:7e:a9:7d:11:57:5b:95:c3:0a:de:95:6c:31:
ed:ec:fb:c2:ce:9e:7b:5c:99:dd:5a:d0:d3:14:8d:c9:57:d4:
23:6d:08:89:ba:a5:67:78:43:63:8d:5a:87:48:97:d1:2d:3a:
2b:9f:7e:44:8b:70:51:0b:f8:77:45:b5:66:45:ff:87:8d:1e:
75:35:27:72:5f:3e:69:6c:83:7f:ec:51:d2:87:ee:0f:2b:85:
5c:ac:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:52:12 2026 by rpki-client