
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5ba21e2-63a3-3729-8121-263928cc0985.roa
File: d5ba21e2-63a3-3729-8121-263928cc0985.roa (raw, json)
Hash identifier: zQzbG7NE9e1/jB+OTXEsETbGOtUvIWp8fZRcf2aVQJc=
Subject key identifier: 0C:88:26:88:6F:35:7E:5F:C5:1A:63:86:2E:3B:00:0E:96:FD:0D:32
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F49746256693A7D7CFEE34840
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5ba21e2-63a3-3729-8121-263928cc0985.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 142393
IP address blocks: 38.44.248.0/21 maxlen: 24
154.18.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:62:56:69:3a:7d:7c:fe:e3:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9d12d770-8614-4f4d-a10a-fd369bf90f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:c3:34:bc:b8:b3:36:c5:90:f1:38:98:0e:
00:77:fe:65:f6:ae:28:99:3a:af:f9:74:ea:74:dc:
88:f1:70:5e:25:c1:ed:c5:9c:8a:68:bd:61:66:11:
37:3d:2f:d4:06:6f:6c:11:41:bc:62:5a:f0:6d:2f:
2c:84:20:3d:df:db:c8:04:7d:6c:33:ef:3c:55:97:
94:ed:54:3d:32:88:75:ad:d9:3b:a8:7c:b5:2b:8e:
4e:71:58:db:23:0d:18:8f:17:37:16:32:2c:5d:04:
6b:1f:eb:1d:82:c4:87:65:33:c9:49:80:f6:47:52:
aa:c9:8f:36:89:a1:96:fe:bf:57:3f:9b:56:51:1a:
86:9a:b8:3c:37:49:bc:a0:d2:8d:df:bf:7d:8d:cf:
84:5e:64:d0:bf:02:c1:fa:49:c2:fc:89:0a:0d:b5:
62:26:70:30:c2:fe:ef:d6:0d:74:89:4f:20:31:f7:
61:70:7e:92:de:21:64:53:84:11:42:de:02:0a:7f:
cf:e7:f5:9a:30:67:17:39:2d:b9:f5:22:77:d8:39:
27:8d:1b:74:aa:87:22:a6:fa:d1:59:76:1f:2e:55:
f3:54:e9:b5:31:81:c7:87:31:4e:1b:02:b6:66:21:
f8:4f:e3:9c:4a:cb:80:43:65:67:0c:d9:b9:9d:c5:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:26:88:6F:35:7E:5F:C5:1A:63:86:2E:3B:00:0E:96:FD:0D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5ba21e2-63a3-3729-8121-263928cc0985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.44.248.0/21
154.18.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:03:00:a3:0f:53:b6:78:5f:c6:81:fc:66:da:92:ce:5b:85:
eb:cf:a7:d1:ef:d2:b0:1d:6a:5c:bc:13:a7:12:ab:a7:0e:f2:
fe:3d:ed:96:57:97:30:2b:ad:36:73:b0:3a:ac:aa:77:ea:4b:
80:a8:a3:28:0c:66:c2:64:bd:10:b5:13:ef:b9:db:5d:a3:0a:
9a:26:74:79:8e:93:e0:e9:d6:60:8d:39:f4:ff:41:29:9a:c1:
eb:95:42:8a:ec:95:e6:04:21:2e:cd:04:47:0d:c0:c1:5d:5b:
23:20:87:07:4f:d3:c9:c2:a8:f5:5a:b2:6b:4a:67:d7:c9:8b:
28:1e:37:6c:fb:46:41:96:81:89:60:81:50:d0:9c:09:8a:c6:
f6:48:01:e2:8e:d4:3b:9d:83:a9:72:7b:5f:35:c4:f9:02:c6:
96:fb:15:44:43:4d:1b:64:92:f5:a6:f7:da:96:40:9c:0b:80:
9a:af:84:2c:7f:13:39:45:16:9c:d5:05:95:4a:81:09:16:81:
7f:02:e6:0d:36:82:81:ba:69:c7:f1:82:09:7e:54:32:39:bf:
eb:ff:b6:80:16:71:8d:8b:a5:ee:fb:37:e8:a7:2e:72:a1:f8:
4c:c8:33:55:71:a2:9f:37:9b:f3:96:b5:53:b3:71:23:6c:23:
88:89:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:26:13 2026 by rpki-client