
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
File: 27962d7b-6418-3102-a022-ff4ff29b0763.roa (raw, json)
Hash identifier: UKU+tA6dQ6cRWBo+peVQlrG3wusUzXl+x7/NnBlaXMg=
Subject key identifier: 28:A1:73:FF:CB:6F:7C:35:B3:99:90:3E:79:CB:51:AA:8C:40:9F:7D
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584F1B6245AB490B075D10D9FA80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
Signing time: Tue 08 Sep 2026 13:00:12 +0000
ROA not before: Tue 08 Sep 2026 13:00:12 +0000
ROA not after: Mon 07 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 138.1.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1b:62:45:ab:49:0b:07:5d:10:d9:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Sep 8 13:00:12 2026 GMT
Not After : Dec 7 14:00:12 2026 GMT
Subject: CN=421a8ed3-0ffd-498a-aa92-08ec478e9914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:2e:3c:07:74:92:d6:3e:2a:5a:f1:04:6b:
3d:70:68:fe:60:9c:20:cc:02:76:82:e6:01:96:12:
94:27:39:f9:f4:48:2d:8d:58:e5:ab:8f:74:7f:57:
be:72:58:a1:1d:90:a6:19:3f:51:5d:43:1d:ab:7d:
87:bb:4b:ea:bc:23:20:eb:bf:fb:60:19:ec:7f:4d:
cd:5b:96:df:8b:bb:57:e2:58:b0:31:0e:18:76:34:
76:3f:da:16:e3:5e:2f:e1:bf:37:69:a7:08:82:f1:
46:b8:3a:dc:7c:cd:fa:ff:bd:3b:f5:c4:b6:c2:a6:
89:6b:7d:e3:30:11:f8:cf:b0:0d:f2:80:9c:94:06:
55:03:8e:a8:c9:7b:0f:cf:5d:ed:e5:63:4b:6f:41:
e5:77:49:35:67:60:2c:10:f9:df:42:5c:06:23:d1:
6e:6b:23:af:18:2c:4c:0f:87:9c:4c:18:ee:60:c2:
07:3e:95:fd:41:79:7b:2d:5a:8e:5d:ec:a9:39:18:
b2:63:a4:01:41:a6:c3:2f:5e:20:d5:2c:5b:4e:19:
46:c8:25:ca:6b:a3:2a:14:28:7f:e4:63:d1:53:05:
77:b2:31:52:97:32:7f:52:5e:3a:2a:59:27:ca:41:
64:c3:54:b6:dc:71:78:b3:06:db:d6:fc:5f:5d:d2:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:73:FF:CB:6F:7C:35:B3:99:90:3E:79:CB:51:AA:8C:40:9F:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
138.1.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:15:fd:c6:95:35:b0:2f:67:f7:8f:c5:b3:e8:a7:04:55:5b:
a2:03:64:84:79:a3:a7:2f:69:59:cc:62:88:b4:d1:4e:70:07:
27:12:b1:cd:45:67:cf:ed:ac:dc:39:d8:0a:fe:76:84:7d:f3:
84:5f:bc:15:31:b4:ef:b6:17:4d:ec:56:11:2f:5c:11:71:09:
0e:e3:dd:c4:62:ae:69:de:23:e2:10:02:a0:f4:1a:14:bf:2c:
62:d3:52:29:12:13:1e:20:2f:12:b2:4a:d2:00:5b:18:e0:64:
e6:70:fe:32:38:e5:e9:4f:5f:fe:84:8f:7f:7a:06:ce:85:5f:
3c:bc:c5:fc:fc:d3:96:2b:c3:77:8c:b0:de:32:cb:59:35:21:
5b:5b:e1:bc:74:cc:5b:70:a5:04:7d:4f:3e:92:4c:3f:e0:c5:
1c:18:85:6d:cc:2e:5f:77:d0:40:95:2e:36:48:a4:82:11:ac:
33:15:f1:0c:2a:f9:1d:6b:41:8a:f3:ad:a2:80:8d:28:de:e8:
ad:51:5e:8d:55:85:ec:6c:8f:0a:f3:9d:ac:80:50:f7:d9:3b:
25:88:1b:7e:30:bf:7a:78:bf:e1:9a:05:8c:1f:38:05:e0:8a:
05:f8:93:ef:72:77:7a:15:e5:cf:dc:3a:34:9b:db:d5:3b:1f:
63:4c:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:57:38 2026 by rpki-client