
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa
File: 44005de6-2c73-3965-8b2b-252b2fba62ab.roa (raw, json)
Hash identifier: BDRO1XQB8Fh2RV1drodWMGpIb748QEmB0We6vfIBrUQ=
Subject key identifier: AB:BB:EC:7A:7B:A7:44:CB:54:14:24:50:BC:88:79:37:D9:C8:3C:9D
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584E78FF7A2575E3558D56B0FF80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa
Signing time: Sun 12 Jul 2026 09:00:11 +0000
ROA not before: Sun 12 Jul 2026 09:00:11 +0000
ROA not after: Sat 10 Oct 2026 09:00:11 +0000
asID: 31898
IP address blocks: 138.2.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:78:ff:7a:25:75:e3:55:8d:56:b0:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Jul 12 09:00:11 2026 GMT
Not After : Oct 10 09:00:11 2026 GMT
Subject: CN=a947145d-cd5d-4bc3-a1d3-a5ee6138813d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:fa:29:fb:1c:48:f0:f2:20:ea:1f:93:1f:
fb:22:b4:2d:8e:b4:56:1d:34:a5:bf:36:a9:c9:2b:
6d:8c:99:c7:fa:a3:ff:7a:41:c0:c1:22:79:6d:65:
09:a3:f8:6d:c4:a1:7a:e5:75:24:20:ce:ed:41:16:
48:ab:91:9b:06:50:39:db:2e:fe:bf:4d:d4:84:f5:
15:37:f9:fa:42:fa:ae:53:ae:02:75:1e:c0:c0:bf:
75:65:37:44:76:af:ac:45:60:d4:fd:cd:6c:58:ff:
ef:46:9c:3c:1a:76:3c:90:ac:48:09:d0:63:85:ff:
47:ae:9a:13:4b:7b:87:c1:11:90:c4:19:b2:a4:bc:
c9:ee:3a:cd:6c:60:33:6d:06:14:8f:35:95:6d:8b:
56:0f:65:29:47:b2:3e:63:f6:c3:54:7a:8d:85:a6:
64:54:88:80:29:d1:69:66:c9:7e:0f:ce:1a:e9:f9:
20:9e:3a:0c:19:7b:2b:cf:f6:6b:c5:5f:d4:d9:b7:
58:62:43:02:7f:78:7d:c4:1f:c3:bc:7a:7d:c9:b5:
d1:33:81:fb:ca:2f:e3:84:15:5a:df:d1:df:dd:0d:
78:8e:dd:1d:f9:88:86:a2:05:d0:84:be:80:73:f5:
f9:ea:09:57:6e:9a:b8:07:b1:b9:8b:9a:85:a7:b4:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:EC:7A:7B:A7:44:CB:54:14:24:50:BC:88:79:37:D9:C8:3C:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/44005de6-2c73-3965-8b2b-252b2fba62ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
138.2.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:03:68:16:13:76:d5:73:a2:fc:4f:16:9a:50:db:6b:84:ba:
b2:ed:98:c0:63:ae:71:98:68:cf:27:a9:54:e2:31:6d:a8:95:
d7:0b:93:da:77:f7:7b:88:16:27:14:1e:c9:31:26:07:8e:85:
13:85:ef:86:60:1e:8b:fe:8b:d7:64:dd:f9:5f:3d:62:ef:d0:
99:42:18:48:25:bd:64:a1:6e:27:18:02:f4:d4:c0:e7:2e:e9:
35:2a:ad:85:24:a2:cb:87:52:02:cc:e2:94:d1:73:0f:45:ea:
85:ac:76:77:30:a3:a2:dc:fe:09:8a:6c:61:60:57:f2:b4:db:
7f:35:2b:73:87:6d:c9:95:51:a7:84:17:2a:24:aa:bb:83:5b:
d9:69:a3:63:a1:ad:dc:04:57:92:b6:5d:db:5e:f9:00:f2:f8:
d7:9a:e0:a7:c2:5c:81:0b:f3:cc:08:5f:83:b6:ac:4d:68:55:
4d:6d:c2:8e:7d:05:6e:44:77:80:1b:be:2d:79:e8:b9:74:c5:
41:07:38:70:0d:08:65:20:db:f2:4b:33:10:b8:90:36:dc:c0:
f3:d8:50:cf:bc:bb:d4:06:84:4f:34:fa:03:70:b0:92:de:01:
78:0c:8e:bd:7f:dd:31:93:e4:86:1e:e6:eb:99:54:bc:cc:61:
be:cf:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:02 2026 by rpki-client