
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa
File: e166c054-c750-3fa9-ae7d-80d1294357cc.roa (raw, json)
Hash identifier: hAhhUsrSlsqFYn0bTxCJnPgwjamjsBd53PormUn9nAE=
Subject key identifier: 4A:17:CE:7C:FC:31:82:77:B3:C3:01:B6:D4:88:6A:DC:47:3D:39:CE
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584E6F3EB0B3AEBEBDAFBBF4FEC8
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 31898
IP address blocks: 138.1.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3e:b0:b3:ae:be:bd:af:bb:f4:fe:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=32067eb7-ceba-4d22-a40a-d617939903d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:8f:54:0c:71:06:d5:72:40:5b:6f:a2:1c:
1d:7c:8c:de:4e:37:90:34:e3:73:9b:d2:a9:50:b2:
20:9d:fa:54:c7:42:d3:b6:db:0b:a0:3f:d5:37:3b:
a6:a2:85:56:f2:62:fd:01:91:33:b4:ef:bd:84:9e:
55:08:b0:ba:f3:6c:07:9a:96:ef:69:81:9e:91:62:
5c:21:58:13:22:75:7e:6d:75:53:18:b2:dd:bd:d5:
fd:9d:40:cf:fd:b3:ee:7d:6b:f6:66:02:d8:c1:c1:
a5:8a:ee:f8:a2:ab:9a:5a:c7:25:39:37:47:3f:55:
f1:10:a0:5d:82:a9:ea:e6:65:43:3f:14:9f:23:f4:
51:db:d3:4a:2b:a9:51:7b:6f:e0:2c:70:0a:f8:88:
f9:83:b2:cd:46:38:87:17:ed:39:7f:fb:2a:01:81:
25:a7:9f:2d:7a:4d:8a:4f:e8:88:27:ad:66:6c:26:
69:6c:55:0a:92:b1:45:f5:ee:b6:c9:c6:a6:3e:30:
5b:6a:67:ba:87:b0:a1:0b:a3:b7:8a:ff:a2:8c:a6:
68:6c:8e:4c:fe:1c:5d:e4:52:70:74:4b:fe:d9:50:
42:5a:d2:75:d8:30:14:7b:0a:c1:54:2e:05:e0:89:
57:3a:4c:91:32:d5:78:38:2e:6a:75:3b:13:94:4e:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:CE:7C:FC:31:82:77:B3:C3:01:B6:D4:88:6A:DC:47:3D:39:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
138.1.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:6c:72:82:e2:6f:c5:d4:e2:50:66:91:ff:b3:47:67:bc:89:
40:86:5a:5e:c5:03:77:15:c6:95:13:88:9d:0f:a4:64:fd:c2:
5c:09:00:b6:7b:82:e4:b4:cb:75:63:f2:e8:e5:26:7e:4d:05:
b6:d7:27:40:16:04:cb:a8:f1:be:88:93:24:7e:58:93:51:1f:
0b:06:6b:7d:9e:d1:27:a1:60:7d:44:2e:f2:0e:05:9b:f9:79:
34:a0:e4:4c:e2:61:15:41:55:07:98:3d:2a:d5:11:3e:a9:6a:
27:5e:41:bc:fb:c5:1c:ba:41:4b:7e:b9:ce:ea:0e:fa:e4:3d:
84:3c:ca:c8:00:53:ec:cd:d8:d1:0c:c9:31:d9:77:f7:cd:18:
86:6f:17:4f:1f:a6:49:6f:fe:e7:77:5a:10:cc:73:89:ad:a3:
ed:92:4d:99:a5:8c:d3:e9:b6:95:32:bc:01:a8:7f:77:7c:9f:
7a:ae:6a:f7:96:93:d4:ef:35:bd:81:d9:5c:d4:a9:fd:61:84:
33:0b:83:bc:ea:b1:2f:e9:9d:86:dd:5a:38:ae:3a:a6:1a:46:
14:d5:01:c0:e2:23:fe:91:2e:01:8b:c7:e3:a1:07:1f:e1:b3:
eb:f1:37:60:b3:52:cb:5c:0a:7a:2a:43:bf:1c:10:7f:d0:2f:
57:77:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:00 2026 by rpki-client