
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa
File: 4147787a-80c2-3b8a-9ca5-49984c967201.roa (raw, json)
Hash identifier: mnfU27LVmFrXQMWeNJO3mCr30WH2bPUH5cPhmrHs89k=
Subject key identifier: 00:48:09:9A:51:5F:DB:FB:8F:75:03:FD:11:8E:92:73:B1:58:42:3E
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584D4D5A6FFAA77A705577B2A060
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 18593
IP address blocks: 138.8.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:6f:fa:a7:7a:70:55:77:b2:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=a58182a8-abfd-4e00-adb4-b8f6d458fdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:8a:8e:44:54:d6:40:cd:d0:7f:b1:1f:eb:
10:b1:32:9a:8b:5a:34:56:04:2c:35:bf:e3:a5:21:
99:e0:14:c5:01:14:42:9a:97:eb:13:2f:6c:99:76:
88:5f:b9:97:db:46:2a:7d:d9:99:b5:e0:bd:1b:c6:
c2:32:28:9b:ca:15:c6:93:fb:37:01:b8:4c:b9:11:
1d:43:ab:90:48:76:64:54:40:0a:d3:3e:05:c3:02:
47:9a:56:43:31:2e:0e:24:73:76:39:62:cd:9c:3f:
11:0c:e0:42:2c:46:fc:39:d7:49:96:a4:d7:36:52:
c2:19:e0:19:4b:6b:55:56:3b:ab:8e:d6:c5:d9:cb:
12:ed:f2:0f:78:66:5a:22:9d:70:be:57:b2:ec:77:
c6:6f:c7:2f:59:97:41:55:3f:e3:f0:66:99:91:e8:
a4:c5:87:1c:ea:29:28:b9:2b:3d:31:67:f0:3c:c8:
e1:09:9c:b8:32:1c:9d:ac:ff:07:db:04:01:a5:89:
08:07:87:a4:be:ea:58:49:bb:e1:3e:c3:f6:74:37:
a6:78:19:0d:28:3c:30:67:80:21:0c:23:da:72:bb:
2f:2e:64:42:dd:3c:b9:ac:c8:bf:a8:6b:89:fa:80:
4a:0c:cc:34:28:d9:c1:45:6e:af:d4:46:36:bb:ed:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:09:9A:51:5F:DB:FB:8F:75:03:FD:11:8E:92:73:B1:58:42:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:79:a5:7d:af:ee:9b:92:b3:f2:ff:ed:3f:e4:42:f4:c2:97:
85:a3:45:ea:5d:c3:d5:72:62:70:68:bc:a8:38:6f:a4:ca:20:
06:1d:0f:33:79:df:23:20:3f:a7:a6:54:59:18:b0:b6:e5:fb:
41:b5:22:23:46:05:de:d0:cb:e5:76:9b:45:1c:cc:08:eb:3f:
cb:cd:01:81:f9:46:26:8e:52:7a:15:df:e5:38:f5:7c:00:0d:
59:e9:20:e5:7c:6d:be:a8:5d:51:17:6c:e0:0b:62:86:ea:18:
3b:18:05:e9:fb:77:50:e5:dd:eb:17:74:06:3a:1d:00:6c:8e:
ab:aa:b5:82:dc:af:c5:18:99:de:87:30:d9:b0:25:cf:d2:7b:
81:f9:76:f2:60:10:08:4b:54:10:66:3f:b5:b9:35:09:55:52:
3f:1c:3b:81:7e:1f:09:c4:94:1f:3b:27:6d:93:7d:cd:39:26:
8f:26:2c:9e:0b:1d:93:d2:d3:2a:c3:35:f6:aa:36:d1:5a:e1:
6b:22:bb:71:d8:e0:dc:08:28:6a:d9:08:c7:bd:57:51:83:a7:
2d:ac:88:74:23:86:bf:72:2f:63:c9:e3:2c:b8:b8:8e:83:a8:
2e:01:d1:15:03:83:b1:75:fa:56:f8:c8:a9:57:ab:84:a5:9c:
57:7a:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:32:50 2026 by rpki-client