
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
File: b07b906e-1603-39e7-a468-674776625a7d.roa (raw, json)
Hash identifier: xVx0vA3jl/Gs77QVVHjJo8JrUEh6sGN8u9ygizDoHdQ=
Subject key identifier: FE:DB:36:BD:71:3F:67:76:5E:BE:37:DC:38:CB:CF:4E:D7:1E:E3:70
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584EF9E213CDCE706D9A86517480
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
Signing time: Thu 27 Aug 2026 13:00:12 +0000
ROA not before: Thu 27 Aug 2026 13:00:12 +0000
ROA not after: Wed 25 Nov 2026 14:00:12 +0000
asID: 33598
IP address blocks: 138.8.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 15 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f9:e2:13:cd:ce:70:6d:9a:86:51:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Aug 27 13:00:12 2026 GMT
Not After : Nov 25 14:00:12 2026 GMT
Subject: CN=da42769f-58e9-41cc-8874-3f5c5fb1fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:e7:ac:0d:50:a5:39:bf:e8:23:ba:0a:be:
1a:b2:19:50:da:3a:66:d2:e2:4b:34:f7:dd:dd:93:
12:69:4e:e3:55:0f:c0:0d:41:8c:4c:5a:46:db:b7:
af:eb:30:08:80:e0:e6:a9:56:e4:b1:08:3f:85:9f:
e1:07:e7:cb:c8:03:8c:5f:54:ec:3c:4e:c5:85:7a:
36:d7:ec:ea:0c:bd:15:07:44:7f:5c:34:83:04:4a:
b9:44:ea:d1:7d:2e:b1:24:6f:40:17:a1:ed:f5:06:
9f:dc:7c:f4:35:92:f4:aa:2c:d4:c0:d3:12:22:d7:
9c:ed:1f:62:2d:9f:c2:e9:d2:69:dc:2c:de:96:27:
20:e5:42:44:02:cb:73:76:ca:b3:62:05:e4:31:ea:
e9:ed:c4:fa:7d:9e:ca:c5:48:59:3a:ac:a0:e5:39:
04:77:ad:7a:98:1d:b0:e4:17:fc:cd:ec:95:69:08:
18:a9:14:b3:2b:f5:af:df:6d:cc:39:65:f8:c1:48:
97:e6:25:c7:bc:e4:9a:73:e6:89:37:8f:62:b3:6a:
ad:81:f8:cd:1f:ac:47:27:9f:2f:21:ea:e3:6c:a9:
c3:56:59:e4:6a:5a:bb:d3:1e:0c:fd:ec:24:44:4e:
cf:c0:3e:fc:13:f5:0e:3e:87:c8:85:63:2c:5b:88:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:36:BD:71:3F:67:76:5E:BE:37:DC:38:CB:CF:4E:D7:1E:E3:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:3f:87:9d:5c:13:66:dd:31:ce:37:15:b2:1c:b5:64:66:7f:
ac:0a:49:85:ad:bc:57:60:b8:64:6c:a8:13:42:5c:16:06:ad:
38:73:2b:13:38:71:09:56:4b:c6:a6:e7:a0:71:d6:96:7b:18:
ac:a4:cd:12:f8:14:f0:9f:d4:60:10:a0:e3:4f:b8:c3:6f:a2:
80:8c:71:00:f6:7c:27:10:be:5e:d1:63:cc:08:13:3a:10:9f:
af:a4:2a:80:ce:a5:e7:b2:49:76:f4:a8:0a:06:6f:f5:78:02:
5f:0c:9b:c3:c9:7a:db:4f:f5:23:fd:e6:a7:e3:26:e0:d7:b5:
8a:9d:f7:99:28:d5:bc:60:4c:ab:1b:58:82:47:61:04:f7:5a:
37:c4:5c:d1:ae:82:74:1f:ac:2e:36:f7:f3:8b:be:91:15:63:
47:fa:55:89:df:e7:d9:93:c2:7b:54:5b:4f:98:49:77:4c:19:
63:63:89:a5:f4:31:62:52:22:9b:37:a2:1a:e8:be:9b:19:fc:
df:10:07:2d:40:65:ba:6c:6c:27:8e:f4:0e:6c:60:24:fd:60:
6a:d7:42:36:92:d6:4d:09:09:10:46:c3:e7:f6:74:9b:13:1f:
27:d6:02:b2:a2:c6:ad:92:e8:e0:05:e5:83:74:d7:ce:b2:69:
50:c1:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:26:08 2026 by rpki-client