
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c0f2a9b-848b-3b69-b477-4d69a20efe11.roa
File: 4c0f2a9b-848b-3b69-b477-4d69a20efe11.roa (raw, json)
Hash identifier: 49zdatD8xTZYtLi41i2Gt3NbVHLboe7RQVTGqQWmysU=
Subject key identifier: CB:32:F0:4B:03:27:C6:73:99:A7:F4:F0:F2:A7:1F:6D:3F:90:38:DA
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F119CD949335497A96957D500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c0f2a9b-848b-3b69-b477-4d69a20efe11.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 208122
IP address blocks: 38.121.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:d9:49:33:54:97:a9:69:57:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=a1cf0d8e-a325-4432-954a-6e404cb63ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:1a:1f:0b:71:d5:00:6f:d8:b0:93:4b:7a:
11:c1:29:4a:d0:84:50:1e:93:e0:01:bf:23:18:17:
13:43:88:91:4d:d4:a1:e7:53:33:09:d2:c9:de:55:
9f:98:c6:8a:37:26:f2:5e:65:8e:8c:68:c0:b8:d3:
a6:79:76:2a:42:51:18:b2:86:37:be:51:b8:4d:7d:
de:8b:59:d1:aa:9b:75:52:45:cf:55:04:2f:b6:b2:
62:a0:7d:43:e2:78:91:36:c6:9d:e5:93:d7:15:5c:
dd:67:88:8a:5d:6b:57:8e:ed:c8:39:00:4a:4a:f0:
84:84:b0:c6:e9:15:27:70:cd:40:d6:73:c6:18:bb:
ad:ef:73:a3:2d:ac:d8:63:ef:fa:00:8c:2f:0f:79:
2b:47:3d:8e:bf:4a:e4:ab:f1:0a:62:57:ef:6c:42:
31:65:d0:6b:20:9d:5a:27:5b:ec:b4:b0:f6:44:07:
cc:3f:4f:8f:77:e4:ca:d8:2f:23:62:05:c2:2d:44:
0c:bb:7f:c8:9c:48:5b:79:d6:c5:2f:d9:2f:c6:57:
34:38:e1:1d:98:24:d5:3c:b8:cc:a2:65:79:8f:7f:
f6:cb:5b:d1:7d:1a:a5:a0:2c:65:90:07:ce:59:eb:
10:4d:a1:4e:39:7e:f7:b5:f6:98:c4:8b:a8:c8:ed:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:F0:4B:03:27:C6:73:99:A7:F4:F0:F2:A7:1F:6D:3F:90:38:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c0f2a9b-848b-3b69-b477-4d69a20efe11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.121.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:5e:8f:a6:2c:ab:a4:66:eb:f8:24:21:1e:85:3d:85:d9:d5:
5b:77:68:ed:c5:e9:d5:d1:72:4a:71:a7:6a:cb:18:04:9d:72:
9c:50:5c:76:3c:0d:89:62:95:f5:5a:70:50:1d:ec:c3:c7:b8:
1f:7f:b5:19:91:15:12:1f:57:79:10:66:ef:41:f9:dc:22:1a:
ec:85:8c:bb:64:97:f2:6c:1f:7e:6a:2c:d6:3d:e0:0f:71:96:
88:ac:7d:ae:72:a2:90:89:6f:84:37:1b:9c:37:02:dd:bc:a7:
4c:b8:8c:30:ba:8c:fe:2a:1b:ea:c6:ae:4d:8e:bf:fc:ac:c2:
0f:89:f8:11:59:30:13:7a:ca:6e:e1:3d:fb:21:2b:06:3d:87:
2b:4a:f5:4f:f0:0a:40:90:ae:ca:77:dc:3b:af:a4:89:f2:13:
d7:8d:02:67:dd:12:5e:a0:80:c1:17:e0:db:a0:e9:1e:ff:53:
70:b7:17:4d:f0:19:5d:08:3d:ea:8b:69:cd:ae:cd:f1:23:ab:
a5:41:94:1c:7d:89:b0:d5:d5:94:d5:8f:cc:ac:34:19:7b:28:
26:e5:99:0b:27:dd:eb:ed:22:5f:63:04:a5:14:c9:d8:06:a5:
be:b9:31:16:11:52:ca:0c:2c:46:9d:a6:b1:55:a4:f4:1a:c9:
67:08:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:12:02 2026 by rpki-client