
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d48cdee7-17e5-334a-ae9d-3f3169bee124.roa
File: d48cdee7-17e5-334a-ae9d-3f3169bee124.roa (raw, json)
Hash identifier: hL4efqm6SNZJp8YK04IIhqPpZBmvFnG43J9LhORyGCU=
Subject key identifier: 5C:9F:C7:9A:7B:71:F3:B6:07:2A:67:3D:AA:8C:CD:91:4A:03:91:92
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F14678A8D459C39076D4C0280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d48cdee7-17e5-334a-ae9d-3f3169bee124.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 0
IP address blocks: 38.43.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:8a:8d:45:9c:39:07:6d:4c:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=a54d3759-2f3e-4ad6-bba8-7e4aee0eadb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:c4:01:f5:68:21:b4:03:15:38:35:33:30:
cc:b5:cb:fe:fc:9b:95:6d:40:dd:23:4b:57:b1:97:
70:41:d4:82:62:b1:64:4e:df:d3:0d:85:1d:a0:a7:
e9:e4:76:0e:2e:98:43:08:8d:71:6c:cf:43:86:6a:
03:be:bf:15:1d:ce:00:8f:c0:c0:a7:09:df:88:c4:
21:61:fc:e1:7e:f1:4e:1d:c6:5d:9f:0f:d4:3f:48:
d2:76:26:c7:cf:b5:f3:9c:b9:72:62:40:52:0a:ca:
71:e8:de:92:3f:6a:b5:c7:7f:06:d1:8f:1d:55:50:
c4:4d:fb:fa:60:db:6c:1a:e0:18:c0:a2:7f:dc:b4:
d8:e0:e3:d3:70:a9:09:e2:d2:ee:78:0d:6b:04:26:
ba:e0:54:09:24:8f:99:0a:88:b4:6b:d1:72:5b:98:
cf:96:8f:d0:28:38:44:e9:f3:6e:3d:53:60:8f:15:
77:c9:77:f2:b2:7c:67:5f:a3:f2:38:b5:ba:ec:13:
ca:92:e0:f7:d3:82:a3:ed:3b:33:cf:22:bb:28:2b:
3e:13:97:e7:56:35:36:48:42:3c:59:0b:96:4f:89:
f1:d5:2b:f0:ca:2c:c3:2b:c4:f4:9b:c3:f4:03:27:
a9:9d:7d:31:3e:87:18:1b:2e:30:05:eb:60:f6:ff:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:C7:9A:7B:71:F3:B6:07:2A:67:3D:AA:8C:CD:91:4A:03:91:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d48cdee7-17e5-334a-ae9d-3f3169bee124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.43.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:bb:59:35:79:25:b0:90:5a:33:92:5e:ca:81:6c:2c:bb:9b:
4d:cb:99:79:15:13:52:b4:5a:c0:74:2e:10:c4:96:01:3b:8f:
b0:73:56:6c:5b:ab:bd:54:e9:3d:75:9b:9d:cd:1e:39:53:01:
49:c6:f4:4a:5a:0f:53:e8:cc:12:7f:36:d7:b4:ca:b2:dd:b0:
11:67:88:fa:d9:7a:55:7e:2d:9d:27:17:12:2f:b3:24:d9:39:
aa:0a:fb:75:c9:31:8f:17:08:c2:02:45:03:f4:03:d8:a0:71:
83:94:a1:01:31:bb:2d:7b:a3:fd:dd:40:4a:ff:23:ca:55:3f:
82:b5:7d:f3:ac:5a:3a:b0:94:48:50:01:3b:81:f2:0e:07:f5:
a1:62:a2:f9:0a:f7:c4:18:b7:3d:3c:9a:80:84:85:d7:43:a3:
51:7e:fc:2d:ad:cb:c6:25:ec:54:2b:72:c1:89:fc:97:fb:59:
2d:05:11:fd:72:25:e3:0b:18:a1:50:94:c7:4f:cd:d3:b1:f8:
07:96:4e:10:ed:c2:7e:15:7b:a6:1e:30:3f:02:6c:6f:b2:53:
fa:84:77:a7:9a:2b:21:8b:6d:a0:22:eb:37:7c:56:c8:5f:82:
5b:3d:06:9a:94:7d:50:70:db:bf:c4:3c:42:cd:47:16:13:d2:
93:57:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:50:58 2026 by rpki-client