
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fc40a8f1-b9d2-377c-8176-a510f0545999.roa
File: fc40a8f1-b9d2-377c-8176-a510f0545999.roa (raw, json)
Hash identifier: ZGsIQuLBltWG44QzO7TB+syEBLIWLC6FHt8/Elh/xQg=
Subject key identifier: 4B:23:C5:9E:80:1C:CF:E6:63:05:52:4E:BB:13:FA:A4:4D:5F:41:BF
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F9D3314DDCF223B5FFCCB9614
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fc40a8f1-b9d2-377c-8176-a510f0545999.roa
Signing time: Sun 25 Oct 2026 01:00:13 +0000
ROA not before: Sun 25 Oct 2026 01:00:13 +0000
ROA not after: Sat 23 Jan 2027 02:00:13 +0000
asID: 0
IP address blocks: 38.43.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9d:33:14:dd:cf:22:3b:5f:fc:cb:96:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 25 01:00:13 2026 GMT
Not After : Jan 23 02:00:13 2027 GMT
Subject: CN=38904177-ae78-46df-97de-492f44db4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:30:7c:ce:89:d2:c6:dd:57:20:e9:97:f1:
08:0d:b1:db:dd:00:fd:c2:9a:1c:f3:f5:be:91:21:
d0:2b:f3:08:41:94:fd:d9:7e:1f:d8:1f:98:16:12:
c7:a9:15:d1:94:81:81:71:3b:10:60:f9:86:7d:7a:
d0:b9:bf:a9:d8:52:c7:01:f8:64:4b:6b:87:cb:74:
71:7f:18:ac:dd:c9:25:5a:29:2f:bf:f7:1f:da:88:
94:ce:4c:dc:cc:47:f0:b7:72:48:4c:4b:22:6d:a8:
96:23:27:b7:52:ea:e1:54:98:91:5f:bd:97:fa:6f:
95:06:10:44:0b:f2:9b:1c:55:17:5b:2d:0b:3a:23:
07:9a:0a:fa:f8:d9:a2:e0:4f:50:65:43:0a:f2:b5:
8e:be:a3:0b:7e:e0:b8:bf:99:9f:03:a8:0a:a3:45:
b7:32:db:61:6e:f5:af:5a:2c:e0:03:3e:82:c0:34:
1d:17:17:e9:45:a5:7b:60:61:ae:9c:d4:7e:12:62:
64:1b:8c:da:29:70:00:66:35:36:fc:82:31:bd:5e:
62:3f:9b:4f:38:19:69:0a:aa:29:0d:e7:5a:c0:a8:
51:e0:ee:42:da:60:d0:1b:9e:56:d0:e4:90:ec:df:
07:bf:6c:59:47:f1:d6:4b:4e:f6:7a:2e:26:50:92:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:23:C5:9E:80:1C:CF:E6:63:05:52:4E:BB:13:FA:A4:4D:5F:41:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fc40a8f1-b9d2-377c-8176-a510f0545999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.43.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:3b:3c:5f:a2:42:28:ed:7e:d0:14:70:d4:b0:a8:6b:bd:97:
f1:ad:5f:d6:0f:fe:56:d8:22:c0:89:74:dd:5b:58:c0:7e:c0:
3a:f2:bb:59:63:1b:75:5b:60:76:cb:04:27:74:c1:7f:36:75:
95:5f:66:e7:4b:5d:68:76:85:6b:f8:7b:7a:91:00:33:31:8f:
e1:48:aa:f0:57:b5:30:41:db:21:d6:84:6c:aa:5f:d1:1a:00:
7a:1c:db:d8:66:41:67:78:4d:4f:c2:46:c3:71:49:dc:bd:54:
bf:d4:c9:26:c3:0b:23:52:e6:48:51:ec:fd:13:24:ba:65:3e:
3b:f2:40:e8:6d:00:bb:a2:0a:c9:e6:b5:9b:70:5c:a4:a3:19:
1a:e4:b3:de:5b:21:61:65:de:d9:18:58:0c:92:f0:e7:ef:f7:
e3:df:36:dd:75:81:8e:da:cb:0d:cd:ba:26:51:b6:80:e2:de:
b7:b8:90:de:db:49:ba:c4:b0:6c:80:dc:e8:25:3a:0f:e3:e6:
d6:0e:75:e0:13:a2:16:b5:f0:30:bf:03:61:f0:6b:bd:1f:2e:
5d:53:7f:ed:b7:d2:ff:55:9d:7a:07:ba:a7:97:d4:7a:2c:3c:
8f:16:8f:1d:59:54:a0:e1:ae:01:10:c4:f6:1d:48:ec:c7:8b:
51:04:d9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:35:14 2026 by rpki-client