
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ccc1ea3-d77b-3719-af33-b90ccbc306fb.roa
File: 5ccc1ea3-d77b-3719-af33-b90ccbc306fb.roa (raw, json)
Hash identifier: KQDq7/LkjvX6Z/IKhOImxJzhqInHtDN9+pxcVmFksdI=
Subject key identifier: E0:5F:C5:A8:4E:D9:45:37:3D:7A:C8:F9:27:9B:CB:A3:14:25:C0:98
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F43243879502AEE51CF1E2C40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ccc1ea3-d77b-3719-af33-b90ccbc306fb.roa
Signing time: Tue 22 Sep 2026 18:47:35 +0000
ROA not before: Tue 22 Sep 2026 18:47:35 +0000
ROA not after: Mon 21 Dec 2026 19:47:35 +0000
asID: 203667
IP address blocks: 38.41.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:43:24:38:79:50:2a:ee:51:cf:1e:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 22 18:47:35 2026 GMT
Not After : Dec 21 19:47:35 2026 GMT
Subject: CN=930f92c2-6700-4006-8cc9-0152bdc316e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:a0:65:b2:05:84:46:34:62:50:5c:85:6b:
b1:a5:30:64:b7:e4:4a:79:05:5b:c6:3d:6a:be:1f:
e7:41:d4:93:7f:d3:7d:c5:ea:72:21:30:cf:4c:8d:
bd:04:a0:fa:de:a7:af:02:d4:51:13:93:50:8a:5f:
05:19:12:70:e6:49:7b:70:a9:d5:b1:49:37:42:88:
86:14:fa:57:5b:c3:c8:a8:f6:6e:76:28:0a:3c:f1:
6b:98:76:0b:68:14:c6:c3:9e:b2:21:c2:17:11:35:
4d:61:d2:1d:3d:5b:c5:cd:20:a3:f6:b1:fb:9b:e9:
86:ce:42:87:24:47:a9:c0:74:09:b5:26:b1:54:2b:
b4:1a:e7:1f:fa:8c:d6:fd:7a:b0:d6:ae:b5:ea:20:
b2:1e:7f:94:4c:77:c3:e6:b8:29:0a:85:44:86:d6:
35:eb:3d:97:53:c2:47:60:86:22:18:fe:6f:ec:bb:
f5:c7:be:ae:9f:d5:96:f1:01:8b:0c:e8:44:93:8a:
bb:d6:44:99:ea:c2:6c:9c:4c:71:a0:58:1d:50:31:
aa:8c:92:22:a5:d1:5d:ee:a0:f7:df:1c:16:7f:77:
52:c2:44:c6:49:19:8f:ac:f6:06:8d:d0:bd:ea:e1:
a3:c7:5a:29:3d:eb:e8:47:a3:42:d0:c6:44:96:e9:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:C5:A8:4E:D9:45:37:3D:7A:C8:F9:27:9B:CB:A3:14:25:C0:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ccc1ea3-d77b-3719-af33-b90ccbc306fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.41.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:0d:eb:2e:94:44:1e:2f:03:a3:53:7e:82:a4:99:a9:4a:03:
bf:41:41:ae:7f:63:a9:18:8b:76:c0:b5:71:8d:c9:52:d9:9a:
00:39:f1:a4:ac:43:e2:20:31:41:9f:22:4d:03:cd:4f:e5:a5:
b9:67:5b:9a:2d:bd:30:73:dd:d8:89:41:d8:6f:3e:92:91:ef:
89:dc:fe:36:fd:9e:b3:8b:a9:9a:7a:90:5d:ae:cd:4d:b2:08:
1e:c3:d1:ed:9e:04:19:87:ee:74:7a:8c:f3:67:80:f8:51:6e:
5f:c9:a5:cf:35:70:20:25:f7:4f:8b:1d:75:94:f3:29:65:ab:
72:f4:dd:14:1b:b8:41:ce:1a:db:7d:9a:53:12:0e:6f:6a:2a:
a7:ef:07:38:c4:2c:7c:ca:4b:ae:c1:aa:b5:60:58:61:63:14:
2b:8b:26:3a:b4:94:72:41:26:ba:a7:66:85:12:02:74:21:13:
b4:2f:be:ac:78:21:17:85:36:e0:2e:c7:55:ca:21:2b:16:96:
ec:ff:ab:2f:80:57:93:40:58:50:8f:16:fd:2b:a8:e6:18:53:
46:8d:cc:a3:1a:03:f3:49:51:52:1b:56:7a:cf:85:c1:22:6a:
5b:31:37:cf:e0:49:66:77:51:58:68:bf:ff:ba:b0:31:28:42:
74:84:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:20:39 2026 by rpki-client