
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa
File: 9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa (raw, json)
Hash identifier: Htc1aIn/PJD+Ytd0aj94C8UajmGiGVrNxtaJO/Z6buI=
Subject key identifier: CF:0E:A7:85:56:AD:C9:E8:F2:E0:1C:10:17:88:C0:37:21:1B:DF:61
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584F119CE6D58983EAD7C3544F40
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 138.1.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:e6:d5:89:83:ea:d7:c3:54:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=8091b44a-458d-4fde-91a0-fd74c7397448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:a0:06:95:55:75:eb:bb:ab:e7:ec:f4:6c:
e1:81:ab:bd:8b:22:a3:ff:26:27:32:6f:64:4b:ef:
9f:1d:0e:6d:50:6a:78:7d:64:77:e9:22:07:f6:8a:
ab:90:b3:0e:1e:70:74:c6:0e:45:c3:87:d0:de:cc:
91:93:5f:fb:aa:34:18:f5:d3:ee:09:d8:33:68:43:
d9:f7:73:89:cf:0b:54:f2:f8:89:1b:46:33:19:d3:
eb:a3:f5:d0:a8:22:1d:47:64:a8:ab:14:97:32:8e:
17:8a:21:14:05:cc:70:fa:b9:d7:c4:44:61:1b:29:
7c:66:18:e6:9c:81:26:6c:31:66:83:80:0f:2d:00:
c6:19:eb:73:cd:16:e6:e4:ca:f8:2a:31:d2:08:f1:
ce:fe:09:89:6c:35:c3:21:0e:90:09:a3:7f:6f:78:
07:92:9e:fb:40:fe:55:55:5f:d4:be:06:0d:18:04:
2e:1c:a8:a3:b7:bc:00:ae:39:af:cc:78:c6:94:a3:
04:a5:e0:4c:b4:dc:2a:a5:ca:0b:a6:ee:83:57:37:
58:52:9d:ce:c5:ba:93:7b:78:6c:4b:fa:d2:eb:97:
ee:bc:b0:58:3e:11:f0:19:0a:15:8d:63:3d:b1:0d:
5b:25:5b:72:e9:88:85:28:39:5c:a2:64:ec:1c:03:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:A7:85:56:AD:C9:E8:F2:E0:1C:10:17:88:C0:37:21:1B:DF:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
138.1.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:60:0d:3c:e9:a4:c7:39:e0:96:25:94:ac:d4:a5:a1:29:52:
a5:50:18:4d:05:52:86:d3:47:9d:22:7b:b7:89:3c:d1:60:88:
ce:34:f6:5d:bc:fe:c7:01:c9:b0:14:d7:9a:3e:88:57:27:a2:
1d:7a:2c:0e:ec:2d:70:f9:08:54:d7:58:32:71:fe:c1:b7:95:
c2:8e:23:2a:97:39:cb:56:88:33:5f:07:c5:35:75:26:88:e7:
02:01:3c:e9:3f:10:4d:36:fd:17:c1:a9:49:3e:ea:2f:b6:c5:
53:db:50:2f:73:5e:b0:ea:60:2e:ad:1e:c0:d2:df:ed:76:7a:
25:3e:fa:e1:a7:20:83:82:65:13:17:52:3a:44:97:8b:85:26:
bb:a5:58:c1:85:24:4a:73:95:47:9f:da:ce:c2:15:3f:22:05:
33:bb:79:80:77:9d:0e:78:5a:0d:21:ad:ff:32:d2:74:4c:03:
b7:da:86:87:ec:db:2c:f2:15:fa:79:8b:6b:00:29:25:27:b7:
bd:4c:49:ad:b1:29:ec:45:08:36:d2:31:4b:17:56:ce:2f:44:
72:84:99:eb:c0:47:c1:a0:eb:81:0a:fb:22:0a:08:a8:a7:7c:
50:5b:54:ee:81:a3:25:98:90:5e:b1:be:e6:05:d0:ee:2c:44:
3d:b7:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:29:06 2026 by rpki-client