
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa
File: dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa (raw, json)
Hash identifier: OAxUAZo/s/JGWzVouCsuR3qFkfdbdYB82Yp2RVbwYU0=
Subject key identifier: DF:2B:30:ED:4D:67:FE:CA:C8:A5:C8:37:5E:BE:3F:AD:B2:6B:FF:46
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584F119CFF9C1CB5C9B13DB37DC0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 138.1.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:ff:9c:1c:b5:c9:b1:3d:b3:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=12ee11cd-a641-4fb1-8db6-4f1d50819596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:a6:2c:9b:07:e5:3d:01:e4:d6:3b:cc:f3:
63:40:a4:18:e7:40:44:35:cd:7c:73:90:18:9f:b2:
ce:7a:93:a1:8f:fc:4a:3e:46:3f:9a:57:a1:76:2f:
20:0f:12:3b:b8:b0:6e:7e:29:bf:d7:2f:68:50:fa:
86:38:c7:c3:26:3c:5e:0f:7c:33:30:60:21:8a:3b:
92:50:10:bb:c7:cb:97:23:b2:db:cb:f9:0f:d6:28:
d4:d3:b0:a9:49:3d:5f:af:98:f2:86:7e:f8:2e:a1:
a8:00:45:66:cb:67:26:e8:7d:30:ae:e2:89:7e:1b:
55:0f:df:c4:a5:07:1c:76:96:b8:f5:15:51:0b:b2:
d9:fc:97:a0:77:71:07:78:d0:16:bb:2b:ec:08:c9:
05:7a:83:d0:87:67:f7:6f:b6:08:f4:52:16:b1:ef:
23:e0:a6:e0:5e:12:67:67:a1:f9:79:40:cf:a5:81:
7e:19:f2:49:0a:66:38:7b:ac:f5:2d:93:c6:54:41:
0b:b1:e1:92:86:f2:4f:53:50:88:13:06:5a:09:06:
bd:6c:f7:17:f8:96:f7:41:04:92:ed:65:05:44:ea:
db:34:ae:09:a2:8f:10:3f:31:47:2f:6e:2d:83:a1:
7e:0b:c9:b6:de:6a:e1:35:2b:0f:2c:8f:7b:0b:a4:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:30:ED:4D:67:FE:CA:C8:A5:C8:37:5E:BE:3F:AD:B2:6B:FF:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
138.1.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:90:2c:6b:61:c6:bd:d2:94:e2:be:6c:85:6d:d3:c6:4c:92:
04:f9:3c:7a:4b:b1:8b:a7:1c:22:0c:f6:3a:da:ba:0a:39:df:
55:85:aa:f9:73:36:2f:6a:a7:2b:07:5c:0a:e1:73:a1:67:3e:
a1:38:cc:7d:87:b7:4e:1a:a3:9c:94:b4:21:1c:92:4a:05:b7:
dc:59:ed:cf:1a:4f:eb:b8:4b:15:fb:72:82:7d:80:cd:d5:84:
0c:0e:5e:27:e5:44:21:b4:b8:78:3b:c4:d3:c4:a7:52:45:2b:
b8:51:e4:c4:45:94:5b:b0:eb:b7:ad:65:60:76:ca:69:2b:10:
6b:2c:63:f9:3f:ae:cf:eb:57:05:9e:88:d3:95:a3:94:91:db:
a2:aa:bd:4e:70:b0:3c:87:61:99:ef:a3:8a:74:a6:d2:c5:f8:
29:9a:3b:c8:bf:81:b1:63:bb:e7:e5:b2:e8:98:62:9a:d2:e7:
d2:d0:57:9e:26:d5:c7:f8:66:70:42:be:8d:f9:cf:d3:39:0e:
81:a6:09:d8:24:b7:e0:0b:7b:9f:e2:44:00:95:ff:63:9c:f2:
e9:a9:7d:4c:bc:c6:af:54:dc:80:8c:92:af:5e:35:0e:09:ac:
fa:3a:33:d8:72:6f:5a:f8:e1:da:40:c0:28:2c:19:d2:e6:56:
c6:59:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:58:06 2026 by rpki-client