
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8f1825b-fa49-349f-b873-af140a6adb83.roa
File: c8f1825b-fa49-349f-b873-af140a6adb83.roa (raw, json)
Hash identifier: tbQ9VSG1vU7TwUdnZUWskvegROYEadxGLGknLNSBcas=
Subject key identifier: FA:39:A9:1B:A1:17:D8:64:D1:21:00:BE:E5:2E:2D:AA:48:5D:5B:D2
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E33E50FE9D2B57A7920E41AC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8f1825b-fa49-349f-b873-af140a6adb83.roa
Signing time: Wed 17 Jun 2026 14:56:16 +0000
ROA not before: Wed 17 Jun 2026 14:56:16 +0000
ROA not after: Tue 15 Sep 2026 14:56:16 +0000
asID: 64123
IP address blocks: 38.210.207.0/24 maxlen: 24
149.78.133.0/24 maxlen: 24
206.0.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:33:e5:0f:e9:d2:b5:7a:79:20:e4:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jun 17 14:56:16 2026 GMT
Not After : Sep 15 14:56:16 2026 GMT
Subject: CN=233137b9-66d7-4562-bf66-f6793b9bfbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:f4:8c:26:1a:90:5b:fe:17:74:7d:ff:44:
9f:e6:35:64:80:86:c0:5e:ea:26:4a:b5:ca:fc:ef:
1f:f8:93:ed:81:c7:13:57:ea:44:32:47:28:ed:2f:
a6:7c:cd:ff:99:d5:6a:99:56:fb:ac:19:f8:8b:7e:
37:2a:c3:de:31:d4:ab:9c:bf:b9:02:72:0a:c3:5b:
d6:7c:6c:06:73:5f:c2:2d:46:5d:7d:f4:97:80:08:
d9:fb:84:5a:25:03:f5:a4:d2:09:37:3e:35:07:a4:
41:c6:20:7b:aa:f9:f6:a2:1c:ec:9a:f2:53:0f:dd:
d9:00:a9:09:52:70:3d:47:f2:0a:69:00:84:09:98:
bb:c1:4d:d5:07:ed:d5:16:88:5d:98:a2:da:57:b0:
cb:88:91:46:0a:e0:4c:7c:24:e0:c9:85:dd:d6:97:
56:29:66:df:0f:fc:0d:2d:f5:af:56:62:e3:d7:94:
5d:9d:61:dd:26:46:72:82:0f:9a:f3:85:6e:91:00:
ce:a3:65:ed:b3:92:55:75:54:df:bb:e4:1d:86:90:
bd:b6:81:d1:b9:c1:7e:2d:37:f7:d2:9b:9f:32:62:
81:6f:df:c3:ec:07:65:65:33:08:33:50:69:1a:6b:
5c:3d:2e:9d:fc:51:56:64:66:2a:b8:fb:81:c0:bc:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:A9:1B:A1:17:D8:64:D1:21:00:BE:E5:2E:2D:AA:48:5D:5B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8f1825b-fa49-349f-b873-af140a6adb83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.210.207.0/24
149.78.133.0/24
206.0.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:a9:34:64:a7:ac:c8:ee:46:99:b2:1d:a7:82:01:bd:77:2e:
d0:b3:b8:f1:ae:87:76:58:e5:cd:87:9b:ce:9c:98:99:2c:2a:
cf:4f:15:be:cd:32:5f:35:e4:aa:55:27:9a:cb:40:36:51:1a:
fe:02:8c:f8:44:a2:de:82:14:23:89:b6:65:11:31:c0:55:fb:
1f:b3:fb:b4:73:d8:ee:da:2e:01:04:d0:5f:7a:47:37:fa:e3:
5f:c3:6a:b3:2f:14:f0:8f:78:40:67:20:17:a2:8b:7d:03:e8:
d5:a1:57:96:81:64:41:8f:1d:73:a7:a8:ed:79:a7:45:34:46:
72:a6:51:7d:1c:22:5f:d0:59:3f:ae:f8:13:e9:83:21:cc:a6:
48:79:09:fb:e5:af:88:8d:00:50:06:d5:49:7a:0a:5b:5d:f0:
9c:65:5e:db:78:d4:2a:1e:6f:77:43:22:bd:e8:97:36:a1:4f:
14:a0:bd:42:54:b3:74:65:e6:44:93:7c:5a:45:2a:2c:41:2f:
ff:ed:43:92:10:ac:36:81:ae:d3:3d:19:1c:73:1e:40:e8:5f:
6d:f2:39:95:cb:76:73:9b:71:9c:aa:b5:12:ec:db:2e:00:37:
45:2f:97:78:a6:bf:9b:0c:f4:02:d5:bb:16:52:75:49:76:2e:
4c:8e:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:12 2026 by rpki-client