
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff2a1bf-7987-3058-9f53-3e8867239dc9.roa
File: 8ff2a1bf-7987-3058-9f53-3e8867239dc9.roa (raw, json)
Hash identifier: 5KbeUFbHVGsVp+nwCu3zohpRa8GLOBcoaFRvaSMinKM=
Subject key identifier: 21:4C:2B:50:D7:8A:25:BE:D9:90:FF:80:1E:77:75:12:9E:EA:FE:C0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED8627222C60BB9A780B86A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff2a1bf-7987-3058-9f53-3e8867239dc9.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 7015
IP address blocks: 73.238.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:72:22:c6:0b:b9:a7:80:b8:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=59e1525e-e57d-4014-9e17-baa8b431a690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:02:a0:29:11:b9:34:dd:32:e2:24:73:94:
a3:3c:36:11:7c:f8:f4:64:52:fd:82:4c:f4:7a:06:
de:cf:c6:64:ef:1a:77:2c:93:3e:01:6a:c9:13:c1:
d7:35:30:33:0c:0b:8c:cf:ef:4b:51:32:30:e9:d9:
7d:20:7f:68:6c:4a:fc:e4:84:59:d0:b6:38:b5:72:
c3:5f:16:a2:6b:b2:49:78:e7:20:6c:42:1d:f1:48:
6c:39:15:96:c0:20:80:a8:e2:ef:83:0f:fc:b8:9a:
bf:10:11:a0:1b:6c:69:11:66:16:7a:62:18:63:94:
2b:d3:92:8b:f3:11:66:0a:b6:7b:d0:9a:b4:18:29:
43:1f:bf:83:1f:26:b4:66:c8:5d:f8:a8:67:34:c0:
69:bb:24:98:4e:ad:8a:bc:12:bc:cc:99:b6:67:58:
9a:35:36:d3:06:64:1b:ae:14:47:b2:b5:b8:84:8e:
04:de:fe:d5:91:73:de:62:1f:e2:10:05:8b:48:55:
6a:b5:19:4d:aa:3f:18:98:5f:b2:1d:43:e8:34:3b:
d8:16:aa:46:dd:dc:68:7e:8f:14:f2:fc:82:a6:e2:
b0:47:98:26:0d:5b:10:f3:44:94:47:40:a6:11:d7:
84:f6:54:55:17:8c:60:c6:f7:fd:e0:a3:da:01:2f:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:2B:50:D7:8A:25:BE:D9:90:FF:80:1E:77:75:12:9E:EA:FE:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff2a1bf-7987-3058-9f53-3e8867239dc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.238.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:78:d5:13:9f:2e:89:bf:67:c5:24:c9:dc:1a:3e:db:a5:f2:
2d:b7:1d:52:01:3b:59:37:ed:f0:e6:11:47:43:0b:21:c6:0b:
e0:f2:c1:d1:7b:1c:78:b3:6c:87:1e:cd:8c:55:4f:09:5c:21:
4e:b2:36:0d:2e:2b:22:39:db:c7:04:27:6b:7d:8a:4e:cf:b3:
5f:24:26:65:b3:c7:11:99:20:6f:af:b8:14:e2:6b:03:59:27:
19:31:da:34:45:b1:b1:57:b0:79:74:57:f7:61:8a:b1:f2:50:
fd:d5:2a:f9:fb:cc:b6:b8:9a:f3:e2:35:94:02:73:a7:8d:2f:
9a:ae:ce:3c:7d:6d:ae:67:e0:94:4a:c6:29:2d:4c:68:ee:24:
63:98:38:7b:95:3f:a2:e6:12:ff:64:84:f8:36:7c:76:ae:cb:
c1:e5:52:7f:50:9c:ad:5d:4b:53:81:80:ef:84:c8:21:c3:71:
51:9c:55:ae:8d:1f:67:76:c5:21:0a:6d:f7:0c:87:fa:f3:0a:
4e:68:2b:c3:78:59:8d:fb:7c:eb:ae:da:d4:9c:0b:c4:9b:2c:
7f:89:90:6f:97:a5:4b:9f:4a:a2:f8:5c:a0:23:cc:9d:1a:06:
68:43:bb:c5:34:ac:94:8d:fb:17:3c:4d:dd:e6:d2:a1:42:41:
78:21:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:10:09 2026 by rpki-client