
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa
File: 1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa (raw, json)
Hash identifier: FREh7gKqnCdsl/BJy8T1LmJVZo6O3JPl4CzxLs25wYk=
Subject key identifier: FE:BC:EF:93:4C:6C:C4:F4:B2:C9:47:BE:EE:70:50:80:B8:03:7B:BD
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F173247CF400B3EFA724A6BC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa
Signing time: Mon 07 Sep 2026 01:00:11 +0000
ROA not before: Mon 07 Sep 2026 01:00:11 +0000
ROA not after: Sun 06 Dec 2026 02:00:11 +0000
asID: 1299
IP address blocks: 38.255.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:17:32:47:cf:40:0b:3e:fa:72:4a:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 7 01:00:11 2026 GMT
Not After : Dec 6 02:00:11 2026 GMT
Subject: CN=290988e3-eee0-4ddc-880b-9e5725f911b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:e6:e0:1e:aa:8c:a3:e5:8a:7a:ec:e1:80:
1e:80:2e:1a:4f:65:d9:e4:90:b5:cf:5c:89:6d:4e:
81:50:31:f5:34:83:50:03:61:06:12:ff:87:83:b8:
63:b0:9b:f5:fd:01:5c:e2:42:1d:57:80:a7:07:d7:
e2:e5:41:8f:72:6b:a9:c7:18:74:51:9d:67:ae:70:
0a:01:7e:5d:78:c6:bb:81:33:bb:f5:87:73:e9:9d:
0c:2d:f5:f0:5e:30:f7:7f:c0:ec:d8:fd:49:8e:ad:
9d:87:69:89:8c:03:d0:4c:99:dc:e2:88:f5:29:67:
89:21:8b:b7:a6:c4:96:16:70:93:e7:53:ed:f8:f3:
17:9b:9d:be:20:f0:ed:bb:38:96:15:08:92:7e:2e:
38:39:2d:79:0b:3c:f3:75:39:33:9c:86:ed:e3:f8:
f6:ee:51:75:52:f0:2d:84:7e:20:9b:bc:6a:15:40:
a5:06:58:d3:24:8a:f2:ae:61:d2:d4:3d:de:02:21:
24:47:97:37:88:01:63:3c:20:b2:13:64:4f:1a:ca:
23:57:3c:4d:b4:6a:b0:50:18:f4:21:06:8d:d8:7f:
69:95:26:5c:88:98:ac:76:86:84:73:7a:fe:10:4c:
00:81:45:7a:30:aa:f3:f0:ce:45:15:02:dd:4f:e3:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:EF:93:4C:6C:C4:F4:B2:C9:47:BE:EE:70:50:80:B8:03:7B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1085cee9-efc4-3b9d-a95f-6ad46f982a07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.255.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:65:c3:ae:17:45:be:23:6e:54:44:c3:79:ac:8a:2f:b9:57:
4c:84:bf:71:8e:b3:f9:43:3e:be:63:ec:32:7a:fe:db:7c:38:
51:39:e9:f7:28:42:d9:0e:0d:f3:63:6c:b9:c2:ea:03:f4:ce:
f0:ea:23:9c:31:0d:2e:90:09:34:9a:f6:c7:8f:7c:1b:8b:73:
50:98:7a:c2:ab:f2:b8:f8:59:b0:3b:6c:17:ac:26:2b:0d:e5:
ac:27:b0:ba:ab:6a:7a:d8:86:4e:ca:b0:c1:04:6f:0d:e1:99:
88:95:1b:6d:70:b3:7f:cb:64:ab:88:44:b1:00:7f:78:0a:ce:
cb:6d:a2:11:ff:c1:0f:52:65:17:e5:2b:9f:30:a7:6a:0d:57:
1f:30:91:5f:7c:79:86:5b:ea:de:9b:49:2d:bb:2a:ab:f3:49:
2d:49:da:09:d9:37:03:bd:c5:b8:1a:2b:46:75:1a:1c:c8:71:
f8:c9:d1:5f:4a:a9:28:59:bf:76:61:09:45:f1:57:f6:68:90:
93:ae:1e:a1:97:45:d1:8e:ab:c6:30:62:4c:30:6d:93:17:74:
95:ea:3b:18:59:ac:a8:02:0e:25:fb:55:fa:57:e2:ff:8a:b4:
68:8d:ec:00:cb:9c:49:09:4d:0e:74:a8:6b:51:a4:12:94:c7:
1f:0e:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:45 2026 by rpki-client