
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19ee450e-7747-3d2d-903b-70880ca37b33.roa
File: 19ee450e-7747-3d2d-903b-70880ca37b33.roa (raw, json)
Hash identifier: CSA7VsYhVJbvg3AuhHlDfA8UTxHQD1OhWmF+xP46IuE=
Subject key identifier: 45:C0:F6:60:6F:AC:6F:53:25:2A:B5:6A:A3:E3:32:83:2E:53:B0:B3
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D1C7F4DF623EA7E5643D93040
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19ee450e-7747-3d2d-903b-70880ca37b33.roa
Signing time: Mon 09 Mar 2026 13:00:40 +0000
ROA not before: Mon 09 Mar 2026 13:00:40 +0000
ROA not after: Sun 07 Jun 2026 13:00:40 +0000
asID: 141610
IP address blocks: 38.52.147.0/24 maxlen: 24
38.52.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1c:7f:4d:f6:23:ea:7e:56:43:d9:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 9 13:00:40 2026 GMT
Not After : Jun 7 13:00:40 2026 GMT
Subject: CN=4fababfa-1fd2-40ae-b741-59d897120409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:77:30:a4:55:1e:a6:e7:f6:06:c2:77:21:
60:e7:ea:8e:f9:cc:d3:fc:9c:25:24:6c:a3:47:cc:
c8:cb:a1:f0:d9:f6:3c:f3:63:22:9f:3b:83:02:df:
76:29:d8:7e:51:c8:7a:64:7b:97:41:ba:a7:55:49:
e4:2a:b4:0c:6a:ae:d2:0b:38:f3:66:e1:5b:51:36:
a2:50:3a:83:25:e1:74:8d:01:b4:62:f8:cb:4e:77:
9d:5a:a8:4a:b9:5e:5e:90:34:6f:fa:8c:28:aa:42:
70:9d:c9:68:29:be:08:66:aa:0d:5f:5b:62:03:91:
c0:37:7b:03:56:0b:a8:28:fb:4c:56:01:9e:9a:4a:
d4:30:6e:74:c5:cd:32:38:b1:70:3b:23:e0:f1:d2:
0c:a1:c6:9b:bf:ef:d7:a3:a4:7e:10:c0:1a:a3:7e:
b6:6c:ec:b9:b8:25:2f:15:18:5b:0f:ce:b8:c3:7b:
3b:76:a9:29:41:b6:97:f1:d6:7b:31:ee:6e:a0:30:
f0:75:f5:84:19:98:94:ad:01:4c:23:5b:f0:ac:83:
7f:e4:40:12:10:f5:b8:b5:2a:e5:41:91:0e:e2:f5:
9f:8b:89:b6:80:97:98:df:0e:e0:78:e1:7f:8f:74:
4e:02:6a:43:31:42:57:a6:df:3b:0f:e5:df:87:59:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:F6:60:6F:AC:6F:53:25:2A:B5:6A:A3:E3:32:83:2E:53:B0:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19ee450e-7747-3d2d-903b-70880ca37b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.52.147.0-38.52.148.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:61:52:b5:73:45:32:f9:06:09:e8:76:b3:e6:71:29:21:1d:
36:cd:88:49:3f:36:6f:d7:85:b5:7d:ba:43:4a:c9:ec:d8:54:
71:fc:8c:f2:d9:e5:b5:83:88:d4:57:69:84:e4:b3:64:ac:c8:
9f:94:92:47:d1:66:d0:5b:09:89:47:da:9b:db:bc:9c:6e:49:
47:a5:cf:49:9f:c6:5f:9c:58:3f:6d:3c:b2:ed:3e:32:2d:4d:
54:4d:f6:b7:2e:ad:54:68:96:0d:7a:bc:0a:95:59:42:dd:98:
35:89:fd:8f:05:b9:7c:c8:a5:81:5c:a0:79:a3:3a:87:31:f1:
7d:9c:10:6c:b7:4a:c1:aa:61:73:e4:d9:a3:e5:bd:9b:c2:99:
f3:9a:03:4b:2e:a8:2b:10:e0:dd:4d:85:4d:7c:30:60:a1:b4:
ca:7b:f0:59:cf:51:85:bf:a6:d8:d5:04:7a:21:88:d2:89:0c:
47:f6:b5:5f:e7:98:10:b3:ab:cc:6b:36:1e:6f:b1:d5:89:a2:
46:8c:39:9f:23:f7:8b:e0:24:da:b1:02:2e:15:2d:0a:b0:42:
7f:6b:5a:bf:16:f7:2b:89:78:63:22:1d:f3:99:c4:de:c5:93:
96:a7:89:91:bd:65:de:0e:a1:31:ac:13:2c:20:d2:04:23:32:
cb:22:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:20:31 2026 by rpki-client