
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa
File: 4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa (raw, json)
Hash identifier: VinpXE9t8il9gURTtzX6+6P0nqoQXALADTdQB7NlZj4=
Subject key identifier: 22:84:A5:21:59:A5:7E:05:BC:0B:C7:F9:CD:F2:50:0F:D8:38:D1:65
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EBD50074DBD7BE312EDF239C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa
Signing time: Wed 05 Aug 2026 20:17:32 +0000
ROA not before: Wed 05 Aug 2026 20:17:32 +0000
ROA not after: Tue 03 Nov 2026 21:17:32 +0000
asID: 272943
IP address blocks: 38.156.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:50:07:4d:bd:7b:e3:12:ed:f2:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 5 20:17:32 2026 GMT
Not After : Nov 3 21:17:32 2026 GMT
Subject: CN=bcdd9037-fb31-4a14-a362-9f3eefb84af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:99:e0:8e:9f:79:d8:0b:d7:9d:2f:69:3d:
67:41:2f:ea:c5:e1:97:63:bc:c7:e0:a0:10:06:21:
a2:56:c6:0e:be:12:60:f1:27:2a:a6:b8:9a:5c:b7:
71:f2:75:aa:ca:df:c0:55:d9:96:13:bf:c6:4c:c4:
b2:57:62:81:d7:5a:ff:04:52:79:74:ae:f2:af:74:
02:5d:3d:19:a9:92:49:e6:4c:ef:64:39:6f:2a:e2:
14:07:48:96:5c:fe:05:ca:fc:c3:79:ad:f0:0d:3c:
fa:36:4c:07:2d:17:77:52:c3:21:7e:7a:61:04:18:
ac:b9:3a:fb:93:a7:1a:90:e6:33:36:e9:73:78:e4:
4b:f7:d9:c6:df:73:e4:e0:3e:dc:c0:a1:4b:25:aa:
6a:4c:f8:c0:29:5e:4b:c6:0d:05:1e:3c:58:95:28:
94:41:69:3f:f4:6b:75:a5:1d:f8:e0:04:1b:be:10:
a0:34:9a:ef:9b:9e:f9:b6:97:f3:c1:01:91:c9:6e:
f4:55:77:02:e8:21:de:a6:8d:08:7a:43:24:a4:f2:
66:03:b2:fc:7a:e9:7a:b7:34:88:c5:94:c1:d5:6f:
07:66:b4:b5:1a:e3:7d:e5:28:79:84:95:96:57:ea:
eb:fd:b8:2b:c2:1d:38:67:b1:af:3a:9d:38:6c:20:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:A5:21:59:A5:7E:05:BC:0B:C7:F9:CD:F2:50:0F:D8:38:D1:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.156.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:cf:fc:14:79:f6:48:42:99:a0:11:76:6b:18:b7:ec:99:e0:
97:d7:03:45:11:5d:9c:ce:cd:b3:38:b2:bb:7f:dc:dc:9f:b7:
11:61:23:0e:8a:c4:c1:ba:3a:01:a3:b8:e9:3a:67:4f:61:10:
42:a4:d6:52:62:3c:3a:f3:a1:e7:85:4a:b8:44:56:1d:b1:4b:
cf:7c:bf:c8:27:29:9a:25:4c:ae:7e:2e:ac:f2:70:2a:b2:0a:
2e:ec:08:8f:2a:60:51:39:4b:15:d5:9c:96:70:f8:93:91:f4:
2e:a0:d5:b0:af:00:d1:90:b0:98:10:b0:08:de:3a:1f:04:9b:
cf:32:08:5b:70:e5:95:7f:47:0b:e1:d4:a2:ea:e9:98:f7:b3:
70:c0:7e:6b:dd:98:23:a0:f3:ef:56:84:96:82:09:9e:7f:d7:
36:d7:27:97:59:5d:ca:74:b7:9c:af:e9:77:31:a4:44:80:8a:
89:cb:5c:25:77:2a:fc:bb:c8:fd:27:67:af:dc:00:01:ca:9b:
59:2a:25:27:df:48:10:c1:14:71:08:7c:dc:81:ff:38:17:5e:
fd:5e:0f:76:3b:56:7d:e2:1c:90:ff:d2:23:17:65:04:87:1a:
eb:06:17:b5:dc:7c:51:c2:5f:51:31:85:98:f9:41:ba:ba:ec:
67:a9:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:46:25 2026 by rpki-client