
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66284369-174a-33d8-8195-3a5e2b4c33b4.roa
File: 66284369-174a-33d8-8195-3a5e2b4c33b4.roa (raw, json)
Hash identifier: EUNnUlw3bILarGx+ORf/JBI3LtdfFQv05wclf0XI3jk=
Subject key identifier: CB:E5:CA:4B:7A:2E:AA:6E:9B:B0:E5:20:0D:9A:DB:E8:4B:09:AC:92
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D9A203280FD6F54DD6120C400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66284369-174a-33d8-8195-3a5e2b4c33b4.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 273093
IP address blocks: 38.129.89.0/24 maxlen: 24
38.183.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:32:80:fd:6f:54:dd:61:20:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=421585aa-fa80-461f-bef0-c0497340b71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:b7:c8:38:22:3e:ef:9e:5b:40:1b:d9:0e:
7b:84:ff:bc:29:ac:38:9c:18:96:a2:b2:3e:85:30:
a5:07:b7:bf:c2:87:f8:3a:66:a3:b1:bd:56:9b:2e:
ec:68:8a:cf:fa:7d:18:c0:89:15:97:6f:20:0e:d3:
14:fd:6c:6f:df:8d:f5:d1:b5:ae:4d:03:1e:ae:dc:
3c:6c:3b:db:a1:76:3b:dc:11:ee:0a:ae:9e:09:a7:
d3:be:46:74:56:1a:60:ee:3c:93:aa:46:81:12:e8:
4d:05:5d:4b:71:a2:08:1e:3e:24:7e:73:7e:11:99:
1d:15:0c:9f:72:1f:05:c5:21:71:41:d3:2b:0b:41:
69:b1:46:57:c7:2d:95:00:aa:3e:5a:2b:de:df:8b:
9f:86:50:7d:cc:63:11:0a:d3:76:bb:92:18:78:9d:
db:5a:af:5e:68:7e:f7:63:91:b3:dc:bc:24:1d:e8:
63:c8:7a:ab:35:02:ac:99:a1:90:d5:3f:c7:47:0b:
22:b8:dd:50:ed:e3:f8:3b:fe:18:ce:d6:e8:a4:fc:
d0:00:0f:9f:b8:f2:e2:9a:69:61:bc:77:6a:a3:10:
dd:7b:90:de:ad:1c:d3:fc:40:3a:c8:53:ad:65:3d:
e0:d4:b0:e6:e7:25:5c:30:63:80:cc:34:2f:c9:71:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:CA:4B:7A:2E:AA:6E:9B:B0:E5:20:0D:9A:DB:E8:4B:09:AC:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66284369-174a-33d8-8195-3a5e2b4c33b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.129.89.0/24
38.183.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c5:05:cc:2d:d7:a8:74:e1:64:80:58:d1:14:87:fa:5a:6d:
e5:b9:db:a6:4c:44:1e:40:e8:70:f4:60:f5:55:c0:ba:9a:ad:
59:1a:b8:0a:f9:59:ea:65:6d:a6:9e:57:89:83:c2:80:c7:31:
f4:76:f0:e5:f7:87:84:92:70:08:03:9a:cc:e5:f5:a2:d3:7a:
74:f5:01:71:bb:97:04:55:52:64:c7:e2:f5:bf:80:6d:20:33:
3a:1c:78:74:fe:90:27:ca:c2:57:2e:16:4a:28:87:2c:0c:bf:
f9:6b:f4:53:08:cc:e8:f0:0c:42:4d:54:61:92:ce:54:f7:8f:
c3:c8:6a:c5:2d:81:52:33:97:f4:7f:48:3a:aa:2e:1a:13:dc:
75:18:f1:5f:1b:18:98:42:c5:af:97:88:56:61:83:8c:69:ab:
33:7a:82:64:8c:a7:cd:7c:40:0d:84:8f:e3:c9:7a:a0:d9:45:
60:fc:ec:3b:20:7e:38:5e:a9:f4:0a:bb:6b:af:05:b4:d9:22:
91:a9:be:fc:08:c4:bd:e1:2b:71:93:5a:1a:c9:75:cb:e4:89:
2b:ae:c8:c8:ca:c5:96:2f:41:71:55:de:d8:07:7b:a2:d1:2c:
e2:78:06:b6:8e:08:42:3c:32:d5:21:6c:c5:fa:2c:c4:fc:12:
de:16:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:14:57 2026 by rpki-client