
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d41218b-2d85-351f-9226-3b156c8368c0.roa
File: 6d41218b-2d85-351f-9226-3b156c8368c0.roa (raw, json)
Hash identifier: EuaEEZT2vkG+fnij1CGUvmnfOpWvgkWmdkNYvgsNhDg=
Subject key identifier: 7B:F1:B6:1A:EB:7A:29:0D:5F:5C:C4:90:95:57:10:B9:82:D9:6C:8D
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F9BCE042A23200DE6A38F7F20
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d41218b-2d85-351f-9226-3b156c8368c0.roa
Signing time: Sat 24 Oct 2026 13:00:12 +0000
ROA not before: Sat 24 Oct 2026 13:00:12 +0000
ROA not after: Fri 22 Jan 2027 14:00:12 +0000
asID: 209466
IP address blocks: 38.94.33.0/24 maxlen: 24
38.94.60.0/22 maxlen: 22
38.236.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9b:ce:04:2a:23:20:0d:e6:a3:8f:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 24 13:00:12 2026 GMT
Not After : Jan 22 14:00:12 2027 GMT
Subject: CN=f981eac7-8112-4983-b70b-ac2d0de1e228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4d:50:2d:37:fd:7b:5f:a4:40:2c:f7:09:f5:
64:2b:bf:98:b1:54:41:2c:16:37:07:f6:57:f8:63:
cd:20:4b:ee:3d:6e:fe:2a:ce:20:70:83:b3:88:a8:
1f:61:31:71:4a:7c:7b:e8:68:85:8f:b1:20:81:fc:
fb:7d:0a:67:0c:2b:fd:8e:23:4b:55:18:5a:d1:ff:
f0:0f:71:38:3e:00:ec:ae:af:d1:17:21:68:a2:c9:
20:bb:9d:95:ba:91:51:0a:28:ad:ee:fb:8f:1b:4a:
8f:30:fd:56:e9:9d:cf:f1:d1:7c:93:4d:29:72:ef:
cd:cd:b7:04:fb:08:17:0e:c5:f4:f3:a2:7f:6d:2e:
fe:11:4e:70:76:b4:42:d6:d6:d9:fb:7c:08:ce:94:
81:89:0a:27:ef:fd:b9:80:5f:c0:00:c1:fe:2a:1a:
3b:42:7b:7e:1e:07:a4:79:94:b2:93:e5:98:6f:5a:
6b:c8:9e:21:0a:46:8b:7e:95:e5:3d:d9:df:f9:d0:
30:c8:56:81:98:c1:ab:de:a2:b4:7d:fc:4e:a1:c4:
07:ce:d6:81:6a:2d:39:a1:1b:d8:ee:29:45:ae:bd:
cd:06:6e:36:ee:c9:f4:09:ce:36:2c:a4:b0:c1:4b:
9a:9b:23:36:ff:d2:ac:0b:45:47:19:1e:bb:1b:60:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:B6:1A:EB:7A:29:0D:5F:5C:C4:90:95:57:10:B9:82:D9:6C:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d41218b-2d85-351f-9226-3b156c8368c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.94.33.0/24
38.94.60.0/22
38.236.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:64:93:4f:02:3c:6b:13:c1:4c:39:e9:e8:f5:9b:cf:af:2a:
20:af:a6:5d:b3:ef:19:3d:6b:55:0a:ea:a0:57:46:a4:f1:b9:
f2:4e:d1:7e:30:92:5d:ea:f5:6c:62:04:e4:df:58:51:17:e5:
99:2e:5c:4c:9e:db:09:eb:c9:0a:10:1b:fc:95:7c:23:ab:4d:
69:4a:ec:c0:ff:9b:c9:90:25:41:8e:f6:46:79:b5:59:92:56:
f9:94:43:8e:0c:03:72:0a:6b:78:e9:8c:17:96:6d:7d:7a:90:
0e:ec:98:6b:aa:29:ae:7a:15:be:bb:0c:c5:8b:58:7a:d0:bd:
49:03:97:43:54:dd:6e:30:73:af:b7:57:c3:8f:cf:69:4a:51:
5a:e0:47:33:a8:41:cc:85:25:59:77:9d:19:47:c7:11:2c:b6:
c1:51:48:36:2a:0c:12:a0:25:70:3f:ad:14:f8:6c:ba:78:3a:
a0:80:d4:23:dd:61:67:1b:2a:14:87:87:c4:10:7f:39:53:a0:
2a:27:60:6d:0f:07:7b:52:c5:d8:71:20:84:00:59:d2:23:22:
4c:74:81:76:0d:30:a9:f6:88:ab:c6:05:38:b5:9f:0a:f6:6b:
94:1a:40:4e:2d:1c:84:c9:9d:e1:67:7e:09:2a:42:0e:2e:af:
ea:83:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:45:12 2026 by rpki-client