
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa
File: 8bf9e516-3556-3db3-9710-effea1eb1175.roa (raw, json)
Hash identifier: hpGY4vBEc0WI2Y9MwozDA/6ZR/F77QxBEMakO2AOyCA=
Subject key identifier: 88:E2:A0:A3:8C:90:0B:C3:86:08:B4:60:50:33:1D:B1:B8:18:E9:82
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584DE019149321DD609ABE5AC780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa
Signing time: Mon 18 May 2026 14:33:11 +0000
ROA not before: Mon 18 May 2026 14:33:11 +0000
ROA not after: Mon 06 Jul 2026 13:59:34 +0000
asID: 271922
IP address blocks: 38.210.56.0/22 maxlen: 24
38.254.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e0:19:14:93:21:dd:60:9a:be:5a:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: May 18 14:33:11 2026 GMT
Not After : Jul 6 13:59:34 2026 GMT
Subject: CN=df2be24d-7325-4e73-a51e-c8a9c3fffe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:14:ab:2f:f2:00:3f:b2:6c:f5:60:64:30:31:
88:a6:04:8c:16:56:8e:a3:39:95:47:e4:5f:81:47:
8b:fc:3d:1c:d2:ea:67:6c:88:77:e1:f8:80:85:51:
a1:c7:a1:98:02:3a:1c:4b:f4:09:ed:87:de:ea:75:
db:d5:f5:d6:3a:f1:8b:1e:49:b9:4b:8a:71:03:e1:
70:04:c1:12:a2:4f:62:5a:c3:be:31:a5:13:d3:1c:
0b:9d:8c:89:31:6d:69:e3:8f:f0:72:78:1c:57:0a:
93:62:6d:01:89:c8:c1:32:73:b4:9b:0c:c2:d3:21:
ab:30:09:d8:fc:b2:04:b1:97:be:c3:e7:77:10:2a:
13:cb:b2:c4:4b:ea:9d:24:2b:d7:16:c1:95:6d:b7:
d2:d1:3f:4b:75:e4:84:4a:47:60:1e:5b:09:96:ce:
0d:cc:e3:83:ae:bd:14:a9:d8:eb:da:25:a6:d1:55:
a3:c4:fb:ae:6f:64:cc:ce:52:8e:d0:67:bc:f1:04:
cd:f3:3a:89:f1:e7:e0:fa:cf:c2:f7:8f:0b:c7:62:
95:21:11:83:37:91:77:f1:4b:c5:69:7b:10:d5:5f:
61:70:7f:6b:ac:81:21:9d:f2:ec:04:aa:81:72:fa:
1e:b9:f6:77:7d:88:93:6b:2a:ed:d4:4b:55:96:32:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:A0:A3:8C:90:0B:C3:86:08:B4:60:50:33:1D:B1:B8:18:E9:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.210.56.0/22
38.254.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:e6:9e:76:8c:04:53:e0:d7:b4:65:6b:84:40:99:0f:dc:b8:
8c:68:19:ed:fe:f2:e0:6f:bd:df:05:d7:72:02:de:2e:45:b5:
e0:4d:3c:a3:29:7e:ab:62:a1:5b:f4:49:01:bd:37:13:9e:5d:
23:da:bb:ad:65:0d:d7:85:65:93:d3:5f:93:9e:91:b6:e5:25:
30:1a:af:b0:e1:0f:e9:d8:b0:39:25:a1:e5:50:2c:2f:b4:9c:
f9:3d:71:01:51:f9:40:fb:06:c6:6e:2d:6a:48:07:03:5f:0b:
4d:96:b7:82:c4:3c:9a:78:05:0b:2c:83:2b:37:11:98:13:ab:
d3:f9:36:40:87:a0:e7:b7:08:e8:47:90:aa:38:26:14:75:77:
67:1c:c0:48:63:9c:85:dd:11:01:d4:88:56:e7:38:10:71:3b:
45:4c:f3:6f:eb:b6:f9:c4:7d:04:e9:a2:30:28:1b:b4:3c:21:
fe:6b:e7:fa:21:35:65:cd:25:30:a8:53:0b:89:66:1f:75:5a:
cf:13:f2:56:93:d0:13:62:2b:44:de:74:5f:40:6c:94:ca:cd:
69:fc:9c:24:b1:bb:b1:6b:80:0d:ee:10:a5:34:c0:7c:0b:bc:
bc:b5:03:bc:89:27:77:3a:7f:6f:d4:91:6f:66:74:56:ab:23:
61:3e:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:37:41 2026 by rpki-client