
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa
File: 8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa (raw, json)
Hash identifier: 1ujyLK28JGb7Q2PRJ9+KK/xYJachwLkfC3aPNNn5dLM=
Subject key identifier: 12:7C:8D:F1:3B:76:D5:BF:C4:32:72:50:4B:60:57:28:57:DC:7C:18
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EBA2257398B8197A09010DC48
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa
Signing time: Tue 04 Aug 2026 16:58:03 +0000
ROA not before: Tue 04 Aug 2026 16:58:03 +0000
ROA not after: Mon 02 Nov 2026 17:58:03 +0000
asID: 274192
IP address blocks: 38.76.68.0/24 maxlen: 24
38.111.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ba:22:57:39:8b:81:97:a0:90:10:dc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 4 16:58:03 2026 GMT
Not After : Nov 2 17:58:03 2026 GMT
Subject: CN=b9c52d3c-d873-408b-a9b7-a983d85d215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:21:06:53:58:0c:28:ce:6a:03:98:77:1b:
b3:7f:8e:87:6e:e1:64:40:7b:2a:4f:0a:53:76:fc:
52:8e:a0:7c:72:8c:bc:7a:42:70:62:81:12:48:d7:
24:6b:b0:4d:4d:62:f4:a0:9f:38:43:a0:9f:62:bb:
1f:43:0e:d7:46:79:7d:78:97:3b:19:17:f7:c1:f8:
31:41:df:c5:42:0d:9c:76:39:79:e0:99:ec:85:af:
18:53:23:d9:1d:55:96:fb:53:4e:05:a8:3e:5b:96:
76:93:cc:2f:fc:52:58:67:85:3e:c4:b0:94:38:10:
35:ed:fc:c5:90:3a:b9:27:7e:f9:60:b8:c9:1e:1b:
ed:5d:9b:4f:4c:de:a4:91:fa:e8:b2:44:fb:38:8b:
5a:65:09:13:fb:14:01:50:2b:ff:cc:29:ef:6a:9b:
2d:92:f9:35:1f:bd:79:a1:0c:ec:99:fc:95:49:28:
ca:a2:59:31:62:fd:40:25:fe:8f:57:10:98:20:3b:
e1:78:d2:24:5b:32:00:44:b9:28:05:19:95:ab:bc:
d0:9c:fa:fb:0c:ce:62:00:fd:3f:ac:f4:54:05:05:
96:f0:b5:27:79:6d:8c:61:4e:41:50:a5:4f:47:c3:
9c:75:5f:26:e1:2d:5d:11:31:39:35:c4:ef:00:de:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7C:8D:F1:3B:76:D5:BF:C4:32:72:50:4B:60:57:28:57:DC:7C:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.76.68.0/24
38.111.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:9a:ee:ab:ab:c1:aa:cb:0c:b8:82:4b:87:8c:4a:d4:69:07:
f2:cf:1c:0c:46:d8:3c:4b:0b:f5:6f:7b:d5:67:e8:d6:ae:1a:
4c:18:2d:b5:0f:c5:64:57:fd:ea:b8:86:9f:73:19:2d:f4:e0:
f0:a7:a2:95:b1:4b:6c:98:50:aa:9b:a6:13:a2:cf:f6:1e:28:
24:09:cd:29:0d:18:ec:37:20:1d:17:dc:d3:67:3b:6b:f2:d0:
51:47:b5:08:42:3a:55:15:56:85:d7:88:e9:51:72:3d:da:bf:
4a:1c:42:e7:58:8f:59:b7:de:c3:fc:36:f6:8e:d4:b7:4e:73:
7b:fa:6f:5d:51:db:5d:de:02:01:d6:90:da:36:3c:04:42:28:
f4:6c:29:55:bf:d8:08:88:59:16:f7:b2:52:74:3f:d4:9e:45:
1e:b0:84:df:dc:67:33:bb:ca:44:60:56:c6:3f:06:c6:35:e3:
c3:71:f7:9f:13:88:96:63:7a:a9:8e:e0:4c:7a:be:76:61:66:
e0:54:02:4f:a3:44:34:4b:72:53:4e:67:33:07:f9:bd:f8:04:
20:f7:28:a8:f2:fe:59:40:b4:0b:91:e7:aa:93:0c:d3:36:46:
e0:54:a0:b2:0e:f4:2b:4a:08:eb:63:5a:53:4d:de:38:d6:06:
2d:3b:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:08:11 2026 by rpki-client