
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a400fa6e-ed63-331c-ac8c-d4b475d00c19.roa
File: a400fa6e-ed63-331c-ac8c-d4b475d00c19.roa (raw, json)
Hash identifier: FeiOJl2NhwCUuh35+oNbP3V4b0TuL9+6kApGNA6Ebm0=
Subject key identifier: 81:00:36:EE:35:F2:61:A4:66:08:08:40:FC:D6:AA:21:7A:7C:F9:58
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584FA2C88244A0FD7B3894952880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a400fa6e-ed63-331c-ac8c-d4b475d00c19.roa
Signing time: Tue 27 Oct 2026 01:00:14 +0000
ROA not before: Tue 27 Oct 2026 01:00:14 +0000
ROA not after: Mon 25 Jan 2027 02:00:14 +0000
asID: 274401
IP address blocks: 38.199.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a2:c8:82:44:a0:fd:7b:38:94:95:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 27 01:00:14 2026 GMT
Not After : Jan 25 02:00:14 2027 GMT
Subject: CN=672d6394-b7fa-464f-b6a3-dcd2082da70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:e7:34:b9:93:0e:aa:30:7e:52:92:a5:1b:
ab:8b:30:1e:21:63:89:8d:8e:8f:3b:4a:b2:6d:fd:
d6:3b:ce:e3:f0:05:16:66:b2:93:1a:28:42:a0:03:
99:4d:5a:c7:9d:ee:5e:d2:56:42:2f:33:e3:6c:1d:
1c:88:ec:d2:af:b2:cd:74:f6:1c:3c:49:4d:59:c0:
7a:8f:e2:2f:1b:35:d4:96:e9:d3:37:08:3b:02:8b:
ba:8b:1a:4d:73:2e:b3:99:25:cf:79:e4:a1:3f:46:
6b:41:fb:7b:1c:0a:ca:99:8a:23:f4:0f:56:5e:50:
fc:49:4f:95:af:ee:a4:76:86:91:0f:ef:ee:ad:12:
a9:bd:da:a5:a3:87:18:18:5d:26:df:47:27:77:3e:
6e:a2:1f:5d:97:80:56:c7:bc:14:1b:34:b7:f1:c9:
20:d0:b0:3d:d6:ee:27:b3:32:c9:e9:d7:a8:fb:9c:
f7:96:74:97:29:70:59:07:e2:2d:e2:63:f9:fb:f6:
56:a5:a3:c5:c7:ec:21:f2:2b:63:fa:3e:0f:c4:b7:
6d:9e:9d:48:c0:1c:99:1e:27:88:8d:56:f2:51:cd:
2c:c8:b7:34:6e:ba:1a:51:88:2c:9c:d7:f6:e9:61:
e0:e5:ba:6a:ea:54:06:2b:4c:70:3f:24:2f:74:1b:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:36:EE:35:F2:61:A4:66:08:08:40:FC:D6:AA:21:7A:7C:F9:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a400fa6e-ed63-331c-ac8c-d4b475d00c19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.199.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:fc:f0:7c:15:17:83:bf:cb:b2:c2:ed:dd:16:9b:9c:62:c4:
14:b0:b3:9f:7f:4b:61:94:d6:a4:79:f2:a6:33:be:c0:0b:50:
43:c9:b0:76:b6:06:9a:b9:c7:6b:0e:81:48:c6:52:ad:46:e9:
1e:23:5d:71:f1:a7:8e:38:d9:15:86:f8:22:50:ff:df:ca:ce:
87:80:38:e7:f8:99:93:e1:22:9d:cd:d3:f9:e2:9b:25:d5:c4:
f1:64:2d:96:0a:4e:5c:2c:d8:49:65:36:91:93:7f:f3:32:d0:
38:8c:79:4f:ef:2b:ba:12:b2:1d:8c:e8:1d:41:44:22:1b:3a:
4c:6c:ad:22:41:8b:54:92:6f:6c:3d:48:1b:48:ad:9a:c1:0b:
a0:38:5a:c2:9c:3f:9c:07:c4:9a:34:b3:60:fe:70:5f:f5:50:
b9:bd:a4:ec:22:6a:e3:8a:34:90:29:e3:d3:8d:f6:8d:bb:b3:
63:8c:12:7a:eb:ed:01:37:77:b2:fc:1a:fc:e0:c2:a1:84:c1:
54:64:de:c7:8a:dc:93:66:fd:7d:bd:af:8a:2a:f5:1d:3c:d7:
d4:31:4e:5a:6d:aa:f7:9b:94:99:d3:85:04:93:71:ef:31:1d:
0a:b7:0e:76:b9:a6:71:ef:ef:07:6d:a5:18:13:b4:b8:75:03:
16:65:5e:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyIJEoP17OJSVKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk
NjcyZDYzOTQtYjdmYS00NjRmLWI2YTMtZGNkMjA4MmRhNzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hPnNLmTDqowflKSpRurizAeIWOJjY6PO0qy
bf3WO87j8AUWZrKTGihCoAOZTVrHne5e0lZCLzPjbB0ciOzSr7LNdPYcPElNWcB6
j+IvGzXUlunTNwg7Aou6ixpNcy6zmSXPeeShP0ZrQft7HArKmYoj9A9WXlD8SU+V
r+6kdoaRD+/urRKpvdqlo4cYGF0m30cndz5uoh9dl4BWx7wUGzS38ckg0LA91u4n
szLJ6deo+5z3lnSXKXBZB+It4mP5+/ZWpaPFx+wh8itj+j4PxLdtnp1IwByZHieI
jVbyUc0syLc0broaUYgsnNf26WHg5bpq6lQGK0xwPyQvdBtpywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEANu418mGkZggIQPzWqiF6fPlYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTQwMGZhNmUtZWQ2My0z
MzFjLWFjOGMtZDRiNDc1ZDAwYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJse8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAID88HwVF4O/y7LC7d0Wm5xixBSws59/S2GU1qR58qYzvsALUEPJsHa2
Bpq5x2sOgUjGUq1G6R4jXXHxp4442RWG+CJQ/9/KzoeAOOf4mZPhIp3N0/nimyXV
xPFkLZYKTlws2EllNpGTf/My0DiMeU/vK7oSsh2M6B1BRCIbOkxsrSJBi1SSb2w9
SBtIrZrBC6A4WsKcP5wHxJo0s2D+cF/1ULm9pOwiauOKNJAp49ON9o27s2OMEnrr
7QE3d7L8GvzgwqGEwVRk3seK3JNm/X29r4oq9R0819QxTlptqveblJnThQSTce8x
HQq3Dna5pnHv7wdtpRgTtLh1AxZlXiQ=
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:52 2026 by rpki-client