
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b11d6bfd-bf15-39f4-985f-ad400c2460ed.roa
File: b11d6bfd-bf15-39f4-985f-ad400c2460ed.roa (raw, json)
Hash identifier: mMHrlmJSKgc7EOrsL8KK7HNOArhFtpYrlieP7iovy0w=
Subject key identifier: 59:C7:40:15:55:FA:3D:C5:EC:9A:34:B6:6A:F0:7C:E6:B8:30:2E:70
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EE38C91ACB15B56E7F4102000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b11d6bfd-bf15-39f4-985f-ad400c2460ed.roa
Signing time: Wed 19 Aug 2026 13:00:11 +0000
ROA not before: Wed 19 Aug 2026 13:00:11 +0000
ROA not after: Tue 17 Nov 2026 14:00:11 +0000
asID: 270217
IP address blocks: 38.137.252.0/22 maxlen: 24
38.236.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e3:8c:91:ac:b1:5b:56:e7:f4:10:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 19 13:00:11 2026 GMT
Not After : Nov 17 14:00:11 2026 GMT
Subject: CN=17fd23f6-fd41-4dcf-9df7-36b4ec9d4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:c1:24:47:e4:8a:d9:ad:e9:b1:67:1a:dc:
93:a0:89:72:f6:7e:03:4d:dd:af:be:9d:b7:fc:91:
46:48:26:b3:07:95:a8:08:cb:1b:a6:5b:89:67:37:
09:b9:5e:ad:28:f0:27:aa:4c:8c:6e:cf:bf:b2:dc:
74:c6:52:2a:3e:98:55:d5:27:43:6f:fe:e8:fb:00:
a2:e4:6d:e0:ff:1c:95:48:3e:ea:b6:6d:8e:c0:4e:
53:3d:a5:d7:2d:fe:87:40:78:d2:24:5a:e4:41:3f:
25:17:35:20:40:e6:31:c5:39:b9:b1:c1:1f:d5:10:
81:0f:2b:c7:3c:cc:39:04:7f:94:ff:25:2f:30:e9:
d5:19:1f:80:a9:af:ad:b0:6e:8f:c9:f8:55:bf:a6:
ea:e9:77:8b:e3:6c:0c:be:08:45:1f:52:e4:72:31:
8a:ca:36:f5:8c:16:5f:c3:b6:f7:96:53:da:54:6d:
e9:8d:b7:dd:b6:a1:b7:0c:aa:1b:ee:b4:c8:16:8e:
7c:a8:eb:b2:40:0d:7c:4b:d4:a5:c2:fc:2e:c5:af:
b8:a6:2d:08:49:fe:39:95:ed:c0:ce:98:ed:93:fe:
e4:89:d3:5c:5f:0a:cd:c3:79:00:9f:c2:3c:a4:66:
d3:46:02:86:b5:a3:b2:ba:3e:64:a7:ea:b0:6b:73:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:40:15:55:FA:3D:C5:EC:9A:34:B6:6A:F0:7C:E6:B8:30:2E:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b11d6bfd-bf15-39f4-985f-ad400c2460ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.137.252.0/22
38.236.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:dc:fc:10:79:4e:ec:4c:a7:56:1b:c4:ac:3e:00:18:81:e3:
7c:aa:bb:a6:8d:d8:ed:b9:ce:08:1e:75:2a:09:70:9a:12:6d:
9f:7d:88:9d:69:e2:0f:8a:1e:c4:a0:8a:41:f9:9e:5a:a4:e3:
e5:1a:d6:3a:ba:94:77:c4:54:a1:6c:ec:4a:97:42:f7:b0:91:
ba:09:81:61:f5:55:36:cf:60:e8:19:8c:27:4e:de:6e:18:ad:
be:1a:d8:aa:3a:58:eb:30:2a:68:26:ee:5d:f7:57:4b:69:9d:
51:19:c4:5d:15:f7:c0:e9:fa:33:ca:71:90:f6:a8:cb:03:60:
df:f6:9a:7f:aa:db:43:8a:79:84:30:2e:6d:9e:36:ff:37:2b:
f6:c0:5b:f4:39:c8:68:e8:ea:b0:bd:49:8a:61:c7:e8:d5:44:
ee:12:fc:4e:02:43:ed:bf:79:f7:b4:39:97:84:b3:4d:c2:70:
12:c7:60:fe:d7:e8:2c:80:0e:a8:54:77:05:4b:e4:ee:cb:17:
82:29:7b:2c:54:ec:d1:83:b3:f5:f3:17:97:19:2b:84:9e:0a:
04:17:ed:3a:de:f7:87:ab:78:f3:b9:62:40:1b:93:98:b5:0a:
1f:54:eb:26:b4:a2:c4:48:ac:68:2d:14:43:4e:17:59:a9:86:
ad:d4:f1:ac
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7jjJGssVtW5/QQIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
MTdmZDIzZjYtZmQ0MS00ZGNmLTlkZjctMzZiNGVjOWQ0YTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR/BJEfkitmt6bFnGtyToIly9n4DTd2vvp23
/JFGSCazB5WoCMsbpluJZzcJuV6tKPAnqkyMbs+/stx0xlIqPphV1SdDb/7o+wCi
5G3g/xyVSD7qtm2OwE5TPaXXLf6HQHjSJFrkQT8lFzUgQOYxxTm5scEf1RCBDyvH
PMw5BH+U/yUvMOnVGR+Aqa+tsG6PyfhVv6bq6XeL42wMvghFH1LkcjGKyjb1jBZf
w7b3llPaVG3pjbfdtqG3DKob7rTIFo58qOuyQA18S9Slwvwuxa+4pi0ISf45le3A
zpjtk/7kidNcXwrNw3kAn8I8pGbTRgKGtaOyuj5kp+qwa3O8pwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFnHQBVV+j3F7Jo0tmrwfOa4MC5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjExZDZiZmQtYmYxNS0z
OWY0LTk4NWYtYWQ0MDBjMjQ2MGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJon8AwQC
JuywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALjc/BB5TuxMp1YbxKw+ABiB43yqu6aN2O25zggedSoJcJoS
bZ99iJ1p4g+KHsSgikH5nlqk4+Ua1jq6lHfEVKFs7EqXQvewkboJgWH1VTbPYOgZ
jCdO3m4Yrb4a2Ko6WOswKmgm7l33V0tpnVEZxF0V98Dp+jPKcZD2qMsDYN/2mn+q
20OKeYQwLm2eNv83K/bAW/Q5yGjo6rC9SYphx+jVRO4S/E4CQ+2/efe0OZeEs03C
cBLHYP7X6CyADqhUdwVL5O7LF4IpeyxU7NGDs/XzF5cZK4SeCgQX7Tre94erePO5
YkAbk5i1Ch9U6ya0osRIrGgtFENOF1mphq3U8aw=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:53 2026 by rpki-client