
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa
File: d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa (raw, json)
Hash identifier: /e+ZjiE2WmuCxbib+Mv4JtYixiBbNa4zSjGJ7wkOIrA=
Subject key identifier: A6:DF:E8:39:A9:9C:C8:56:DD:9C:71:A5:0D:FD:4F:9E:BE:F0:D0:8E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EF87CB0B01EFD19D66B57C200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 274861
IP address blocks: 38.99.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:b0:b0:1e:fd:19:d6:6b:57:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=5094d8d6-4094-4c0e-bcbf-4569e7d388af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:d5:36:6e:ac:ed:fa:fd:54:1e:1b:56:c2:
d8:5a:cd:b1:28:85:d6:5b:38:34:11:4a:5d:dd:2a:
de:1c:c2:5f:ce:82:da:ab:84:ea:f1:6b:82:f1:fb:
07:ac:f2:f7:e5:fd:38:f7:10:eb:04:12:ee:d5:01:
0b:64:3d:49:08:d7:e9:82:05:ef:1d:cf:55:ed:1b:
45:f7:d3:71:7b:7e:a3:8a:e7:41:6e:cb:47:92:bc:
4b:23:b5:9c:01:ac:3b:7b:81:09:e5:19:b5:1a:ff:
0a:7d:96:73:df:9d:dd:ee:62:48:b3:4f:6c:b3:a7:
fe:6a:ff:82:1d:5f:0d:97:d9:7c:29:92:d7:8c:bb:
0a:c5:fe:c9:8e:42:b9:c7:3d:ad:fe:9a:86:18:7b:
29:c9:95:54:3f:36:46:f9:d5:cb:c7:2d:73:c7:dc:
be:c0:14:97:fc:a5:17:66:36:54:1c:60:a4:06:db:
d7:a4:bb:7a:1d:b7:c3:b6:0a:17:91:31:be:6e:16:
03:80:1c:fd:c7:2c:29:bf:78:49:7f:d7:f5:af:36:
6a:e6:a7:b4:a8:b2:9f:87:78:70:93:1e:c7:60:29:
68:65:84:a6:21:49:6c:bc:89:f2:7d:e3:5b:42:64:
f8:6a:7b:ef:5f:1c:5a:cb:b0:39:4a:b1:2a:1b:c1:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DF:E8:39:A9:9C:C8:56:DD:9C:71:A5:0D:FD:4F:9E:BE:F0:D0:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.99.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c8:3a:f3:7c:0c:82:19:69:b2:31:b1:2f:f9:3a:e7:30:91:
81:1c:59:20:bf:53:28:65:a2:1a:7f:38:65:5b:5a:23:17:15:
c1:2a:ca:ba:e2:ca:60:1b:ca:0f:13:92:3f:b6:47:91:f6:15:
25:0d:9b:34:38:5b:49:5c:7c:1e:32:17:74:8f:34:9f:5f:18:
18:1a:62:94:33:08:48:35:7a:b8:eb:e8:c0:68:a8:6e:b0:97:
d8:c3:67:a7:82:8b:7c:52:64:31:da:82:d9:c2:c6:16:c8:5d:
2b:bb:86:31:a2:4d:c8:06:5f:81:62:e2:d0:51:d9:7e:c8:ee:
90:cf:aa:cd:97:01:37:d2:34:5a:4a:6f:66:47:7b:44:b1:4c:
8c:e6:1d:c8:bf:a2:cc:f1:39:9e:db:c1:29:27:28:d4:ec:06:
0a:9e:4e:f4:c6:dd:b2:c4:d9:37:08:f5:80:c2:e8:44:1f:85:
23:81:23:ec:2e:87:ea:96:cc:aa:28:7f:31:e6:f7:e8:fb:1d:
1b:3b:8a:38:85:7b:40:be:29:83:75:9d:38:15:18:6f:07:c9:
b5:cb:fd:4e:7f:f5:ae:fa:0e:4d:d8:d6:06:3e:f0:23:f9:35:
32:68:f5:cb:80:76:71:28:e8:04:06:a3:8b:d0:0f:c2:00:ec:
ef:4d:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:28 2026 by rpki-client