
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa
File: dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa (raw, json)
Hash identifier: nb5OgzlkUG3JEcjUMEmGXOqd1QuoIRsEkOgT4yqrw5Y=
Subject key identifier: 7A:60:D7:E6:1E:1F:D7:0E:A6:78:33:B9:B3:E7:87:A6:23:DC:BE:F4
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F698D71F2CE45E88A8E95ADC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa
Signing time: Tue 06 Oct 2026 13:00:13 +0000
ROA not before: Tue 06 Oct 2026 13:00:13 +0000
ROA not after: Mon 04 Jan 2027 14:00:13 +0000
asID: 273263
IP address blocks: 38.58.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:8d:71:f2:ce:45:e8:8a:8e:95:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 6 13:00:13 2026 GMT
Not After : Jan 4 14:00:13 2027 GMT
Subject: CN=9df03982-7865-4423-814b-0315aec03811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:ee:91:51:18:fd:ae:23:2d:b5:9c:23:0e:
6c:db:a1:30:ea:cf:82:7d:2b:c6:c5:bc:dc:8a:3b:
fb:4a:a0:f7:ee:d8:a9:a5:a9:9e:5d:ca:ea:91:15:
ee:93:f9:eb:f8:ae:65:e0:01:8b:35:c1:6d:e0:96:
d2:72:d4:b5:46:01:27:fd:c9:af:1e:b9:46:0e:d5:
94:a8:32:dd:31:6a:f7:a3:cd:71:74:13:a0:3c:61:
0f:cd:61:c6:28:cd:5c:ed:7d:2c:8d:6a:ee:34:d5:
3f:8d:f0:64:2f:e8:a8:7f:c4:13:3e:bf:02:0c:1e:
cb:a5:ea:b9:59:fe:31:1f:ba:06:79:7f:c1:94:00:
23:ab:66:e3:a3:6e:50:75:fd:35:c0:0c:7f:29:93:
e0:a4:4c:c0:e4:f5:44:df:60:50:93:ed:26:ae:b8:
6d:bc:f1:32:fe:23:61:cb:3e:e9:db:ee:f1:95:ec:
f8:8e:38:42:56:fd:1d:bf:4b:ad:29:e3:2e:08:97:
bb:0f:87:52:9d:d6:db:2b:07:28:35:f4:ed:f7:68:
9d:7e:bc:6f:ee:9e:de:aa:70:b1:4b:8f:eb:1b:bd:
72:a7:1b:02:6d:e9:66:06:53:71:3d:22:27:c0:c3:
5c:d1:d9:08:6f:ed:d3:9b:a0:0d:c3:3b:bd:03:01:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:60:D7:E6:1E:1F:D7:0E:A6:78:33:B9:B3:E7:87:A6:23:DC:BE:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dc73c90e-263a-3c96-98b9-618dd9f4ac44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.58.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:23:dd:13:fc:40:d4:84:7c:4a:40:87:c2:7b:ff:1b:a2:fc:
2a:59:4e:dc:4f:57:2a:be:1a:8d:b4:d9:ed:a4:46:2f:d4:83:
1e:23:13:25:d6:f0:43:69:bc:71:27:e1:98:2f:19:9e:8e:66:
e7:a6:82:79:7c:1e:a7:9e:cf:7d:9c:ef:4e:36:49:85:10:bb:
81:79:59:2c:8b:c4:51:c9:a4:ff:4e:d7:a3:70:3a:3b:bf:1f:
c0:68:d7:bf:5b:a2:8b:ad:77:9c:b9:49:6b:63:f2:30:fd:bf:
5b:4f:ae:a4:1a:1c:e8:2a:11:01:77:09:92:bb:63:17:47:fa:
96:79:d0:0f:29:d3:81:d4:3d:ab:3f:68:ae:a3:f8:e4:a5:1d:
08:b0:04:e2:34:f2:fb:3a:71:c8:1d:67:23:e2:58:7d:19:d5:
a7:a7:c6:a1:01:e0:ba:bc:a5:9e:17:ab:ff:d0:97:9b:66:a6:
02:df:76:12:a5:bb:7b:d1:28:26:2c:87:52:aa:16:3c:79:23:
35:26:0a:b4:9c:a0:fa:63:2c:d5:6c:0e:a6:d2:c0:31:48:50:
81:a2:ea:e9:b4:b7:d1:fd:5e:84:40:bb:4a:a1:08:5d:99:fa:
61:4e:8b:75:4a:36:d7:bf:0b:a6:5c:f7:a3:f3:d8:22:98:44:
27:0d:3e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:17:11 2026 by rpki-client