
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
File: d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa (raw, json)
Hash identifier: C1+krhHO3+potmQz9ey3bIW+k+KC81vXDfwRULGUPsw=
Subject key identifier: 98:ED:1E:BD:19:A2:9F:29:EA:4F:61:4E:A1:FB:88:63:6E:88:23:F8
Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial: 010D0C9F4328584EA79434D833ABBCBB0FF89480
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396479
IP address blocks: 161.38.192.0/22 maxlen: 24
161.38.196.0/22 maxlen: 24
161.38.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:34:d8:33:ab:bc:bb:0f:f8:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=af579652-24d6-4faa-8a42-01e353e4275e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:b8:79:9f:4c:79:79:9c:a7:46:d5:a2:7c:
9b:50:13:3c:34:d5:38:8e:8e:9f:1e:f4:c6:7c:22:
6d:eb:7e:84:e5:63:8f:af:21:ab:00:32:b7:8a:e3:
d1:92:1e:8a:38:56:db:d4:a9:5a:9a:40:6f:4d:3e:
fd:3a:03:31:d8:8a:17:e6:4a:94:1f:a4:d0:a0:b3:
77:b7:04:47:bd:40:ed:89:e2:a4:c7:ea:0f:c9:d4:
11:9c:fa:e6:1d:2d:7f:b7:c6:1b:61:48:f9:fa:6a:
90:7a:df:89:79:ec:50:2a:f9:02:f6:2e:d8:9f:5c:
71:e4:d5:c4:aa:3f:d1:42:f3:c2:3d:c5:fa:4f:f2:
c9:9e:d8:7d:33:2b:fc:ae:31:db:9c:66:11:b6:16:
79:26:5b:f2:6e:d9:16:2c:c7:41:5b:0b:22:3c:5e:
31:c1:22:99:4e:e8:7f:b0:50:58:36:eb:83:56:4c:
bd:e1:e0:43:43:d3:81:2a:0e:a4:19:ac:39:b1:ca:
d5:47:f8:42:b3:4b:7b:40:2a:79:17:97:07:cf:ef:
f1:91:78:e5:d3:09:30:a8:12:cc:78:6b:ac:b0:7e:
63:19:9c:02:aa:ab:84:b9:4d:42:d0:54:55:15:81:
b5:84:00:11:50:bb:4e:28:51:3f:af:49:ff:dc:f7:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:1E:BD:19:A2:9F:29:EA:4F:61:4E:A1:FB:88:63:6E:88:23:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
X509v3 Authority Key Identifier:
keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.192.0-161.38.203.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:72:d4:04:4b:44:bb:26:f2:19:7a:9d:96:e6:52:96:2e:80:
7f:27:ea:ec:4b:b6:16:75:ff:71:2b:a6:8a:d3:19:89:65:3a:
f3:60:ae:3a:6f:6c:90:c7:50:e7:11:bd:45:5b:7e:9e:2f:17:
f6:05:be:3f:30:f1:17:9d:01:a6:b8:c0:ee:06:e9:2b:f0:90:
14:03:7f:50:5f:5c:30:5a:9b:8d:92:9d:08:56:5a:d8:b1:43:
9c:3b:5b:b4:ca:cd:1b:52:fa:9e:d6:11:46:47:90:ab:13:58:
d0:c1:1e:cf:db:43:0c:49:3d:e0:1d:41:91:f9:ac:b8:25:13:
47:dc:e5:03:96:90:37:39:4c:97:b8:e1:ad:b8:30:dc:38:be:
1c:ae:24:6c:95:72:6e:35:3d:68:ed:32:2e:e5:76:08:b4:a8:
15:4c:d9:cd:f7:90:b6:f9:2b:57:6e:fe:9c:44:ed:f8:1e:ee:
4d:a5:bf:44:8b:5c:a1:ce:f4:a5:52:52:e8:29:ef:18:0a:f1:
80:ed:14:99:f6:2a:19:47:70:42:20:44:a8:de:74:21:b6:c2:
49:5b:c2:e3:1b:b3:4f:e0:0f:f0:a9:27:13:06:fb:20:a6:5d:
7e:f3:cc:5e:5e:f8:8c:10:47:98:95:65:95:bb:73:ef:de:13:
6b:66:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:27 2026 by rpki-client