
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1affe1c2-f38a-3a78-9565-0969714f8a73.roa
File: 1affe1c2-f38a-3a78-9565-0969714f8a73.roa (raw, json)
Hash identifier: +NPvKpfuWt6w6i1ll7VOHgr67cpqbtbZWuAYjFXeIYk=
Subject key identifier: 64:E4:6E:D9:0A:7E:4C:0D:64:05:5B:45:5E:49:75:6F:3D:45:83:8F
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F27F25DC97BF4CE2248E35180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1affe1c2-f38a-3a78-9565-0969714f8a73.roa
Signing time: Sun 13 Sep 2026 01:00:12 +0000
ROA not before: Sun 13 Sep 2026 01:00:12 +0000
ROA not after: Sat 12 Dec 2026 02:00:12 +0000
asID: 271930
IP address blocks: 38.52.178.0/23 maxlen: 24
38.159.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:27:f2:5d:c9:7b:f4:ce:22:48:e3:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 13 01:00:12 2026 GMT
Not After : Dec 12 02:00:12 2026 GMT
Subject: CN=5582f4a4-6b02-433e-b9a7-73eadc7552c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:c9:a7:10:c6:49:4d:39:d5:ca:fb:be:80:
3b:18:3e:3a:ee:35:2c:7a:63:8b:52:dd:23:3c:69:
6d:6d:85:ad:0b:08:75:6b:b7:24:83:4b:64:bd:43:
f2:9b:11:85:02:57:c2:26:77:46:92:6d:71:04:a8:
03:72:19:80:e3:cc:fa:a5:36:94:1e:72:b6:7b:e6:
82:c6:48:0f:33:d2:e1:ec:8c:4c:f6:72:64:5f:76:
f5:fb:1a:8d:e0:fa:16:47:02:d8:0e:f4:c4:59:ef:
3a:67:0d:a9:bf:a9:99:94:7c:fc:74:96:2f:10:ae:
ac:45:7f:e9:01:11:c3:3e:c7:ef:04:3f:36:b2:f6:
c1:a1:90:be:60:d3:10:bc:b5:28:c8:53:83:9a:7b:
5a:ce:14:e8:9f:39:03:2f:b3:60:73:d6:e4:f1:01:
4f:ae:57:e5:89:e0:db:fe:00:64:12:74:c1:7f:a2:
a7:03:f9:ea:03:65:df:9e:a8:a0:91:ec:43:d0:32:
4e:24:a2:70:5e:c0:1f:2f:bf:03:93:4f:28:10:03:
cb:59:96:01:c6:b1:8e:55:15:0b:74:b3:c4:bc:89:
4c:e7:bf:63:d3:17:55:a2:56:cf:5b:1d:5b:19:1b:
e4:39:a8:c7:6a:bc:9f:ee:c0:79:50:f0:c5:6a:22:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:6E:D9:0A:7E:4C:0D:64:05:5B:45:5E:49:75:6F:3D:45:83:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1affe1c2-f38a-3a78-9565-0969714f8a73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.52.178.0/23
38.159.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:8f:87:ed:d0:3b:bd:5b:b1:cb:58:8e:a3:96:c1:5e:85:93:
6c:46:ef:36:9c:c5:27:ec:7c:b0:89:9f:c3:72:d8:f9:34:1d:
d3:a5:7d:fb:44:92:44:d2:d6:b9:1b:78:bf:4a:bd:e6:23:2f:
5d:a6:5b:7a:85:9e:6b:ff:f5:83:fa:10:aa:41:46:85:b6:79:
6b:67:89:1c:7f:99:90:20:c2:74:62:ea:4e:19:c7:34:e8:94:
4b:d7:41:fa:51:6f:6d:82:00:9f:0c:b5:47:7b:4b:3b:10:e2:
7a:b6:db:88:66:f5:e4:6e:13:72:5c:4e:d4:1c:bb:50:9f:76:
cb:60:a5:4d:38:4d:79:23:1c:9c:0a:ab:26:68:b8:82:18:78:
80:e9:75:73:9f:13:79:5d:b7:65:8e:f7:a7:df:61:14:19:04:
1c:bd:e6:a5:4e:3c:2d:e8:85:6d:0b:48:47:d0:a7:7a:f3:e9:
94:c9:39:1e:60:bf:9b:2c:40:4f:f3:78:87:a4:cf:41:7c:c2:
1b:b3:8c:c3:97:e4:35:f6:73:eb:d8:74:88:ef:99:de:3d:6c:
12:a7:8e:d1:83:b7:93:68:43:f9:a6:a2:8d:f2:a8:c5:a2:1e:
f6:ea:51:e2:d1:95:be:92:e7:55:eb:ee:28:52:c3:96:d3:a5:
76:cc:93:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:50:47 2026 by rpki-client