
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1f8d0d8-b163-3951-bcca-0f055d0b444a.roa
File: b1f8d0d8-b163-3951-bcca-0f055d0b444a.roa (raw, json)
Hash identifier: yc/ZeaKhy+tC0LZIjSNPCWR5Ml0JFJW9D+aDY7oDhyo=
Subject key identifier: 1D:F9:95:11:0E:72:83:27:D2:9B:80:08:A2:B8:FE:1F:5C:5D:FD:E3
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EA7916CA4682A9F1BC5B46E40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1f8d0d8-b163-3951-bcca-0f055d0b444a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 60800
IP address blocks: 38.109.11.0/24 maxlen: 24
154.41.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:6c:a4:68:2a:9f:1b:c5:b4:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=0acb4ba0-39f5-42cc-be62-12f0b49a8366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:26:e7:5d:06:2d:57:7f:68:dc:eb:4b:c2:
81:ae:76:ea:ff:a6:5a:ed:11:13:a6:9b:76:7d:78:
5e:90:e9:35:57:cd:66:86:00:c7:fc:32:26:49:b1:
9f:57:3c:85:5f:e1:4b:f0:6b:f3:c9:07:7c:8e:e2:
28:b7:8e:54:2a:4f:e1:25:0d:51:93:26:26:8f:86:
6c:6a:71:b0:c2:25:d1:eb:f3:11:e4:19:3c:4c:43:
7d:1e:b2:f2:bd:2c:c2:5b:b3:f4:1b:96:16:4c:f1:
ef:fe:4f:f4:69:8b:e2:c3:d9:da:67:18:94:5d:42:
1e:7b:d8:30:99:a9:1f:79:d7:5e:8b:8c:28:0e:39:
cc:e6:44:37:15:ff:a6:1e:c1:ba:7a:c7:fb:e6:05:
7f:08:dc:c5:23:b6:ce:8b:ce:2d:f0:18:c0:96:f6:
de:53:c8:6e:8c:3e:34:21:22:6e:ec:8f:fc:d3:4c:
37:e5:9d:1a:2b:dc:bc:d4:c9:aa:11:08:6b:ba:bd:
6c:9a:28:d7:f4:2f:29:17:4f:ac:1e:93:db:ee:08:
14:c5:64:23:e6:f2:04:f3:a6:de:68:47:97:28:01:
5f:d6:09:78:9d:8f:a8:a3:3f:d3:80:77:a1:cc:5a:
03:d9:22:c1:13:89:90:bc:80:6f:0e:3f:9b:09:3d:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:95:11:0E:72:83:27:D2:9B:80:08:A2:B8:FE:1F:5C:5D:FD:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1f8d0d8-b163-3951-bcca-0f055d0b444a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.109.11.0/24
154.41.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ba:bc:7b:53:16:6d:30:9e:6a:51:36:dc:8c:75:97:c4:5a:
12:15:26:53:20:bc:74:3d:34:8a:28:6f:7c:d8:29:dc:13:b4:
c4:64:bd:54:49:52:78:ce:30:fd:a1:a0:bb:f3:d4:a3:87:c4:
38:26:33:56:96:e3:92:f2:14:03:d4:e5:17:03:ad:14:8d:33:
7f:f7:34:d6:f7:79:9c:66:f8:7c:f3:70:15:7e:32:3e:96:61:
21:a6:c3:f0:0a:04:87:7f:37:63:f7:bd:5b:e6:0b:c3:de:ee:
28:3c:49:46:b7:73:3a:dd:92:7d:11:4c:3c:8e:0e:04:c4:cd:
2a:bd:b0:3c:18:8d:08:55:17:af:7e:79:0f:e4:83:3b:df:41:
58:a5:e8:de:8b:a4:a7:79:9e:07:47:8d:26:27:64:19:fe:16:
01:4b:08:8c:15:e9:d0:c7:ce:68:7a:c3:a6:b9:a7:1e:58:39:
d7:d9:36:4f:68:41:03:6d:47:e8:ae:60:12:59:29:5e:ea:fc:
ee:44:ef:6d:ae:f8:f3:64:ed:67:e5:09:d7:83:4b:0a:c6:4d:
ec:60:2b:78:c9:26:70:93:e6:4c:c9:91:d8:07:6a:17:18:5b:
c1:6d:8e:a6:0d:88:3f:f2:66:35:30:a1:3c:4c:d0:99:69:50:
fb:79:69:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:18 2026 by rpki-client