
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa
File: e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa (raw, json)
Hash identifier: t8zz6dn60frQ9zdM31AjcUcYOlF8h6A5LjGZ0h+dffY=
Subject key identifier: 97:07:B4:59:01:29:85:AD:9D:CF:1A:21:1F:EE:13:01:24:15:40:F6
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F3B7D2655346837F644DE8600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa
Signing time: Sun 20 Sep 2026 01:00:11 +0000
ROA not before: Sun 20 Sep 2026 01:00:11 +0000
ROA not after: Sat 19 Dec 2026 02:00:11 +0000
asID: 273300
IP address blocks: 38.19.111.0/24 maxlen: 24
38.236.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3b:7d:26:55:34:68:37:f6:44:de:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 20 01:00:11 2026 GMT
Not After : Dec 19 02:00:11 2026 GMT
Subject: CN=fdb8af1a-2ab8-4911-b015-a12467c32c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:cb:20:dd:85:be:6e:33:d2:5c:74:90:fe:
91:65:cc:ef:e6:b4:e7:f8:a7:7f:d1:10:ce:31:3f:
93:57:27:ef:e7:8b:d7:89:40:fc:06:4c:7a:b8:bb:
16:3b:e3:43:30:10:13:8d:d6:4e:f4:21:67:01:3f:
3c:34:a3:f0:66:60:75:68:ff:b2:06:7f:4f:05:35:
22:54:04:36:71:34:7f:c9:69:7b:a0:da:2b:96:00:
15:c6:8e:89:6d:c4:b1:16:ca:da:eb:d9:c3:6e:18:
46:03:18:de:0c:4d:4f:44:a8:9f:41:87:11:4a:dd:
70:65:a1:52:69:bc:d9:76:75:16:94:ad:f7:ca:0d:
00:a9:2d:c0:79:e0:48:ec:db:c5:6c:c0:e8:b1:7b:
6a:ab:bf:73:ff:6c:df:74:49:86:d1:11:4f:53:c8:
9d:61:a7:c6:c8:fb:1c:fa:a1:ed:71:61:39:87:3d:
a0:c6:5b:bc:d1:e5:23:29:aa:df:b9:83:52:cd:fa:
00:e0:d7:ea:5f:ca:bd:69:63:85:fa:41:33:8d:d6:
12:cc:65:7f:08:80:d5:b6:4a:f5:88:4b:17:0d:f3:
c1:09:3d:5f:b3:28:49:77:35:06:4e:52:f9:4d:1e:
72:b7:fc:14:f5:1f:78:73:65:53:d5:f3:56:b4:1c:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:B4:59:01:29:85:AD:9D:CF:1A:21:1F:EE:13:01:24:15:40:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.19.111.0/24
38.236.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:36:d7:98:3e:89:62:2c:18:f6:24:00:e0:27:7c:22:03:2c:
7f:1e:37:ab:10:72:4e:16:c7:84:cd:78:f4:72:97:5e:35:05:
36:7c:ad:dc:cd:49:79:44:04:01:cc:c1:40:d7:6a:96:b5:4d:
21:89:e9:10:2b:ff:d1:b1:0b:26:c2:ab:b1:56:64:f4:9c:33:
71:52:eb:24:be:21:fd:19:98:be:8c:3d:05:6e:f2:39:b7:0e:
46:5b:10:42:af:af:41:ca:0e:b1:07:53:7a:2d:ec:aa:8e:d3:
a7:e5:49:53:f9:00:ef:ec:d2:31:75:d8:63:ae:69:89:a1:43:
6f:c0:95:a6:f0:09:12:36:6d:5f:70:03:b0:01:bc:9a:f1:1b:
a2:3c:4d:84:e4:b0:ca:2a:f6:cd:80:46:89:74:31:1c:ff:85:
53:a4:dc:9f:b0:f6:bc:7a:db:43:0a:14:59:2d:1d:73:4f:3d:
db:9c:18:6a:e9:da:41:59:63:46:e9:3f:b4:bb:51:6c:91:43:
90:39:b2:5c:9f:85:02:b1:ca:29:9f:3a:35:2f:fa:19:fb:cd:
b2:47:a6:c9:2b:83:b9:25:57:12:58:a0:76:63:5c:08:3c:35:
75:ff:14:a7:d0:52:a5:fa:96:30:89:29:02:91:6e:bf:56:b4:
c0:d3:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:11:13 2026 by rpki-client