
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa
File: 3085f03e-128d-39dd-8e5a-150849ab9548.roa (raw, json)
Hash identifier: Ue7+4T71ANg1s6/1g/lwWNx0q8VL+10g16+J2/3kZP0=
Subject key identifier: 42:38:A5:D2:33:46:AD:38:87:B6:B8:E3:36:70:D0:33:05:25:32:D0
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F4328584EA786ED175F462567FDDC0BD1
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 22742
IP address blocks: 129.133.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:86:ed:17:5f:46:25:67:fd:dc:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=0c2db628-5ecf-4764-bab8-c0dc15125ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:7a:e4:57:18:46:dc:23:78:08:87:12:ca:
00:73:a9:21:a1:33:ec:37:16:a0:ef:89:ce:8e:d2:
07:ea:8e:0e:8e:70:de:38:57:59:ab:e4:75:eb:60:
bc:80:86:57:b8:bb:3a:c0:e0:ae:43:bd:b8:f3:78:
4e:40:2d:28:66:e3:16:7c:51:86:b6:23:8b:da:e3:
7c:10:92:35:c8:1d:44:86:50:8d:66:89:8f:83:f3:
20:85:4c:02:db:ce:1f:5d:0a:5a:9d:3b:eb:b0:cd:
d0:ab:08:90:48:04:36:af:31:b8:21:9e:5d:cf:c9:
7f:f9:32:39:a6:00:74:32:86:c1:46:5a:70:44:e5:
cb:1f:17:87:50:2e:64:c1:2e:b0:03:96:c6:b6:a8:
fd:33:a4:09:a0:2e:43:32:8c:7b:6d:e5:6e:95:d9:
ec:cb:27:c8:42:12:16:1b:48:2e:3d:57:64:ea:ed:
58:43:6b:d0:e4:dd:a6:ad:ca:94:3f:40:99:d5:9d:
06:23:f2:21:ae:3c:99:9e:c7:02:16:5f:f6:cd:6e:
23:06:02:53:2a:fe:5d:84:f5:3d:01:04:2f:67:71:
76:7f:55:fc:50:62:48:46:5d:35:cb:78:9c:46:b2:
de:ca:c5:82:8c:45:13:08:16:22:74:c0:28:c6:e1:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:38:A5:D2:33:46:AD:38:87:B6:B8:E3:36:70:D0:33:05:25:32:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
129.133.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:fa:2d:b5:c8:aa:22:93:ab:22:c1:6c:0b:ad:f0:38:f7:32:
3d:60:74:3b:b9:0e:cb:a9:98:a2:ec:ce:f8:68:9c:5e:25:09:
98:87:39:a4:3c:7c:23:22:63:8d:d5:4c:f6:05:b5:08:88:c1:
ad:a2:34:69:93:7d:06:dc:dd:11:1b:1f:57:ea:f1:5e:e8:cb:
34:8e:81:97:97:1a:f9:7f:b3:57:77:4d:17:32:3b:98:94:83:
b1:57:97:2b:a4:32:2c:b6:e9:a3:76:de:d6:e9:0a:4e:ec:dd:
14:22:b2:bd:96:53:46:88:d9:31:ee:d8:3d:8a:75:03:51:ae:
f2:3b:d8:47:80:f4:07:48:c8:b6:4e:4a:05:8a:b6:f6:14:1a:
de:aa:48:74:34:05:95:c1:99:9b:20:62:07:1f:5e:a6:a7:a7:
cb:55:88:bb:e1:48:b7:96:ec:63:a8:a9:08:f8:b1:86:80:fe:
59:d6:a7:a8:0d:60:8d:e6:96:41:e6:5f:98:71:6e:90:e1:0e:
64:c5:53:54:a1:1f:b3:fb:9f:7e:b2:5c:ed:fd:c8:d9:b2:0a:
6a:fa:db:59:24:6f:7d:a2:5c:cd:99:2a:65:38:4f:c1:ec:11:
4a:88:db:ae:c3:97:aa:8b:0f:d1:94:b1:23:9f:7f:0c:3f:33:
1b:e4:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:21 2026 by rpki-client