
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/157c53a0-0673-35d3-a2ec-5b0735490cc9.roa
File: 157c53a0-0673-35d3-a2ec-5b0735490cc9.roa (raw, json)
Hash identifier: 4CvWq5SGJhT+HLEGf0+hRqEebFJX7oxCYTR0Y0XLb6Y=
Subject key identifier: 4F:7B:BE:39:B0:D9:6A:AD:0B:68:E2:74:37:D0:C1:C0:31:6A:13:91
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E8DEFBB9C5763C099C5326CE0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/157c53a0-0673-35d3-a2ec-5b0735490cc9.roa
Signing time: Sun 19 Jul 2026 21:00:12 +0000
ROA not before: Sun 19 Jul 2026 21:00:12 +0000
ROA not after: Sat 17 Oct 2026 21:00:12 +0000
asID: 64116
IP address blocks: 38.56.96.0/24 maxlen: 24
38.56.99.0/24 maxlen: 24
38.56.100.0/24 maxlen: 24
38.56.122.0/24 maxlen: 24
38.56.123.0/24 maxlen: 24
38.137.193.0/24 maxlen: 24
38.199.81.0/24 maxlen: 24
38.199.82.0/24 maxlen: 24
38.199.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8d:ef:bb:9c:57:63:c0:99:c5:32:6c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 19 21:00:12 2026 GMT
Not After : Oct 17 21:00:12 2026 GMT
Subject: CN=db4c5dae-cefb-4c8d-8052-6bd2ed4be17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:ea:a7:0c:26:ea:c5:f8:61:10:ba:2e:a1:
7c:fe:c4:3a:2e:8e:e4:50:02:88:14:12:f6:10:88:
4e:26:d7:a5:da:c5:f8:7f:2b:59:ec:ff:2f:e3:b5:
31:9a:f5:ed:84:bc:1f:c7:e9:23:14:5c:68:9c:5d:
b6:26:98:cc:d9:13:2a:f4:b5:24:2e:8c:31:54:78:
7a:2d:21:7c:91:b4:27:06:f4:e0:5b:da:94:10:3c:
c6:3b:b3:a3:d9:21:f9:a8:f4:c7:4c:f3:7f:bf:11:
dc:17:c0:ac:6e:7e:4d:87:08:d8:37:58:b8:f4:8a:
88:0e:64:76:e8:56:f6:19:5f:ad:bc:81:71:97:e9:
2c:c3:d1:23:0b:61:02:05:c6:44:d9:99:6b:7c:b7:
1e:af:c1:48:38:ea:67:55:0c:84:27:d9:be:4d:95:
01:15:e8:86:2a:54:3f:4b:08:b7:c7:a9:be:fa:f8:
e0:a7:ea:e9:63:12:ca:d5:8d:08:24:49:3a:45:62:
b5:51:59:f1:69:74:1f:bb:13:52:a3:aa:83:95:c1:
e4:0f:4c:57:49:28:71:aa:16:64:ee:d8:f9:8c:db:
d2:c7:b7:1b:4b:38:41:34:5d:a7:f3:f7:06:f0:b7:
77:98:25:fb:47:00:66:6a:be:80:50:66:f4:0a:31:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:BE:39:B0:D9:6A:AD:0B:68:E2:74:37:D0:C1:C0:31:6A:13:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/157c53a0-0673-35d3-a2ec-5b0735490cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.56.96.0/24
38.56.99.0-38.56.100.255
38.56.122.0/23
38.137.193.0/24
38.199.81.0-38.199.83.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:b2:67:af:48:1d:a8:a0:b0:1f:7e:cc:4a:c1:8c:4b:85:20:
f9:55:9c:14:4a:a8:3c:09:8b:37:47:26:a0:62:74:f1:b9:18:
44:e8:16:71:80:7e:bf:9c:d7:c4:61:3e:e7:2c:0d:b3:79:2c:
69:fe:da:66:7e:d9:90:97:b1:1c:78:fe:c1:da:76:66:46:23:
ba:c1:8d:0c:25:29:0d:50:6d:7b:62:57:e7:cf:28:03:44:a9:
8f:88:04:12:06:1c:97:68:38:56:7b:95:60:c9:0a:f5:9b:b8:
87:38:9f:4c:79:fb:8a:e2:2d:53:f7:fd:1e:6c:65:ea:5a:ed:
6b:ca:0c:f6:4b:96:5f:50:0a:fc:80:0a:e4:c4:b6:b3:17:9d:
94:a7:77:95:be:7d:2d:63:e7:15:b7:42:5c:54:cb:de:e3:a0:
80:b5:85:c0:20:65:6b:ad:16:00:7e:c7:f1:e8:66:1b:6c:b3:
99:19:7b:2d:73:df:41:f8:4c:a9:54:5d:68:86:a0:51:58:f2:
07:75:f2:11:22:e2:07:40:a4:22:11:df:9a:1c:6c:83:12:1c:
03:9b:28:ea:f8:8f:87:7c:16:bc:42:90:bf:e8:5d:69:6b:6a:
4c:77:65:5f:97:c0:81:fc:4a:4c:48:ec:17:48:dd:ee:84:8d:
a0:0d:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:51 2026 by rpki-client