
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/32235f62-4711-31dd-8d7d-a17f76b0711e.roa
File: 32235f62-4711-31dd-8d7d-a17f76b0711e.roa (raw, json)
Hash identifier: DiJ6gcmbA5Ixr8rZVaqEdPmzv7ogfIPOFetmAsTMvi0=
Subject key identifier: 3F:C0:AF:E9:74:B6:2C:0E:BA:AF:14:51:44:76:F3:92:26:47:AA:C7
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F3B7D18BF9E2DC1B84DA42F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/32235f62-4711-31dd-8d7d-a17f76b0711e.roa
Signing time: Sun 20 Sep 2026 01:00:11 +0000
ROA not before: Sun 20 Sep 2026 01:00:11 +0000
ROA not after: Sat 19 Dec 2026 02:00:11 +0000
asID: 274496
IP address blocks: 38.10.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3b:7d:18:bf:9e:2d:c1:b8:4d:a4:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 20 01:00:11 2026 GMT
Not After : Dec 19 02:00:11 2026 GMT
Subject: CN=8a85185a-acbf-4e3c-9687-f5249f42cc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:12:49:1e:7e:c4:33:e8:d3:0f:6a:de:b2:
b6:02:30:ad:43:ed:4e:f4:d4:3c:76:a2:0f:77:d7:
72:1d:86:64:ba:a0:63:7e:b6:f7:ee:6c:f2:68:5a:
97:a5:73:09:4e:92:66:7a:0e:ef:cc:8b:f9:0f:10:
2f:6b:f3:bd:b8:fa:81:2d:e8:ed:a6:44:fe:6e:ed:
ac:00:98:6d:09:6d:e5:e3:81:cc:b6:01:42:e6:c1:
72:49:7e:09:07:65:54:e4:f7:90:ec:1c:5f:5b:a3:
66:9d:fe:92:bb:70:c0:a5:06:cf:a5:8a:ac:55:ce:
1c:73:8d:d4:fa:b6:98:b7:da:7f:cc:0e:0b:33:e2:
53:fb:57:a1:70:1b:08:10:fe:53:0f:b7:58:40:77:
23:6d:36:e3:64:af:66:68:9f:d0:b0:16:1d:db:08:
69:ca:74:69:c0:9c:6a:39:ae:4a:bf:21:cc:45:39:
9a:93:98:06:2f:a6:eb:11:59:74:e2:e3:6d:60:67:
3a:75:9c:ef:31:22:fc:b4:5f:c0:b0:e0:36:7c:75:
37:b1:7b:78:52:1b:5f:b2:86:b3:cf:4d:be:34:c1:
01:fa:b6:b8:be:07:c6:4d:4c:0a:3a:da:21:90:d9:
45:2c:82:63:af:fd:17:46:b1:7d:81:c5:37:77:ee:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:AF:E9:74:B6:2C:0E:BA:AF:14:51:44:76:F3:92:26:47:AA:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/32235f62-4711-31dd-8d7d-a17f76b0711e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.10.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:59:ee:e2:19:44:3f:c0:88:0f:f8:ed:d3:3a:39:b3:23:1f:
83:c7:15:a2:40:80:54:c8:41:22:7c:30:48:99:82:79:86:3b:
87:0f:56:f7:db:07:59:e5:a0:2c:74:04:5f:3a:4c:85:99:0a:
65:b1:40:b6:f3:e4:19:fd:9e:2f:1b:83:69:db:8b:6d:39:b1:
3d:e7:21:13:5a:da:5f:13:e5:41:9e:03:72:4b:1e:3b:68:1f:
56:94:a6:6c:62:ef:7e:d8:e7:6f:57:ad:8e:fd:41:07:d4:63:
b6:7d:fc:bf:f7:7c:c6:5a:28:02:a3:a0:d4:f3:b9:56:77:ba:
ea:67:2c:d3:95:0d:32:c1:2e:67:55:13:a5:de:9b:db:0d:95:
bc:d2:a5:f8:8d:89:fb:3c:f7:18:be:1b:45:2d:ed:a0:c3:d2:
80:f1:15:6c:fb:dc:66:69:4c:fb:9b:b6:be:bc:72:48:79:60:
e6:c1:e1:df:31:83:c3:28:14:3b:40:d7:ae:ec:e3:b3:25:b0:
7c:56:97:de:3a:f0:c7:54:f6:08:1d:60:c0:86:06:e7:a0:cb:
a7:ff:19:0f:80:6d:8e:ee:20:e0:bc:38:13:b8:93:eb:37:f3:
90:51:8d:e8:13:4f:ef:ec:c4:d7:d5:af:c5:02:33:87:47:ef:
8b:d7:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:35:14 2026 by rpki-client