
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/523d13b8-5824-3192-b016-346c08293793.roa
File: 523d13b8-5824-3192-b016-346c08293793.roa (raw, json)
Hash identifier: XaQL64LGxd/thEclZ91GKP/WSZOoXo0Y0x0g+8cDY0A=
Subject key identifier: 5E:90:DA:14:6D:55:53:6B:F7:9B:3F:75:9C:86:45:E8:EA:2A:75:B3
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D316F662551CA696A2372A280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/523d13b8-5824-3192-b016-346c08293793.roa
Signing time: Tue 17 Mar 2026 01:00:32 +0000
ROA not before: Tue 17 Mar 2026 01:00:32 +0000
ROA not after: Mon 15 Jun 2026 01:00:32 +0000
asID: 265525
IP address blocks: 38.19.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:31:6f:66:25:51:ca:69:6a:23:72:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 17 01:00:32 2026 GMT
Not After : Jun 15 01:00:32 2026 GMT
Subject: CN=1bcee5fe-0e1c-409e-96f8-685fda37cf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:03:3e:64:6b:cd:b8:7e:dd:51:ec:2b:d2:
c0:de:a3:7d:08:6a:c0:8d:d5:34:60:16:92:5d:06:
cb:fd:7f:05:76:51:2e:f4:c7:bd:e4:d1:65:9c:93:
32:c7:40:8b:ce:93:b2:ba:aa:02:e3:5c:0a:91:aa:
b2:0a:85:d7:bb:f9:9e:8f:d9:60:c3:52:bf:9c:11:
eb:5a:f6:5d:9f:fd:03:fb:84:ff:91:e2:b8:a5:bc:
ad:c3:fd:57:1d:4a:14:d9:46:fe:39:69:98:b2:d2:
b9:58:f8:87:f9:13:7f:1c:0b:7c:51:f5:8d:b9:a1:
3d:de:f6:48:46:7b:66:08:ed:7e:15:e4:d9:f2:b8:
b1:08:97:bd:fd:02:e4:e9:21:26:a5:f4:85:c1:cd:
23:70:fb:6c:db:19:c4:cb:1b:12:67:b0:5f:9b:c2:
f7:30:81:33:3f:92:20:e7:05:65:35:a0:49:03:91:
3f:f8:49:4c:ec:a0:37:61:ae:96:9a:c7:36:8d:e2:
6b:25:09:a5:85:f6:7b:c3:31:69:bb:5f:cc:8b:8d:
74:3a:79:2f:a1:f8:96:87:e8:62:31:fa:1c:55:00:
cf:49:1e:20:76:2e:f6:43:21:99:0a:8b:22:c6:a8:
b5:cc:19:31:f7:d3:63:02:66:f5:76:1b:68:7f:7d:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:DA:14:6D:55:53:6B:F7:9B:3F:75:9C:86:45:E8:EA:2A:75:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/523d13b8-5824-3192-b016-346c08293793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.19.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:e6:75:42:b8:b3:1f:87:b7:bf:fd:0d:00:25:22:1a:be:4c:
e3:ab:66:8a:eb:bd:00:b9:0a:6e:ac:70:bb:25:d9:28:fe:9c:
26:39:47:d5:8b:05:90:99:62:6d:81:cc:64:b4:e2:ca:8b:74:
26:fa:a1:97:07:83:c8:a5:94:21:b7:a3:1f:b5:85:8b:2b:1f:
e3:bf:c8:27:06:f3:b4:ca:45:db:f8:58:be:24:80:1f:c4:f3:
3f:f7:55:1f:b2:45:f2:46:0a:8a:b9:aa:a7:0f:c4:2d:0a:78:
19:ef:70:5b:78:54:1e:5b:83:85:e9:3d:6f:b7:11:7b:ed:7a:
a2:ee:e1:8a:1b:c8:f5:1e:1f:bc:e1:e0:59:b8:50:af:8e:6d:
6f:fd:48:c1:9b:d6:a8:0d:d9:fd:a0:7f:c7:eb:11:ad:7c:63:
ca:5d:6f:cd:09:16:d7:75:ee:26:8c:b6:85:a7:0d:dc:bd:27:
d0:0a:64:60:ef:5d:b6:ff:9c:f5:87:e4:01:fb:51:0e:26:b3:
c3:3c:f0:25:d1:1b:2d:b5:e9:39:d5:67:81:19:c5:7c:ef:d3:
05:de:94:8e:53:e9:26:5a:bf:ec:bf:3e:92:e1:5d:f5:52:4b:
d4:32:87:74:a4:45:6c:77:b2:c0:2b:7f:fd:aa:04:99:96:a9:
6d:1b:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:39 2026 by rpki-client