
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b29a6df9-cb35-323e-8a11-2c00f89c051c.roa
File: b29a6df9-cb35-323e-8a11-2c00f89c051c.roa (raw, json)
Hash identifier: 2AaihUUucVCT86XLYs7ObMoO/b1DWvcN6OfC5+rAlKo=
Subject key identifier: BC:E7:7E:45:71:AE:03:20:59:86:78:89:24:53:9A:4D:DA:A3:41:D3
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F4974DBFFC6F1A1D047DF4400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b29a6df9-cb35-323e-8a11-2c00f89c051c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 328840
IP address blocks: 38.109.102.0/24 maxlen: 24
38.110.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:db:ff:c6:f1:a1:d0:47:df:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=55821066-3b32-47ac-a4b5-31993ba7f976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:1b:58:fe:08:7d:ee:a3:41:3f:6d:36:bf:
8c:0d:15:5e:b8:16:43:fa:c9:fc:e2:2c:e7:42:e5:
ca:f0:54:c7:04:8a:0d:f1:38:e6:46:75:8a:71:99:
4c:f1:5d:ac:62:b1:bf:48:44:f6:a2:f4:df:c0:05:
b0:1b:2b:ed:0f:d5:2f:bc:9b:a1:f8:41:50:e8:b2:
30:4c:11:5c:a6:f1:e5:71:19:63:ea:ab:b7:ee:e5:
2b:73:8f:5a:b4:eb:b8:4a:25:29:88:3a:c4:3f:6c:
8f:3f:06:a8:f7:98:e6:f6:00:56:45:eb:0a:fa:36:
1c:9c:76:61:97:db:ec:c4:93:cf:47:65:87:49:a5:
4d:f5:17:d9:df:ab:75:3f:44:64:c7:be:76:a8:89:
96:eb:b2:b0:7b:68:a1:bb:f0:98:28:9c:19:15:37:
2d:12:4e:17:af:69:84:6a:b6:50:33:11:03:83:d0:
c4:93:5c:7e:14:ad:88:b9:4b:66:26:67:10:b6:90:
36:2a:5a:a7:b7:c4:6f:09:0a:40:3f:37:32:cc:8f:
02:0c:03:07:9d:93:b6:d3:a9:14:1a:20:45:9c:1f:
08:8a:98:af:b2:62:f2:29:cb:49:26:1b:d1:d6:24:
e3:72:f8:b3:15:ff:09:7f:41:aa:1a:be:1b:d0:77:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:7E:45:71:AE:03:20:59:86:78:89:24:53:9A:4D:DA:A3:41:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b29a6df9-cb35-323e-8a11-2c00f89c051c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.109.102.0/24
38.110.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:93:c0:e9:97:fe:fe:a3:10:cd:ef:e8:b7:25:a6:6c:bb:e5:
31:d1:e8:39:3a:8d:f1:88:53:a2:1e:30:2b:e6:18:c6:0d:4c:
2b:3f:6c:73:0c:c4:42:12:cf:22:85:eb:5b:eb:d4:6b:fd:e8:
6b:d2:42:52:d8:89:34:db:5d:1c:e0:dd:58:f4:86:9d:e0:11:
63:a3:77:ed:67:72:78:6a:58:36:82:34:f0:2b:14:a9:8c:3f:
0f:21:8c:23:ed:45:75:4d:b2:e2:1b:f2:2c:37:75:99:df:55:
a8:36:6e:97:f1:43:4c:b4:27:46:33:90:1c:2a:6d:25:31:89:
51:35:a2:91:82:4c:71:6d:55:65:f6:fb:4d:c9:1a:fd:dd:bc:
73:da:0a:62:ed:6d:bf:7e:d0:d4:0c:30:6c:63:7b:e0:fd:ba:
f8:1b:b8:3a:bc:14:e4:e8:7f:38:2b:db:9c:e9:15:ef:50:b1:
a3:dc:6d:4b:ad:8c:be:b3:b4:68:56:0c:5c:d9:c4:89:c5:38:
8b:9b:8f:c3:89:c9:2c:97:33:0a:d2:40:5c:c8:e5:ec:3e:70:
8e:86:fb:4a:71:b4:4c:f2:7d:22:80:3d:7c:eb:97:0b:05:52:
ff:4b:3d:c1:aa:0b:a9:c5:51:93:a1:2d:1b:2e:c5:18:93:ae:
f2:d6:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:37:20 2026 by rpki-client