
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4a29447-dab2-3525-995e-197e751f825e.roa
File: b4a29447-dab2-3525-995e-197e751f825e.roa (raw, json)
Hash identifier: ukFaXff3ctxvfl+J6+EMRHSGi3widUbL1x6HviY/chQ=
Subject key identifier: A4:B9:A3:D8:AE:02:AA:1F:21:1F:00:17:87:CB:32:B9:D2:6E:F7:1C
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D46F13A8ABE39AC844A694A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4a29447-dab2-3525-995e-197e751f825e.roa
Signing time: Tue 24 Mar 2026 17:54:12 +0000
ROA not before: Tue 24 Mar 2026 17:54:12 +0000
ROA not after: Mon 22 Jun 2026 17:54:12 +0000
asID: 265688
IP address blocks: 38.19.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:46:f1:3a:8a:be:39:ac:84:4a:69:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 24 17:54:12 2026 GMT
Not After : Jun 22 17:54:12 2026 GMT
Subject: CN=cab4aa1a-2394-4a79-a2b2-415f98128667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:d0:e2:8d:a5:5e:ab:65:5a:c5:bc:58:9b:
1d:ae:ca:f7:c9:47:5b:cf:34:38:4d:82:27:75:f2:
9a:9f:8d:d2:c4:5d:3d:d8:7f:eb:bf:a4:06:c7:8d:
46:84:13:bc:7b:6f:c0:e6:0d:a2:3a:ea:5c:c9:87:
6a:eb:8d:be:df:d7:a6:ef:ac:bd:36:fd:b6:6a:9d:
41:43:69:c1:b3:4b:e2:f8:e2:12:ef:30:b4:b7:5b:
80:57:40:9c:54:4a:f8:bf:38:ea:e8:0b:72:93:4b:
df:88:21:74:f9:9c:6d:2f:d1:e1:cd:fd:bd:95:80:
f6:9b:ad:2b:2d:92:7c:70:c5:e5:b5:e8:da:68:80:
be:e1:1e:61:26:7b:b4:53:95:c2:8e:a6:14:2b:b6:
b2:7b:98:6a:72:bf:1a:d7:b5:ab:fe:69:8a:ae:3f:
ad:94:18:4b:21:aa:e4:3b:c1:7a:31:d2:20:e3:84:
0c:c3:63:7d:8e:63:40:45:8b:91:78:e6:df:fb:b5:
c9:6f:83:a0:b3:a9:66:1f:e3:51:31:1e:5f:cd:6e:
ac:09:6f:5a:f3:1f:32:ab:24:4e:b0:65:a9:aa:80:
71:2b:9e:ef:1d:ef:ef:25:1c:9f:66:f8:0f:8b:f5:
8e:e6:17:6b:90:3b:cc:88:7d:55:c2:78:ec:17:ed:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:A3:D8:AE:02:AA:1F:21:1F:00:17:87:CB:32:B9:D2:6E:F7:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4a29447-dab2-3525-995e-197e751f825e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.19.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:21:b7:66:00:4a:e2:02:e1:92:64:8c:76:c7:41:99:45:88:
78:c1:80:31:45:2b:64:81:04:24:a5:ea:78:c6:2e:1c:bb:18:
c3:eb:51:da:cf:7f:74:af:6d:91:17:7b:27:0c:3c:6e:80:6d:
b4:c8:c8:2e:32:a1:59:25:20:d4:7e:86:5f:c5:7c:b9:be:40:
40:4a:40:3e:2e:1b:2c:fa:ac:a9:e6:83:e3:6e:02:f3:af:0d:
57:50:9e:f3:54:51:25:28:02:22:7f:d2:03:c1:a1:34:b6:e7:
40:cf:e9:e3:dc:79:ca:de:28:97:85:86:bc:05:ea:20:70:89:
56:88:7a:33:d8:3e:1f:b6:81:96:29:1b:14:26:30:97:b1:fd:
ed:68:0b:30:df:f6:38:1e:50:18:ed:a2:30:11:22:c3:8c:fb:
34:32:2f:8a:e3:35:82:e3:bf:d8:dd:64:72:e8:79:26:e7:f2:
4a:0f:4c:31:4b:8b:ca:5d:67:bb:78:2b:33:f3:ac:29:ae:f8:
43:50:34:a9:47:69:57:9f:90:32:62:b8:ea:83:66:75:ff:1e:
87:14:95:52:ac:30:84:86:dd:fc:9f:e3:38:37:cc:c9:eb:61:
1c:fa:62:09:33:4e:67:54:e4:95:5c:0f:68:82:b6:15:ba:21:
47:2f:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:52 2026 by rpki-client