
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
File: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json)
Hash identifier: kU/wrk0Lo7J138UJaGNJ9d7TT/QppvVROWrjid7AIFc=
Subject key identifier: 21:E7:2E:1E:2D:38:E1:52:B6:6E:E9:7A:52:DD:2E:C6:B6:ED:61:9B
Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial: 010D0C9F4328584F655D74CAC2B534F501FD4040
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 395437
IP address blocks: 138.43.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:74:ca:c2:b5:34:f5:01:fd:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=775a691c-b907-4d27-afa1-347990b5d325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e2:83:22:d9:34:9e:ec:f6:28:1b:5a:45:72:
0a:de:52:23:c8:34:34:91:02:64:ba:17:63:a0:50:
e6:bc:90:13:41:95:c9:97:5f:75:be:62:6a:8c:f0:
62:63:df:d6:6b:93:49:ce:c5:94:f5:89:2b:9b:7f:
88:99:01:91:29:d9:e3:5b:01:17:46:e2:86:0e:df:
6c:99:39:9e:51:04:6c:09:6e:37:35:19:50:23:d5:
04:7f:92:ba:e1:0d:92:e3:d7:f9:94:c9:67:24:c6:
8c:9e:70:23:d1:36:11:b3:39:b1:0a:85:dc:b8:8f:
09:ce:bb:dd:c4:69:85:2c:8d:3f:78:15:3b:7f:30:
28:f5:c9:5d:8f:db:fc:29:4f:75:c4:49:7d:96:14:
e9:92:2b:94:f9:11:38:8b:1f:bb:aa:c6:10:6d:e5:
b2:c2:e9:1f:71:45:f3:5d:d5:0c:6f:8c:bc:17:10:
f5:ba:5f:5a:96:c1:e0:9b:6b:a7:21:83:1c:ee:18:
d6:af:64:89:fc:e7:94:9f:21:27:fe:68:bc:44:a3:
4d:17:3f:11:f8:41:39:05:79:34:10:b5:c9:c2:e2:
50:12:4e:d2:70:10:75:0d:01:e7:55:58:62:a2:59:
cd:19:38:cd:99:9a:e0:db:37:20:9e:c1:33:23:d2:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:2E:1E:2D:38:E1:52:B6:6E:E9:7A:52:DD:2E:C6:B6:ED:61:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
X509v3 Authority Key Identifier:
keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
sbgp-ipAddrBlock: critical
IPv4:
138.43.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c4:8b:33:e6:8a:b3:8c:ed:53:6f:eb:91:00:17:4a:43:85:
2b:47:fd:48:03:cf:8e:39:ae:5f:85:90:7d:67:0f:31:fc:4f:
ab:c3:a0:10:8d:87:7c:c4:6c:9d:86:97:ac:7f:aa:d8:c2:e6:
07:24:aa:df:0c:1b:48:62:9e:14:c6:a3:f0:97:6e:3f:c0:c4:
b0:af:34:ee:0f:62:2f:74:ef:4a:6e:77:87:0d:34:53:1e:56:
bf:d2:3e:47:25:c5:8a:6c:56:80:4f:c9:a4:df:c9:7a:5e:db:
81:f6:18:ee:8d:42:5d:97:23:5a:a2:32:34:83:9b:2e:d2:1b:
86:c9:34:e8:a8:02:ba:20:bc:d7:ec:63:12:07:26:da:21:f1:
23:06:72:5e:dc:ca:88:76:68:5e:08:2a:91:0f:09:0a:cf:2a:
25:45:93:f4:52:54:da:7a:bc:55:70:72:ab:d8:1e:c4:2f:6c:
3a:ea:10:8a:ba:64:ef:85:ab:01:1d:1d:10:3b:01:6d:06:91:
be:5e:ad:1e:de:4a:3a:f6:bd:97:20:02:e6:65:0d:41:ca:1c:
bd:f7:68:76:5b:57:68:d1:09:08:9c:16:c4:5a:d7:c6:0f:2a:
5f:13:8a:fe:04:19:b5:23:47:8c:8d:3a:6c:ba:cf:7c:b6:c9:
b3:c7:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:19 2026 by rpki-client