
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa
File: 40c437b4-a88b-3526-8eb4-8c0c2b279264.roa (raw, json)
Hash identifier: SQLpHed3S5MheBjVqNeslJFAa4uCLwaAv29OViGfapc=
Subject key identifier: 9B:B2:67:E1:C4:7F:50:7D:51:5D:2B:04:CE:60:8E:D7:24:5F:21:3B
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584D1B7DF3C99B79687B26F95BC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa
Signing time: Mon 09 Mar 2026 04:22:11 +0000
ROA not before: Mon 09 Mar 2026 04:22:11 +0000
ROA not after: Sun 07 Jun 2026 04:22:11 +0000
asID: 212238
IP address blocks: 2607:740:195::/48 maxlen: 48
2607:740:197::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:7d:f3:c9:9b:79:68:7b:26:f9:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 9 04:22:11 2026 GMT
Not After : Jun 7 04:22:11 2026 GMT
Subject: CN=11159024-fa79-4fb6-89c2-47eab1cc2651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:39:dd:2a:80:f4:eb:bd:c6:7f:6f:fb:af:
84:1a:94:26:8e:94:27:49:66:29:7e:a6:f5:da:2b:
03:27:58:34:f7:46:78:0b:a9:37:c7:d8:6b:84:cb:
ae:b4:78:e9:db:03:af:73:15:2b:41:2e:7c:01:1b:
1a:74:e5:f9:7f:1f:5c:ed:5e:e0:11:b3:9e:53:ed:
b5:5a:55:10:34:f2:b0:c0:ed:f3:b7:28:56:b8:27:
2e:24:63:5b:86:fd:ff:f9:f3:52:1d:0f:42:9c:c3:
88:f9:47:dc:8b:29:d8:32:cd:ed:ea:81:b9:a1:f3:
20:41:75:2c:71:c7:b5:c1:d9:9e:77:ad:53:4f:df:
52:89:1e:f4:e5:ed:70:52:24:d9:8c:56:9e:f0:86:
2e:cf:02:61:6f:fb:36:cc:7a:da:a4:dd:aa:a4:7f:
02:ae:b9:3f:9d:04:c2:6e:f5:5c:e5:03:fe:d8:a4:
35:c5:ee:bc:c7:24:a7:96:70:f4:a3:00:be:5a:f2:
93:ad:a8:16:bc:ab:ac:56:1d:1c:52:51:68:a8:5a:
e9:77:df:b5:4f:ad:ab:3a:78:66:17:21:0b:a3:19:
b0:76:19:81:89:87:2f:68:7b:ef:fa:8d:7e:18:dd:
07:0f:75:e1:0a:4d:f0:c1:4a:b6:d5:e6:af:b9:25:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:67:E1:C4:7F:50:7D:51:5D:2B:04:CE:60:8E:D7:24:5F:21:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:195::/48
2607:740:197::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:98:21:76:a7:4d:c5:d3:02:1a:e7:00:a5:2c:d3:50:04:cc:
c7:86:a6:3e:13:a7:76:b5:aa:4b:dc:d3:2d:42:1a:07:15:bd:
05:c0:95:b8:8e:30:dd:82:5a:ce:b5:da:25:45:5b:a0:99:a4:
40:79:08:da:7c:66:0c:3c:25:b8:ee:4a:45:4b:6f:03:4c:de:
8d:9e:2e:e5:55:38:48:b4:2e:36:c5:90:d1:fc:5a:de:fc:cf:
18:a5:55:97:ba:b6:29:db:6d:8d:60:98:7c:1d:0e:5f:15:e7:
56:e0:60:f3:5c:0a:a8:b3:d7:52:01:2e:07:bc:38:c4:65:f0:
98:e8:de:fc:6a:f1:90:8c:87:77:e3:c9:b2:71:4e:72:2c:4a:
28:8c:1b:10:2d:a2:09:ec:95:39:c4:25:c4:48:27:90:97:d4:
84:fc:29:0f:0f:66:37:e0:77:57:40:18:2d:eb:47:e7:5f:d7:
7e:fd:5d:1c:cf:ec:80:d5:24:e0:13:8d:99:43:0a:4d:55:5b:
f9:23:2a:da:53:97:3d:9d:ca:2a:c2:08:4d:16:94:c3:ef:5e:
ed:58:23:7f:09:14:1e:aa:fd:8f:4e:3a:c8:fc:bd:ab:2c:f0:
df:58:c4:f5:42:fb:fc:32:45:35:65:af:ed:23:4b:6f:fe:5b:
16:f0:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:43:12 2026 by rpki-client