
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa
File: 40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa (raw, json)
Hash identifier: 8LMtlKWUokzI2ceQ9pncttQtd2MtMvu8v4io6uz9at4=
Subject key identifier: A2:D4:F5:7C:18:09:DA:0D:35:ED:37:14:95:D7:06:FF:D8:C5:CE:E8
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EAFE703BDD7B18625D54D74E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 397210
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e7:03:bd:d7:b1:86:25:d5:4d:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=a00cd811-a173-4f69-9116-b42f7606469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:57:79:db:18:7b:73:34:24:a8:52:0f:2a:
63:b8:43:23:0c:b5:97:db:2c:d4:76:eb:b5:d8:af:
d5:6c:7f:96:08:8f:21:07:cf:44:14:7a:cf:2a:b0:
ff:12:20:fe:b2:b3:83:33:5e:2a:53:51:4c:38:2e:
75:5a:56:01:21:e8:c0:50:3f:cb:3f:bc:21:d9:55:
02:4c:ea:f9:c0:1b:ef:60:13:35:5e:a5:fc:cf:af:
2e:4d:36:9f:eb:75:3a:88:98:98:44:66:a0:ee:8c:
8c:8c:da:fc:c5:97:93:25:a9:38:f7:a6:8b:24:d5:
a2:a3:e6:2c:28:3a:95:2c:f5:e5:e4:c6:22:8c:c6:
b2:9a:7b:bd:ad:36:12:d3:5b:da:09:06:6b:91:0d:
8e:1e:5d:16:01:a7:19:4a:8a:c2:d4:50:88:fa:68:
77:dd:e7:36:85:50:99:12:25:cf:7f:40:fd:bf:27:
6d:a3:97:0f:bc:10:50:3f:01:40:52:8c:30:86:9e:
1d:e5:8a:ca:c1:74:7d:71:00:61:43:9f:d8:1a:51:
e5:91:f3:66:30:33:08:ab:d6:fd:f6:17:8c:30:e5:
b0:87:cd:24:e6:fc:58:ab:b9:72:6a:6e:6c:cd:4d:
6f:eb:44:44:e3:e4:c5:2b:22:5f:0c:f4:f6:8d:fb:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:F5:7C:18:09:DA:0D:35:ED:37:14:95:D7:06:FF:D8:C5:CE:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:27:8d:79:d3:1c:03:0c:ed:74:05:73:b9:1d:a6:78:7e:7f:
63:33:0e:f4:ef:53:21:d7:a5:d6:a0:26:be:cb:3c:4a:5c:c3:
38:e6:30:87:b0:ff:a1:0b:88:36:fa:40:c1:46:b2:37:1f:86:
1e:80:77:7e:39:66:f4:ef:99:d5:4a:48:66:09:b0:aa:7e:ea:
3c:a1:5a:17:e9:95:0c:b6:c6:1e:24:df:ad:4f:e2:b7:73:9b:
90:d0:0b:fb:08:55:ff:27:92:3f:1c:cf:17:81:ef:c6:58:aa:
f5:be:a6:67:59:99:96:98:14:fb:c7:ee:54:b9:e4:02:98:32:
5a:a1:fb:06:fa:89:29:4a:b1:00:30:63:28:88:c8:a2:8e:d4:
3e:3e:1c:4b:a6:5f:ad:69:40:10:8f:55:98:22:41:e5:e4:d1:
e0:d8:b5:cf:c8:bf:ca:48:57:b0:52:15:97:59:11:30:3c:7c:
5b:cf:e7:dd:0a:6a:3f:11:d3:4b:56:71:0a:c1:ad:02:dd:98:
cd:6b:b7:89:3b:05:6b:36:7b:75:41:88:e7:cb:df:75:e6:49:
21:48:47:e5:78:73:45:5d:c7:63:d8:d4:98:53:81:22:87:40:
a8:d3:b4:a5:82:64:d7:6c:13:13:4c:bc:c5:c9:34:20:d9:46:
96:09:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:52 2026 by rpki-client