
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa
File: 45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa (raw, json)
Hash identifier: WUM3LZiGT/ZYhxrsFC4pkdN05wUX/oaRJXByPKUveaU=
Subject key identifier: C4:27:63:F0:9E:4A:56:5E:92:DF:61:B7:AA:6E:6E:B1:CA:C5:EA:BC
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA7902D8284C88B3C09295A40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40717
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:2d:82:84:c8:8b:3c:09:29:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=86c5ca60-45d2-4699-b033-0b586adcc0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:e0:c7:c7:a9:73:10:1f:80:41:22:a3:45:
70:f5:dc:72:4c:63:8f:56:dd:5e:63:6c:95:75:79:
61:32:4a:60:87:63:de:b0:1e:60:90:16:c8:6e:10:
72:50:77:a4:2c:1d:29:3f:e4:24:62:4e:16:6e:0d:
99:0c:2e:e3:54:f9:22:78:88:ed:46:51:73:c4:d5:
df:07:a6:a9:4c:c5:15:81:ac:4d:ad:cf:02:4e:8c:
c1:f9:1e:a1:bf:d1:e4:74:c1:80:ae:e3:b1:fb:7f:
ca:97:8c:40:8f:c4:0f:03:31:bc:05:05:19:9e:a8:
50:ba:13:1d:8d:8a:fa:a4:b4:2d:82:db:38:82:34:
34:87:ef:4b:13:92:66:51:3b:bd:ee:e3:9d:37:a8:
2e:bb:5b:87:72:04:68:2d:03:ad:e9:a6:b3:fc:22:
30:e0:fa:68:ff:96:93:26:93:23:7c:67:84:d0:a3:
ac:57:52:cf:7f:cb:a9:ac:e2:84:91:d3:a9:5c:d3:
ab:26:d1:08:44:81:61:cb:86:77:a4:56:ca:fe:27:
4e:13:1c:69:4d:fc:e3:c1:f3:49:bd:3d:53:45:7b:
23:93:77:f4:4f:18:c7:38:53:f6:8e:58:65:23:e4:
40:6f:b1:6a:8c:3f:bd:f3:aa:25:82:2a:e3:38:ec:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:63:F0:9E:4A:56:5E:92:DF:61:B7:AA:6E:6E:B1:CA:C5:EA:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2d:e3:ea:41:6b:84:ac:eb:66:42:83:83:d9:70:51:b3:9b:
ed:16:28:81:27:e1:8d:9d:eb:24:fe:0f:f1:e0:10:d6:20:7b:
b0:90:76:52:a9:5a:22:71:74:78:b9:57:4f:43:0f:d7:5f:0b:
e8:08:41:74:df:80:25:b7:03:93:e0:ac:4c:cb:6b:fb:23:fd:
16:33:16:1c:17:6b:c7:bd:06:c5:05:93:cf:5e:19:67:c5:62:
f8:19:9d:23:7f:b0:70:22:5c:a9:45:06:74:b9:22:04:92:f7:
e6:dc:01:b5:18:80:30:63:9d:cd:9e:92:7a:fa:70:f5:a3:89:
3b:de:ef:90:77:8b:90:98:f6:71:ab:ff:ce:0f:e8:af:1e:7b:
86:56:04:93:22:9c:3f:97:92:e7:11:7a:08:b2:71:fc:f9:5a:
47:6b:cb:40:e1:ae:5a:af:1a:ac:aa:f1:86:0e:59:dc:61:3a:
79:8d:45:39:71:62:f8:03:8a:99:74:43:91:2c:f3:83:32:06:
84:cf:e9:ff:20:3b:71:40:9e:cc:65:7b:80:4f:19:85:63:e3:
c4:20:9f:23:ab:ba:19:95:da:49:63:36:d5:b2:39:13:c0:80:
54:81:a0:cd:8e:8f:b2:43:99:d7:44:fa:f5:8c:5a:a3:0d:13:
f5:55:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:51 2026 by rpki-client