
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9/2ab2fac4-21a2-3cef-89e2-76a29c157009.roa
File: 2ab2fac4-21a2-3cef-89e2-76a29c157009.roa (raw, json)
Hash identifier: 8XvdRv5iwZpLJKhFycc0XSdTVTBweWRTBl9zIOre/OY=
Subject key identifier: 8B:E4:D0:D5:C0:08:AB:BC:04:F5:3B:93:ED:CE:90:9E:9A:31:7E:D8
Certificate issuer: /CN=40e2df26-3aad-4dd6-8017-4fb86a2628c9
Certificate serial: 010D0C9F4328584ED46FF02B25FE98240D669AB6
Authority key identifier: 4F:1B:E6:D7:E7:4C:69:7C:9B:A9:86:6A:53:EF:3C:F5:BB:88:B1:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9/2ab2fac4-21a2-3cef-89e2-76a29c157009.roa
Signing time: Fri 14 Aug 2026 03:05:25 +0000
ROA not before: Fri 14 Aug 2026 03:05:25 +0000
ROA not after: Thu 12 Nov 2026 04:05:25 +0000
asID: 402825
IP address blocks: 192.12.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9/40e2df26-3aad-4dd6-8017-4fb86a2628c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9/40e2df26-3aad-4dd6-8017-4fb86a2628c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:6f:f0:2b:25:fe:98:24:0d:66:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e2df26-3aad-4dd6-8017-4fb86a2628c9
Validity
Not Before: Aug 14 03:05:25 2026 GMT
Not After : Nov 12 04:05:25 2026 GMT
Subject: CN=a98991dc-8334-4359-816c-a484024a0477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:2d:d4:dd:71:e2:e9:9d:84:b2:06:6d:c5:
df:bb:be:c9:0a:a4:1a:36:7c:10:5d:36:3d:36:0b:
cb:80:a2:8e:a7:81:ff:fa:1f:84:53:eb:94:1e:72:
94:b1:1c:11:72:22:1b:90:90:9f:37:19:7c:55:17:
65:3b:15:42:2d:ef:83:fe:67:16:97:69:0a:54:ae:
87:e3:2a:f3:6e:33:9f:f6:8b:6f:87:ca:a6:35:84:
8b:f5:6a:45:f4:00:97:56:9d:b6:0a:bc:54:99:74:
af:96:43:76:b6:e4:99:63:64:9b:93:cd:14:56:b4:
9c:93:48:01:06:ba:6c:5f:5e:55:d8:40:d1:a9:93:
d3:9c:07:cc:6b:d3:10:ce:e4:3f:6a:59:e7:55:a9:
e7:f5:22:f7:6d:09:5f:61:49:10:e8:fa:e4:8a:bf:
e7:13:75:47:f1:a3:47:1a:f1:87:64:c5:18:c4:e1:
d5:12:b6:43:e0:7c:b7:ad:d0:73:5b:ea:4d:98:b1:
4c:62:00:39:96:52:92:74:03:bd:b5:6b:b1:7e:6b:
2d:cf:9d:1e:0b:3e:18:fc:76:64:1e:b5:1d:47:d0:
e6:3f:b9:4b:59:1f:2d:d1:06:13:43:e7:e5:6d:59:
65:32:46:59:53:04:0c:c6:89:81:82:33:de:ed:86:
3b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E4:D0:D5:C0:08:AB:BC:04:F5:3B:93:ED:CE:90:9E:9A:31:7E:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9/2ab2fac4-21a2-3cef-89e2-76a29c157009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9/40e2df26-3aad-4dd6-8017-4fb86a2628c9.crl
X509v3 Authority Key Identifier:
keyid:4F:1B:E6:D7:E7:4C:69:7C:9B:A9:86:6A:53:EF:3C:F5:BB:88:B1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/40e2df26-3aad-4dd6-8017-4fb86a2628c9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:bc:d0:f9:11:9c:e9:a0:92:c3:62:e3:12:e7:7d:6d:39:ee:
a0:fe:52:0c:3b:09:d2:22:ac:6b:e6:d9:28:39:f5:d9:e9:ed:
a3:0f:49:79:6f:f2:e8:46:a4:5c:63:8b:31:63:56:a7:53:3f:
a5:cb:ee:d7:9b:df:5d:c5:40:72:b8:30:ae:29:68:c0:55:6b:
dd:b6:d4:17:92:f8:2e:cd:af:ee:16:0d:4f:d3:5f:db:8e:d9:
7e:9e:99:6e:bc:11:54:bf:a3:97:05:c3:41:47:99:93:e8:5f:
8d:a0:30:a1:b0:76:da:e2:10:f0:1a:ce:77:75:ec:bb:7a:31:
e4:3c:0b:ad:07:da:d3:c4:81:45:62:75:a5:ab:b6:6f:f3:a3:
8c:2b:ec:75:af:ca:d7:39:eb:60:e9:61:7d:12:a3:51:6a:67:
9e:83:bc:f6:7a:af:46:94:a6:37:f6:b1:4f:2f:3b:dc:54:c1:
61:a5:06:c4:53:d7:5b:32:fe:ab:f0:fe:2e:4b:74:26:f4:b1:
c2:f0:0d:22:5c:34:1a:0a:ed:aa:42:df:5e:dc:2f:80:9f:10:
2f:eb:d6:40:4a:34:dc:38:ed:96:42:f4:03:52:88:66:01:8d:
86:cb:6b:fc:39:ea:0b:c4:27:da:e8:ed:64:14:95:ec:39:98:
8c:59:7a:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ub/ArJf6YJA1mmrYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBlMmRmMjYtM2FhZC00ZGQ2LTgwMTctNGZiODZhMjYy
OGM5MB4XDTI2MDgxNDAzMDUyNVoXDTI2MTExMjA0MDUyNVowLzEtMCsGA1UEAxMk
YTk4OTkxZGMtODMzNC00MzU5LTgxNmMtYTQ4NDAyNGEwNDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptUt1N1x4umdhLIGbcXfu77JCqQaNnwQXTY9
NgvLgKKOp4H/+h+EU+uUHnKUsRwRciIbkJCfNxl8VRdlOxVCLe+D/mcWl2kKVK6H
4yrzbjOf9otvh8qmNYSL9WpF9ACXVp22CrxUmXSvlkN2tuSZY2Sbk80UVrSck0gB
BrpsX15V2EDRqZPTnAfMa9MQzuQ/alnnVann9SL3bQlfYUkQ6Prkir/nE3VH8aNH
GvGHZMUYxOHVErZD4Hy3rdBzW+pNmLFMYgA5llKSdAO9tWuxfmstz50eCz4Y/HZk
HrUdR9DmP7lLWR8t0QYTQ+flbVllMkZZUwQMxomBgjPe7YY75wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvk0NXACKu8BPU7k+3OkJ6aMX7YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80MGUy
ZGYyNi0zYWFkLTRkZDYtODAxNy00ZmI4NmEyNjI4YzkvMmFiMmZhYzQtMjFhMi0z
Y2VmLTg5ZTItNzZhMjljMTU3MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDBlMmRmMjYtM2FhZC00ZGQ2LTgw
MTctNGZiODZhMjYyOGM5LzQwZTJkZjI2LTNhYWQtNGRkNi04MDE3LTRmYjg2YTI2
MjhjOS5jcmwwHwYDVR0jBBgwFoAUTxvm1+dMaXybqYZqU+889buIsaEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80MGUyZGYyNi0zYWFkLTRkZDYtODAxNy00ZmI4
NmEyNjI4YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe80PkRnOmgksNi4xLnfW057qD+Ugw7CdIirGvm2Sg59dnp7aMPSXlv
8uhGpFxjizFjVqdTP6XL7teb313FQHK4MK4paMBVa9221BeS+C7Nr+4WDU/TX9uO
2X6emW68EVS/o5cFw0FHmZPoX42gMKGwdtriEPAaznd17Lt6MeQ8C60H2tPEgUVi
daWrtm/zo4wr7HWvytc562DpYX0So1FqZ56DvPZ6r0aUpjf2sU8vO9xUwWGlBsRT
11sy/qvw/i5LdCb0scLwDSJcNBoK7apC317cL4CfEC/r1kBKNNw47ZZC9ANSiGYB
jYbLa/w56gvEJ9ro7WQUlew5mIxZeu8=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:56:12 2026 by rpki-client