
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/433f7757-53c4-301f-ac9f-9ee2037e6121.roa
File: 433f7757-53c4-301f-ac9f-9ee2037e6121.roa (raw, json)
Hash identifier: vvnMd2UQ1Xz1DS2Lt5pO9lojxrbTLQM26QzAtbpm3Cc=
Subject key identifier: 48:D4:21:0B:7D:9F:C2:3F:71:76:47:2D:37:C1:D3:59:79:79:EA:DE
Certificate issuer: /CN=922506ab-190b-4044-a562-b1717e19da36
Certificate serial: 010D0C9F4328584D5F7FAEA351F42542D1D7EFC0
Authority key identifier: D4:03:01:51:4E:30:68:5A:3E:2E:BD:2E:93:EB:D6:C5:A9:21:71:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/433f7757-53c4-301f-ac9f-9ee2037e6121.roa
Signing time: Thu 02 Apr 2026 13:00:30 +0000
ROA not before: Thu 02 Apr 2026 13:00:30 +0000
ROA not after: Wed 01 Jul 2026 13:00:30 +0000
asID: 29831
IP address blocks: 206.168.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 16 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:7f:ae:a3:51:f4:25:42:d1:d7:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922506ab-190b-4044-a562-b1717e19da36
Validity
Not Before: Apr 2 13:00:30 2026 GMT
Not After : Jul 1 13:00:30 2026 GMT
Subject: CN=14d54e2a-266b-445e-916e-013d665f5fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:57:38:a6:8d:7e:72:67:fb:c8:5c:c1:62:
ff:e4:38:9c:41:66:e0:db:b4:e5:5c:9f:57:a9:49:
44:60:8b:62:7e:84:a6:5f:33:90:08:d2:ce:0d:7a:
db:82:78:30:c5:41:c1:d7:75:23:05:45:9a:3d:aa:
c3:64:51:4d:93:86:fe:ae:1e:86:fc:79:ba:19:0f:
c0:56:dd:2e:17:15:71:2f:6a:7c:35:17:97:0f:5f:
a3:89:86:4b:b8:73:3c:6a:9a:27:56:0d:b9:90:cd:
6b:19:b5:27:c2:6c:a6:d4:75:5c:f3:73:b6:b3:71:
bc:55:42:f7:12:7b:55:90:6f:73:1e:88:bf:35:1d:
23:2a:9d:48:4c:9d:f2:a1:cf:70:0d:ce:0c:fa:5b:
97:d8:cd:41:9e:94:78:a6:f8:6d:74:3c:24:0a:ef:
6e:b9:16:53:38:3b:35:9d:81:d2:a7:dd:88:88:0f:
3e:62:df:f9:a0:f7:7c:65:59:08:16:e1:9b:f3:97:
09:81:3d:9d:c3:6b:15:00:86:fd:35:38:ca:d2:d3:
4c:4e:11:e2:eb:30:44:7f:e3:b6:4d:90:9e:22:73:
1e:0f:4b:ca:f6:28:90:ea:44:5c:5a:e4:2c:c0:1f:
d5:fb:50:79:3f:1e:b3:67:8f:c9:fd:bc:29:a9:3e:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:21:0B:7D:9F:C2:3F:71:76:47:2D:37:C1:D3:59:79:79:EA:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/433f7757-53c4-301f-ac9f-9ee2037e6121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.crl
X509v3 Authority Key Identifier:
keyid:D4:03:01:51:4E:30:68:5A:3E:2E:BD:2E:93:EB:D6:C5:A9:21:71:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:db:c3:ff:95:b4:63:c9:63:e7:88:c9:a1:43:cb:57:6b:99:
cf:d1:ce:70:da:13:33:8a:28:8d:ab:67:d3:1c:7c:a8:22:d8:
77:8e:d9:ff:16:7f:81:f5:b5:61:0e:1d:2e:83:71:b2:f8:5d:
cf:9b:5e:a1:f2:4e:55:cd:34:56:67:f9:8d:7d:9f:a5:e0:a5:
6b:95:25:17:2b:fa:26:1c:c1:f9:60:47:a9:29:84:da:7a:82:
dc:75:d5:22:a4:e4:a7:e9:4b:79:92:44:0b:04:8a:98:d8:ca:
dd:89:ae:ad:90:43:42:09:12:06:70:82:23:4d:f2:99:51:f7:
a2:d3:86:1b:d6:8b:3a:28:f7:cb:0f:c3:83:d7:ed:04:a2:73:
be:44:3b:7a:e5:50:8f:7c:d2:6b:f6:6f:e5:b7:ce:d5:8a:c6:
cd:e4:6a:59:8e:4c:9e:02:5e:bc:fb:16:83:03:c5:47:5d:e1:
7f:e0:a5:65:9f:de:2a:a9:e1:5f:a4:4a:75:69:52:e5:b1:1c:
c8:d4:7b:a7:6f:d8:96:2b:4a:89:88:8b:a1:08:46:61:89:1d:
57:59:3c:db:db:fe:e7:19:23:84:88:a4:cf:08:14:67:fa:74:
28:3e:3b:63:fe:03:58:da:fd:e0:e7:d8:fa:e5:1a:80:f0:b4:
10:d0:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 13:24:31 2026 by rpki-client