
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa
File: a91395db-8f35-3e47-962d-19b64b128e81.roa (raw, json)
Hash identifier: 4iufYni9pnLlGZ1QEG7g8KRBlZkoie+iY4ocYLQKAps=
Subject key identifier: A6:75:2D:39:80:08:DA:71:80:33:40:CF:C0:82:2F:0E:84:49:45:8C
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584ED861DBC6D94815116C197F40
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 55440
IP address blocks: 149.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:db:c6:d9:48:15:11:6c:19:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=3e574a0d-05b4-44ff-9a3c-0be5b2343393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:75:9a:b9:cb:07:49:09:02:96:e7:e9:29:
c5:7e:37:61:6b:4c:03:f4:02:97:77:5c:c2:d5:8f:
44:82:48:b8:78:43:ee:00:c9:f7:b0:e4:6e:b7:38:
d6:60:26:52:0f:fb:f2:04:b4:ec:89:f9:93:53:21:
4a:3d:18:16:e9:b6:5c:1b:c2:c2:2d:ca:63:bd:06:
39:94:78:af:8f:2a:30:46:2d:44:a7:ac:91:98:c9:
85:f1:f9:bb:2e:64:44:22:97:de:54:e2:1c:7d:4d:
58:14:c7:c6:76:17:6d:7f:f0:c7:39:c4:67:eb:a7:
7d:48:96:32:d4:2d:c6:73:cf:d1:d7:ac:7f:48:1c:
1a:07:98:e4:a3:7c:90:73:2c:ff:90:d0:21:85:7d:
57:60:0b:f5:88:66:1e:87:cf:c6:3b:8c:fc:d8:ab:
70:79:e7:2e:ee:31:71:d4:68:19:76:b6:9d:d7:f2:
c3:9a:98:63:6d:27:d6:c4:cf:db:1e:60:99:cc:d0:
2b:03:38:b5:e9:6c:ba:bb:0a:2e:c9:65:d2:00:e9:
6e:a8:55:72:72:2b:75:f5:09:9c:4e:8b:88:b5:2a:
e8:13:82:17:73:c6:39:d5:f0:0c:32:28:05:e6:c3:
00:44:8c:35:46:9a:41:a9:f5:c5:22:18:46:c2:0b:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:75:2D:39:80:08:DA:71:80:33:40:CF:C0:82:2F:0E:84:49:45:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:39:e7:37:36:b3:10:10:20:a8:56:81:5d:2d:fe:ba:f9:78:
13:d1:1d:49:0a:30:78:16:ae:48:96:67:78:c4:cf:b6:8a:91:
7b:ec:5a:f9:d4:02:ee:20:e1:9f:51:b3:3b:c2:20:3e:f0:b6:
58:82:d8:2c:79:c6:d5:61:ac:02:8c:19:cb:21:c1:1d:db:b8:
6d:a4:d7:9f:6c:91:59:46:0a:06:9f:63:63:17:55:00:d6:d4:
1a:63:2e:c3:95:39:82:d0:17:4d:1f:19:6d:06:73:7d:8b:ff:
c4:e8:bb:88:ce:7a:b1:dc:de:bf:d2:a4:36:ba:0c:f7:86:d1:
07:fd:ee:c0:3d:d1:a8:ab:72:92:6a:6c:ba:ea:5e:ae:f0:ab:
97:02:1b:8c:4a:cf:61:4f:59:b1:d2:8e:1f:9e:f5:95:f1:fb:
22:5c:45:55:97:81:b4:95:e4:58:1e:7b:9f:45:a1:dd:38:62:
59:07:fd:7c:4a:b5:80:fe:2b:11:f8:b4:ec:e5:a0:02:83:d3:
f9:fc:c7:b4:83:88:c4:5f:aa:c7:b4:5c:a2:a4:94:40:80:b5:
b3:49:1d:bc:a8:e7:13:31:7d:21:da:39:40:29:76:c2:26:9b:
cb:aa:c4:9e:57:24:fd:90:50:87:ec:16:7b:58:37:07:6d:22:
67:39:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 20:07:53 2026 by rpki-client