
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
File: b08285ee-0972-329c-81d0-7964b995c67b.roa (raw, json)
Hash identifier: tg4Zq+iAyBW+fzkvBUaTXPPGBOcPBWAcWmb8tycdAPs=
Subject key identifier: 0D:37:F9:62:DB:A6:60:0B:BE:B4:8D:B4:4D:31:A2:C6:0B:75:AF:95
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F4328584F0672444B107BD0F7E9884660
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 376
IP address blocks: 206.167.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:44:4b:10:7b:d0:f7:e9:88:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=4a57cbc8-7eed-46c1-80f1-dd380602dac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:bf:ee:fa:b2:af:e4:5c:80:f5:d5:2d:12:
59:b0:ad:e8:b6:95:16:bd:7f:1b:32:aa:da:6f:78:
b1:7f:87:7d:96:e2:0a:1f:e8:5a:2f:8a:a8:79:99:
79:f1:91:3b:da:7a:39:a0:70:72:b3:0f:f1:d1:92:
a5:a4:9f:c6:a0:a9:d3:54:cc:1c:06:ea:c0:fd:91:
d5:f6:5b:25:ef:36:1c:79:56:ea:8a:9e:29:d3:c7:
77:3b:4a:c0:f9:04:41:8a:2d:68:8c:50:ea:3d:1f:
03:c2:fc:0e:cf:ed:93:29:ed:be:b2:5f:61:89:ee:
96:82:3f:56:62:ff:1f:a8:09:f7:ab:ac:bc:30:6f:
f4:1c:cf:a3:ff:6c:ec:dc:06:99:21:52:cc:95:33:
b5:33:c0:0f:db:26:7e:b4:81:bc:ec:4c:61:0c:57:
02:7e:52:3a:84:9a:6a:cb:28:61:b0:ab:c4:b7:85:
cd:63:98:79:8b:53:42:f8:d6:be:ad:d2:c8:d5:03:
97:bc:03:45:f7:0a:9f:73:2b:79:84:e8:34:a4:c1:
fa:66:30:41:8a:44:09:2e:18:1e:d6:f3:50:c1:34:
c2:d0:42:01:6b:34:cf:00:41:8e:93:03:fb:d5:69:
08:6a:25:13:6b:c6:77:c1:b2:b6:76:5f:8d:48:48:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:F9:62:DB:A6:60:0B:BE:B4:8D:B4:4D:31:A2:C6:0B:75:AF:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:55:ba:0e:0e:cc:ee:14:df:df:fd:1a:05:a4:4a:22:ad:cd:
f7:1d:46:6e:52:70:8d:27:cc:d1:f1:68:31:6c:1d:d7:b8:e6:
33:eb:04:7e:98:c2:c8:a8:7e:a1:f9:76:c8:f3:fb:19:e4:25:
03:8c:7d:72:3a:d7:2f:bd:28:51:66:a0:a1:88:23:e3:83:32:
82:05:95:93:d2:36:83:74:2d:7a:a1:4f:b3:9a:6c:85:ec:4d:
76:c0:86:fb:06:d6:39:20:ee:22:e9:2f:ba:a1:27:51:d2:f3:
24:5f:7a:71:bc:92:bf:5d:ae:26:c9:6d:c7:2f:57:3e:b4:d0:
70:39:07:98:78:f3:63:03:4c:5f:12:f1:61:b8:d1:b8:89:95:
a0:f0:47:e4:93:68:73:0e:e0:45:cd:5d:4b:3f:14:2e:0f:61:
5c:7d:84:73:75:b8:0d:c1:3a:48:a1:ce:fb:ce:76:11:de:ad:
69:a2:d4:9d:4f:81:69:0c:11:de:16:76:c7:77:1a:b3:ac:38:
56:ae:ef:ae:34:d9:c7:56:3c:13:ad:03:1a:aa:69:29:7c:7b:
3e:55:07:58:3c:0b:17:18:cc:0a:8d:cd:b6:21:1f:cf:24:22:
e1:72:61:dd:3a:ab:36:4b:31:1f:e9:66:7c:10:1e:14:5e:14:
5f:96:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:43:58 2026 by rpki-client