
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/93a41aa9-43a1-3ca4-b1da-3cf59ff7d37e.roa
File: 93a41aa9-43a1-3ca4-b1da-3cf59ff7d37e.roa (raw, json)
Hash identifier: CpRo2MxxQAXEukQ/xr+gbIPpkO5CHfri8xVaskkeuhs=
Subject key identifier: E0:18:61:0A:B8:AB:95:AE:1C:E2:78:A7:CA:8D:9B:90:E1:B9:42:DA
Certificate issuer: /CN=40b08720-f667-4e69-b15d-2bd25101fae8
Certificate serial: 010D0C9F4328584EE3703337DE4CDC33CB46B640
Authority key identifier: A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/93a41aa9-43a1-3ca4-b1da-3cf59ff7d37e.roa
Signing time: Wed 19 Aug 2026 12:03:05 +0000
ROA not before: Wed 19 Aug 2026 12:03:05 +0000
ROA not after: Tue 17 Nov 2026 13:03:05 +0000
asID: 400337
IP address blocks: 206.225.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e3:70:33:37:de:4c:dc:33:cb:46:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b08720-f667-4e69-b15d-2bd25101fae8
Validity
Not Before: Aug 19 12:03:05 2026 GMT
Not After : Nov 17 13:03:05 2026 GMT
Subject: CN=1e159615-5ef4-4a29-9ee3-70f66f69cb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:b4:ea:a2:62:c7:d5:c0:11:c8:70:6a:2f:
0f:4f:91:d8:9b:09:0e:62:75:60:d1:22:00:71:76:
70:f4:8e:90:62:5f:b1:6c:5d:e4:cf:8a:04:50:04:
b7:2e:1d:fa:62:12:89:30:3a:9e:15:94:17:f3:23:
56:8a:87:12:63:49:d5:6d:f5:d9:a9:c7:28:f3:79:
56:68:c1:88:1e:8b:89:be:18:6d:4e:ab:87:d6:68:
55:5e:04:ba:4e:9f:31:0e:df:87:ab:d5:49:be:77:
4f:dd:0f:e4:ec:c3:55:09:ac:e1:d5:ba:c9:e7:5c:
4d:e0:f1:c5:be:fe:73:8a:0d:4f:6a:a7:02:76:86:
23:2e:76:2c:e8:6f:3d:1f:f7:48:37:e9:dc:a9:e3:
01:37:34:5b:32:6d:ac:d5:88:79:78:93:4f:13:a1:
55:24:1c:2d:65:5e:e2:7c:57:89:1b:a0:e1:39:c4:
50:29:df:1d:e9:20:a3:22:f5:13:dd:c8:6c:97:8d:
9d:4d:3c:15:ff:16:51:61:28:ed:1e:57:4a:84:c1:
6b:1c:29:4c:2f:ce:bf:2c:5a:20:d5:2f:7f:1e:e0:
48:2f:96:8e:a6:f2:ee:e8:bb:e9:be:b3:6d:45:39:
1e:be:13:57:e2:d6:e5:78:65:61:42:96:c7:70:ab:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:61:0A:B8:AB:95:AE:1C:E2:78:A7:CA:8D:9B:90:E1:B9:42:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/93a41aa9-43a1-3ca4-b1da-3cf59ff7d37e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl
X509v3 Authority Key Identifier:
keyid:A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.225.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cc:56:1e:e2:30:8c:13:08:b7:ba:1b:e7:95:43:7e:75:4a:
9c:ef:d2:c9:3e:f4:b3:0a:11:fa:76:1c:0a:ed:fb:77:6f:b7:
53:1b:a0:8b:43:87:57:0a:28:db:79:8c:50:3b:3b:31:24:9b:
d7:dc:70:76:0b:52:44:e5:99:be:b8:b6:6d:fa:82:0c:f8:e9:
14:41:65:f8:8e:73:7a:77:ef:64:1b:c2:63:76:f0:76:3a:a0:
70:c4:1b:93:70:af:22:86:a9:6e:e0:0f:d0:13:ae:d8:a2:d1:
f9:d8:11:55:82:78:82:73:ce:8b:5c:e4:d4:ad:3f:76:6e:1b:
d6:d3:bc:4f:65:71:90:e5:09:73:6d:59:32:cc:90:78:f2:a2:
80:7b:68:52:5c:9b:b6:fe:da:2b:16:bc:ab:24:e2:2e:12:24:
4f:5b:3f:6e:09:53:d1:d4:55:03:2d:ce:21:1a:36:ec:80:f4:
a3:cc:bd:04:57:48:73:b7:7f:ca:fe:da:18:c3:e0:13:7d:77:
ce:b9:04:c4:8d:c1:26:d3:60:d8:4d:51:56:98:1a:51:60:2e:
e6:48:28:53:e9:5e:75:6b:74:30:3c:98:1d:96:92:0b:74:82:
3d:9c:30:90:fe:35:e0:9c:73:92:07:ea:54:9c:55:8e:a3:65:
1a:90:e6:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jcDM33kzcM8tGtkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBiMDg3MjAtZjY2Ny00ZTY5LWIxNWQtMmJkMjUxMDFm
YWU4MB4XDTI2MDgxOTEyMDMwNVoXDTI2MTExNzEzMDMwNVowLzEtMCsGA1UEAxMk
MWUxNTk2MTUtNWVmNC00YTI5LTllZTMtNzBmNjZmNjljYjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxG06qJix9XAEchwai8PT5HYmwkOYnVg0SIA
cXZw9I6QYl+xbF3kz4oEUAS3Lh36YhKJMDqeFZQX8yNWiocSY0nVbfXZqcco83lW
aMGIHouJvhhtTquH1mhVXgS6Tp8xDt+Hq9VJvndP3Q/k7MNVCazh1brJ51xN4PHF
vv5zig1PaqcCdoYjLnYs6G89H/dIN+ncqeMBNzRbMm2s1Yh5eJNPE6FVJBwtZV7i
fFeJG6DhOcRQKd8d6SCjIvUT3chsl42dTTwV/xZRYSjtHldKhMFrHClML86/LFog
1S9/HuBIL5aOpvLu6LvpvrNtRTkevhNX4tbleGVhQpbHcKuolQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOAYYQq4q5WuHOJ4p8qNm5DhuULaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MGIw
ODcyMC1mNjY3LTRlNjktYjE1ZC0yYmQyNTEwMWZhZTgvOTNhNDFhYTktNDNhMS0z
Y2E0LWIxZGEtM2NmNTlmZjdkMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDBiMDg3MjAtZjY2Ny00ZTY5LWIx
NWQtMmJkMjUxMDFmYWU4LzQwYjA4NzIwLWY2NjctNGU2OS1iMTVkLTJiZDI1MTAx
ZmFlOC5jcmwwHwYDVR0jBBgwFoAUqFBis0iqQG5Vdyh/7pzpuIb+uZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80MGIwODcyMC1mNjY3LTRlNjktYjE1ZC0yYmQy
NTEwMWZhZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzuEfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjMVh7iMIwTCLe6G+eVQ351Spzv0sk+9LMKEfp2HArt+3dvt1MboItD
h1cKKNt5jFA7OzEkm9fccHYLUkTlmb64tm36ggz46RRBZfiOc3p372QbwmN28HY6
oHDEG5NwryKGqW7gD9ATrtii0fnYEVWCeIJzzotc5NStP3ZuG9bTvE9lcZDlCXNt
WTLMkHjyooB7aFJcm7b+2isWvKsk4i4SJE9bP24JU9HUVQMtziEaNuyA9KPMvQRX
SHO3f8r+2hjD4BN9d865BMSNwSbTYNhNUVaYGlFgLuZIKFPpXnVrdDA8mB2Wkgt0
gj2cMJD+NeCcc5IH6lScVY6jZRqQ5lI=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:12:10 2026 by rpki-client