
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/b617a7d0-43bb-3d84-a792-d04ec9297787.roa
File: b617a7d0-43bb-3d84-a792-d04ec9297787.roa (raw, json)
Hash identifier: i7PbWZ7pldjcoEdFeAYR4KYfy60ekhfrjZHwawnTOYM=
Subject key identifier: 5F:BA:DB:67:57:6E:8D:24:F0:C5:63:84:E9:E5:49:DD:D2:C5:C1:61
Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial: 010D0C9F4328584CDB0212AF6A9BED0CFBB7C1C0
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/b617a7d0-43bb-3d84-a792-d04ec9297787.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 40788
IP address blocks: 45.40.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:12:af:6a:9b:ed:0c:fb:b7:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=7e321766-5fd3-4d5b-8472-e39e5097f989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b7:ea:75:0d:f0:28:65:45:cb:fd:46:8c:a3:
63:0e:a0:9c:c2:de:60:a8:40:e3:c9:5f:a7:bf:73:
84:ca:85:0f:6a:d3:c3:cb:8b:35:83:fe:74:fc:85:
26:30:ef:7e:80:9b:ad:c6:6d:7a:64:eb:95:0f:b1:
62:38:2c:b0:6f:b0:a6:94:b4:72:62:29:af:aa:ea:
ef:23:5d:8b:c8:4e:f0:62:a0:f7:03:a7:3e:0c:66:
af:34:11:2c:df:6f:2a:ca:a3:df:1a:71:37:09:34:
53:29:0e:b7:a0:02:d4:30:e7:7d:a8:56:df:0b:76:
c3:e0:ff:9e:ee:e7:3b:a3:39:4e:3d:6d:11:ac:5a:
f2:17:2d:dc:a5:30:e1:ee:14:29:4a:d4:80:72:88:
44:57:c0:e0:1d:a4:a1:1f:5b:e7:5e:c5:4c:be:24:
50:7b:77:46:d2:d4:13:87:72:74:ab:2c:fb:c6:c8:
7a:57:76:1a:da:34:29:e5:0b:f3:8d:a8:d5:84:9f:
65:f1:11:f8:c2:c8:06:c9:ff:3f:8a:25:ef:b8:5a:
49:0b:89:c0:46:c6:31:be:36:3d:21:bb:0e:6f:24:
a6:de:b6:01:88:44:f4:54:6e:6e:7e:38:d2:42:45:
7b:75:1d:c2:21:98:a9:ee:b9:04:7a:18:69:32:0a:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:DB:67:57:6E:8D:24:F0:C5:63:84:E9:E5:49:DD:D2:C5:C1:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/b617a7d0-43bb-3d84-a792-d04ec9297787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
X509v3 Authority Key Identifier:
keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:3d:26:ab:04:a3:28:67:ba:5e:e4:fb:34:68:72:cd:b4:76:
f9:48:22:d3:52:2a:0d:a1:cf:5e:09:fe:3c:e6:b7:81:da:1d:
55:bd:6f:c7:de:da:71:0f:b1:44:61:6a:c0:4f:e2:d8:db:cf:
4c:0f:46:8e:3e:7b:cb:fd:08:2d:89:ae:19:32:74:99:1e:3e:
78:49:ba:c8:28:3f:4d:78:9f:3c:fc:e8:42:b0:08:36:07:83:
1c:0c:5f:56:11:12:d4:35:e3:94:80:eb:76:d6:77:48:9a:c1:
a9:44:0b:5c:8e:35:59:c4:60:13:1e:96:c9:20:58:6b:8e:05:
c0:0b:b1:e3:3a:e2:26:ac:a5:de:b3:8b:08:bc:2e:80:65:ee:
a8:36:40:b1:86:28:f9:a3:a7:95:9b:46:03:e0:89:15:d3:4a:
29:19:c0:0c:3e:2a:50:60:a0:01:4a:c1:40:17:27:58:af:bd:
12:ad:82:68:5f:bc:ed:7a:51:c4:cb:49:8a:58:06:4b:aa:0f:
94:e9:06:7a:c0:a2:91:8c:75:e1:3a:96:49:0e:d5:9e:ae:47:
62:bf:b4:08:50:3e:f1:f2:d7:f1:fd:ed:f3:47:c3:70:1d:cb:
59:a4:27:b7:49:56:e0:da:c2:e7:e4:12:96:97:d8:fb:f1:4f:
df:3c:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:03 2026 by rpki-client