
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa
File: 1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa (raw, json)
Hash identifier: +UN83CrpgpJprYmUtEovRA87E3m5rIyqGLkKJM3/qkE=
Subject key identifier: 44:88:98:41:EB:D8:93:58:1B:A6:FC:E1:8A:98:8E:9C:C4:97:8D:71
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584CD4076C69DD5D3317212B6800
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 11290
IP address blocks: 157.208.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:6c:69:dd:5d:33:17:21:2b:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=3abb348e-a5f1-4c29-93dc-464b2750016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:05:98:a4:cc:3f:23:4b:6e:21:1e:35:95:
97:96:d7:c4:f6:3e:4e:35:fb:b4:eb:f1:db:a9:5c:
f0:3a:4a:bc:04:22:3e:9c:99:77:57:67:62:1f:59:
59:5a:99:f9:0e:42:e9:9b:1c:e4:7e:b4:b5:6c:fa:
e0:47:92:fc:f0:7c:21:3b:af:34:64:2f:3d:b5:6a:
0b:29:34:43:bb:49:be:67:ea:35:e5:38:6a:6f:70:
44:e2:df:ee:18:7c:b3:a1:66:c4:b0:8e:70:be:2e:
83:67:6d:f6:96:8d:94:d7:7a:c9:94:72:2f:71:a7:
61:e6:0c:23:39:ef:47:21:e7:b6:aa:ba:4f:c3:c6:
5b:db:4e:ef:ec:69:f2:3e:90:3c:e7:f0:9b:35:95:
30:50:5a:c3:a3:cb:34:1d:2f:fd:8b:88:b5:1a:84:
6d:19:e5:3a:cb:96:fb:7d:af:a5:97:22:32:77:2e:
2d:7e:8e:bf:d3:54:22:f6:e5:e2:26:aa:15:00:da:
1e:cf:fa:4a:aa:60:a0:a8:7a:7b:fc:2f:6c:e0:a1:
8d:e5:cc:0f:ea:c1:35:00:ea:fe:d4:35:ab:76:33:
86:9d:42:28:5c:79:ed:01:e0:60:93:9f:09:9a:7e:
fa:cf:0b:9c:a3:c7:88:90:e7:53:84:be:04:3f:87:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:98:41:EB:D8:93:58:1B:A6:FC:E1:8A:98:8E:9C:C4:97:8D:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
157.208.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:27:8f:61:6f:06:7e:c0:c5:fd:68:15:1b:34:79:7f:27:e3:
40:30:67:78:5f:aa:78:87:9a:e0:5c:5c:27:90:89:a6:07:41:
cf:b9:ed:3f:ee:8f:17:cb:20:00:bf:3d:f9:f4:42:ea:13:58:
1b:5b:da:77:75:35:0b:aa:ba:8d:b8:38:f1:63:14:c0:18:6c:
0e:90:f2:65:1d:d0:84:1f:66:d0:85:af:63:47:83:ea:b3:08:
7f:ab:26:90:93:85:d0:8d:cc:79:a8:f5:72:04:e8:56:52:3f:
c1:02:60:c0:8c:03:0e:55:78:a4:1d:a1:c0:c9:ea:3f:85:30:
a8:45:60:8f:53:93:c7:f2:2f:6f:f5:60:52:cf:a9:00:ab:51:
e9:03:e9:72:16:00:a6:85:cb:e3:df:b2:68:07:42:9d:03:c1:
74:73:77:6f:5e:6a:4a:5b:a1:8b:f9:fb:e2:15:c3:a4:52:85:
db:ba:51:d8:c9:5c:0c:1d:6d:94:fb:1c:61:14:17:84:32:59:
70:b9:8d:fe:31:ec:f5:f2:f9:3d:63:66:e2:52:ed:9c:42:98:
0d:bf:a6:14:fb:0a:44:d7:dc:54:5f:1b:7b:15:4c:59:c3:a7:
e8:24:83:3d:d4:55:5e:29:47:3f:c2:62:71:77:f1:8e:cb:31:
6f:d1:59:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2xp3V0zFyEraAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
M2FiYjM0OGUtYTVmMS00YzI5LTkzZGMtNDY0YjI3NTAwMTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgcFmKTMPyNLbiEeNZWXltfE9j5ONfu06/Hb
qVzwOkq8BCI+nJl3V2diH1lZWpn5DkLpmxzkfrS1bPrgR5L88HwhO680ZC89tWoL
KTRDu0m+Z+o15Thqb3BE4t/uGHyzoWbEsI5wvi6DZ232lo2U13rJlHIvcadh5gwj
Oe9HIee2qrpPw8Zb207v7GnyPpA85/CbNZUwUFrDo8s0HS/9i4i1GoRtGeU6y5b7
fa+llyIydy4tfo6/01Qi9uXiJqoVANoez/pKqmCgqHp7/C9s4KGN5cwP6sE1AOr+
1DWrdjOGnUIoXHntAeBgk58Jmn76zwuco8eIkOdThL4EP4fzbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESImEHr2JNYG6b84YqYjpzEl41xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWQ4NGExN2QtNjZjOS0z
YjZkLTk5MzYtZjVmYjlkMTEwMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGndAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHknj2FvBn7Axf1oFRs0eX8n40AwZ3hfqniHmuBcXCeQiaYHQc+57T/u
jxfLIAC/Pfn0QuoTWBtb2nd1NQuquo24OPFjFMAYbA6Q8mUd0IQfZtCFr2NHg+qz
CH+rJpCThdCNzHmo9XIE6FZSP8ECYMCMAw5VeKQdocDJ6j+FMKhFYI9Tk8fyL2/1
YFLPqQCrUekD6XIWAKaFy+PfsmgHQp0DwXRzd29eakpboYv5++IVw6RShdu6UdjJ
XAwdbZT7HGEUF4QyWXC5jf4x7PXy+T1jZuJS7ZxCmA2/phT7CkTX3FRfG3sVTFnD
p+gkgz3UVV4pRz/CYnF38Y7LMW/RWVE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:31 2026 by rpki-client