
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa
File: 46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa (raw, json)
Hash identifier: P12js+6VyjXlrskGxGQhEttPRy8YHZIOsgOqAzDYX+8=
Subject key identifier: DB:B3:8E:4C:CC:E1:A9:D8:56:C0:FC:9B:31:69:B4:B9:22:97:CD:2F
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584CD4076BA3F5DCC156684132B0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 11290
IP address blocks: 172.97.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:6b:a3:f5:dc:c1:56:68:41:32:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=bdfe7ba9-92eb-4e5b-b179-e536efcdc132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:a3:05:e2:3f:9a:d2:0d:09:93:d0:99:e7:
23:d0:11:0b:ba:01:fe:eb:e3:42:07:b1:36:e1:08:
c8:09:df:b7:09:f1:41:b1:3c:e5:3a:e3:0c:81:53:
dd:fc:04:3d:74:2e:dc:67:ce:0b:34:1d:c6:fe:38:
8f:da:87:f1:69:c4:c2:06:0a:99:06:28:24:fd:26:
9a:90:a1:6f:2e:70:85:c7:9b:07:db:b1:d9:a7:4a:
e0:55:a0:c3:72:d2:d4:f7:b3:d3:35:f9:a2:f1:bf:
49:e4:79:7a:7d:17:5a:d8:95:6b:d2:ad:4d:49:b4:
42:81:75:7d:96:ea:1a:8a:c2:40:69:52:e8:74:a9:
90:63:8e:64:93:62:cb:81:30:27:ef:ba:d6:7f:7a:
19:12:4f:0b:d5:2e:3c:26:e8:c7:b9:ef:09:7b:7c:
bf:b3:b0:4e:83:0a:6a:1b:d1:c9:97:c8:30:e2:2c:
e1:0b:89:47:7e:4c:e4:b7:3e:b9:f0:c8:2f:59:8e:
9d:cc:cc:c2:dd:ba:37:21:05:3d:fe:d4:dd:3b:84:
4c:df:0b:a7:a4:d3:15:0c:11:13:51:db:f0:09:48:
19:c2:99:73:8e:ab:77:97:79:da:a6:ba:94:b5:c4:
6c:09:f7:30:2f:b8:37:5a:b4:b4:1b:66:b2:de:0d:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:8E:4C:CC:E1:A9:D8:56:C0:FC:9B:31:69:B4:B9:22:97:CD:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.97.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:eb:fc:ba:b5:89:e9:de:f8:30:4d:73:40:91:0f:72:49:27:
b5:18:0d:f7:01:4a:07:4a:0d:81:b9:f6:54:8c:4a:6b:0f:5c:
98:cd:77:92:d0:66:81:07:e6:0f:9e:a0:be:9a:f4:e8:02:1c:
62:af:b1:19:85:63:a8:cb:3e:2b:0a:48:bb:8a:28:8b:c7:fc:
18:fb:19:99:6c:9a:44:ec:55:e7:c7:d9:19:76:f9:08:fe:af:
04:15:94:a7:5c:0b:e9:8e:e3:b3:b5:6e:57:e6:0a:c3:b8:1b:
fa:b1:a4:09:4e:76:83:38:32:4d:56:af:96:15:12:d1:10:7d:
dc:81:33:ef:87:12:c1:9d:40:28:8b:c8:1d:74:71:39:0c:48:
42:0d:51:30:a1:8c:13:1a:e4:e5:39:89:34:b9:c6:a9:4b:66:
1a:90:37:1a:dd:6c:ad:56:e7:09:90:b4:0a:80:b7:7f:2e:15:
46:9b:9e:34:e6:f0:7d:c2:d8:5a:88:62:c0:e2:2d:95:32:b4:
18:93:53:e9:54:8a:80:53:22:0f:62:89:26:67:9a:23:73:0e:
6c:a8:74:9a:46:0a:01:bc:04:c8:d2:bb:c6:c6:fe:33:f3:31:
a3:06:d8:91:4f:07:83:6d:a1:fd:92:19:36:53:15:90:3b:ae:
79:5d:11:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2uj9dzBVmhBMrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
YmRmZTdiYTktOTJlYi00ZTViLWIxNzktZTUzNmVmY2RjMTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA6jBeI/mtINCZPQmecj0BELugH+6+NCB7E2
4QjICd+3CfFBsTzlOuMMgVPd/AQ9dC7cZ84LNB3G/jiP2ofxacTCBgqZBigk/Saa
kKFvLnCFx5sH27HZp0rgVaDDctLU97PTNfmi8b9J5Hl6fRda2JVr0q1NSbRCgXV9
luoaisJAaVLodKmQY45kk2LLgTAn77rWf3oZEk8L1S48JujHue8Je3y/s7BOgwpq
G9HJl8gw4izhC4lHfkzktz658MgvWY6dzMzC3bo3IQU9/tTdO4RM3wunpNMVDBET
UdvwCUgZwplzjqt3l3naprqUtcRsCfcwL7g3WrS0G2ay3g2DLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuzjkzM4anYVsD8mzFptLkil80vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNDY4OTZhNjEtYThiZC0z
N2JkLTk0YjYtZjRlM2E5MDM5YWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGE0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPr/Lq1iene+DBNc0CRD3JJJ7UYDfcBSgdKDYG59lSMSmsPXJjNd5LQ
ZoEH5g+eoL6a9OgCHGKvsRmFY6jLPisKSLuKKIvH/Bj7GZlsmkTsVefH2Rl2+Qj+
rwQVlKdcC+mO47O1blfmCsO4G/qxpAlOdoM4Mk1Wr5YVEtEQfdyBM++HEsGdQCiL
yB10cTkMSEINUTChjBMa5OU5iTS5xqlLZhqQNxrdbK1W5wmQtAqAt38uFUabnjTm
8H3C2FqIYsDiLZUytBiTU+lUioBTIg9iiSZnmiNzDmyodJpGCgG8BMjSu8bG/jPz
MaMG2JFPB4Ntof2SGTZTFZA7rnldEcU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:02 2026 by rpki-client