
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa
File: d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa (raw, json)
Hash identifier: GdwfzWVqWc9l84eP5cXP11C1YBvTwmGn9RbBR8RIiF8=
Subject key identifier: 7C:25:DA:64:F8:69:D6:1F:DE:05:47:BD:4C:55:3C:28:B8:32:FD:42
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584CD4076BE364B3B54DF7CC8720
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 11290
IP address blocks: 162.252.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:6b:e3:64:b3:b5:4d:f7:cc:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=3ce286bf-1096-475d-bf17-9fbb8dcf9054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:f4:05:03:97:a4:a1:24:99:34:44:fa:78:
2a:e8:7e:c7:73:80:04:ea:3b:3e:13:a3:8f:e2:81:
da:2f:9e:7e:6f:a6:4f:d3:0c:03:54:11:ab:9f:0d:
92:d7:b7:e7:07:15:ab:4e:1b:7f:c4:75:0b:ca:e4:
bc:e2:4f:ca:2b:db:23:89:b9:22:80:92:00:e1:06:
4d:d8:9c:54:55:8a:e5:84:f1:61:72:e4:6f:13:db:
3a:df:28:e1:20:17:82:a8:0d:c8:78:ce:fe:8c:96:
94:80:57:4e:22:f3:4c:08:83:4a:d2:a6:b5:1e:57:
1e:69:c7:a3:ba:da:64:17:e4:fe:3d:bf:3c:38:78:
68:20:5c:bd:db:6f:1d:06:0d:bd:95:68:23:3d:b4:
17:3e:11:47:d5:15:71:c3:3e:a4:d4:ff:2b:9a:5f:
99:cb:36:d8:9a:96:9f:00:d0:52:d7:13:c0:13:3c:
46:e0:40:9a:71:6b:85:92:71:60:c1:f5:90:b9:44:
9b:bf:dc:fd:4c:85:4c:f9:18:e3:db:7c:4e:6d:3e:
78:ee:91:1f:60:39:b4:8e:61:79:c6:4b:2d:bb:5f:
0e:09:f1:36:5f:a4:83:03:10:20:cb:25:2b:03:47:
26:53:67:6b:b4:56:e5:6a:ec:ec:bf:7d:40:20:34:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:DA:64:F8:69:D6:1F:DE:05:47:BD:4C:55:3C:28:B8:32:FD:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:5f:e8:b7:8d:75:84:02:cd:3a:5a:80:76:bd:50:f8:2d:78:
13:b6:3a:74:6a:bb:9f:3d:3f:a1:6c:96:1d:e9:7c:25:b0:c4:
2c:60:5a:6f:f5:8a:a1:2c:01:5a:bb:cd:51:3c:d5:b2:7e:08:
bd:37:b9:a2:ae:4a:e4:de:e3:7f:bd:4e:f7:53:3b:07:0d:f4:
94:f9:90:ac:8a:71:c4:e6:1a:9e:63:8d:e0:2f:c0:d2:d8:28:
5a:68:09:39:bd:8f:2d:c3:ef:53:1d:13:e1:a8:04:b5:33:7a:
fa:e9:f3:fd:d9:bf:3c:47:1d:06:9b:22:88:a6:5c:b9:09:3d:
ee:9f:c9:2b:25:bc:a8:6e:58:bb:a3:e9:f9:84:1f:8d:fb:0b:
52:33:ed:d1:55:48:81:e1:05:31:71:f3:d8:60:c2:ad:d7:8b:
10:a0:68:47:57:fd:12:9f:19:ff:b4:7c:d0:44:ea:9b:b0:6c:
87:d0:7e:cf:ac:af:35:79:7b:1e:09:10:2c:74:47:21:9b:ce:
84:74:c5:f1:6e:d6:54:31:9a:df:55:a5:41:e7:8a:0d:de:22:
fd:88:06:27:53:0f:40:24:13:d5:62:2e:a9:9b:db:1c:8e:be:
74:93:43:95:a2:b2:a9:04:ff:6b:2f:a3:81:38:f7:8e:81:39:
d0:d1:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:38 2026 by rpki-client