
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e773635-ea2e-3bfb-af22-c2a783f95357.roa
File: 3e773635-ea2e-3bfb-af22-c2a783f95357.roa (raw, json)
Hash identifier: ZMU8TmnsUP4xyCtAX9YENnpPISj1FoYc7AI6csHB9x8=
Subject key identifier: F8:B0:BB:17:BC:26:0E:69:98:23:6E:49:10:75:07:C0:93:D7:F8:9D
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584CB2872C80A8D994F5179C5D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e773635-ea2e-3bfb-af22-c2a783f95357.roa
Signing time: Fri 30 Jan 2026 14:00:40 +0000
ROA not before: Fri 30 Jan 2026 14:00:40 +0000
ROA not after: Thu 30 Apr 2026 13:00:40 +0000
asID: 7029
IP address blocks: 45.40.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b2:87:2c:80:a8:d9:94:f5:17:9c:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jan 30 14:00:40 2026 GMT
Not After : Apr 30 13:00:40 2026 GMT
Subject: CN=d944ab5b-7f34-4e18-b8b1-87bb3916b297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:4d:0c:8e:ea:85:3a:66:5d:90:a5:2c:e8:
65:71:77:d6:45:d9:ed:61:1d:e5:d8:4b:d1:1e:58:
5c:96:35:3b:fb:38:df:cd:8b:f8:7d:dc:43:18:51:
77:04:37:1b:cd:83:b9:81:aa:c5:db:8a:51:ea:51:
e5:fd:2d:6a:e9:80:b4:d2:e9:45:7b:2d:0f:55:f5:
73:f0:83:79:b8:42:45:bf:98:ac:11:ee:0d:27:02:
52:96:d1:dc:bf:04:af:11:d1:72:a7:68:a5:e5:c5:
c1:73:de:64:b9:5c:08:6a:25:cc:e4:6a:c3:fb:bc:
1f:bd:36:b7:57:99:20:83:d2:16:d3:f2:60:7f:ee:
f4:de:e5:d0:d1:de:18:a9:0c:dc:a0:f4:17:16:4c:
45:5c:f7:e7:7d:78:3d:25:a1:5e:62:7b:41:6c:ce:
0e:b4:fd:87:cb:53:66:3a:bb:d1:05:26:c7:41:b7:
31:85:3d:f6:15:8c:19:ad:8a:7a:f9:57:27:4e:ca:
4c:b0:78:b3:51:fd:11:ff:9d:52:7e:c2:21:6f:92:
92:3b:6a:68:31:2e:03:e7:2d:a4:58:e9:24:c6:bc:
11:5a:4b:be:1e:30:83:eb:94:78:ae:e1:47:0e:45:
09:72:56:f9:f5:2f:39:bd:fc:be:3e:5e:ba:90:44:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:BB:17:BC:26:0E:69:98:23:6E:49:10:75:07:C0:93:D7:F8:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e773635-ea2e-3bfb-af22-c2a783f95357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:5a:5d:40:d6:89:29:b9:ce:54:a5:7a:90:e9:11:95:39:68:
12:ce:1c:15:88:0e:f4:3a:6f:f3:03:e0:ad:56:16:5d:4c:16:
c0:14:78:b2:b7:18:05:5f:19:cb:a2:63:cf:e7:aa:bc:a2:5c:
2f:16:8d:f9:e5:67:55:dc:fc:d8:31:01:cf:05:28:84:a0:9b:
ec:06:b1:61:45:a1:14:5d:08:40:7a:03:c4:9f:93:ef:5b:11:
15:8a:f8:fa:6f:df:be:cb:08:5c:ac:7b:2c:57:fa:53:48:2b:
81:eb:2b:ba:69:0f:ac:a0:29:07:93:4d:d1:43:64:78:c4:d7:
58:b6:9e:fd:1d:f2:b0:4d:08:08:e3:62:5c:8d:7a:f4:85:e3:
4d:8c:b4:82:d0:ee:83:00:62:41:e7:07:0d:b9:a5:6b:b3:1b:
40:d5:21:cb:a1:b5:28:e5:7b:0e:81:27:7d:2f:31:b3:36:d4:
3c:13:4b:1c:57:90:53:4d:37:80:ce:30:2d:b7:b0:33:22:ee:
9e:d7:d4:91:0d:35:91:57:0e:b2:ff:08:54:6f:53:c9:3b:3e:
3d:59:ca:d9:1c:af:7d:97:39:84:0e:07:8b:f8:24:ef:13:36:
53:ef:79:cf:08:56:32:0a:22:02:30:d0:24:22:d2:32:5f:59:
6d:41:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:47 2026 by rpki-client