
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa
File: 40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa (raw, json)
Hash identifier: OAzh33fnTr7LEnIgzptQYTHJdNjT+78vPsF7v1x8atg=
Subject key identifier: 91:2C:9C:BC:79:32:5A:E6:8A:DC:23:B2:AF:3B:3D:1F:4C:72:37:52
Certificate issuer: /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial: 010D0C9F4328584D5E1A6BF8C311989D1EA69F00
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 395347
IP address blocks: 97.107.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:6b:f8:c3:11:98:9d:1e:a6:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=dfc4a76c-5d25-4cb2-b929-268d55e0075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:22:ac:3d:e2:e0:84:dc:d6:6a:e3:e4:15:
9b:fa:6f:a1:96:32:d3:35:09:8b:ba:49:90:db:be:
37:4e:45:77:8b:1d:33:5b:c6:73:67:a2:c0:8d:54:
44:8e:e6:a2:f5:fe:cf:2f:47:34:c9:7e:e4:61:82:
1d:59:7f:4a:2d:58:27:1e:65:e3:38:39:40:38:d2:
fd:1d:99:d8:a2:45:ef:6d:12:23:4c:71:32:ec:59:
1b:36:31:a0:b1:0e:9f:9e:94:95:e6:3e:56:1e:53:
5a:87:3a:f2:65:17:3f:33:56:ce:eb:8d:ae:77:eb:
b5:e8:74:e2:c6:35:7b:e3:68:f3:70:6c:17:d1:b5:
9b:7e:e8:38:ca:3c:46:5b:ea:6c:3d:49:68:ab:b5:
d6:69:37:34:25:07:8c:48:f1:b6:15:4c:c9:58:05:
a1:5b:22:d7:d8:b4:c4:79:40:13:43:26:43:03:b6:
25:0d:b3:74:7a:ea:71:64:f9:c5:57:40:70:6b:90:
40:3d:df:62:e2:28:38:7c:0b:e0:ef:5a:15:81:a9:
39:d0:d2:4f:6e:67:3f:27:4f:77:26:1c:75:03:01:
da:dd:1c:8e:8c:75:e1:f5:a6:7c:4d:2a:ee:90:cc:
bf:a0:f7:e8:be:e2:18:3c:b9:1e:cf:e9:01:6b:a3:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:9C:BC:79:32:5A:E6:8A:DC:23:B2:AF:3B:3D:1F:4C:72:37:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
X509v3 Authority Key Identifier:
keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
sbgp-ipAddrBlock: critical
IPv4:
97.107.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:08:3d:86:74:99:df:88:12:5a:72:35:cd:ec:e1:1d:ab:c5:
5f:81:f7:de:31:ca:0f:ad:37:14:3f:da:f6:34:44:16:56:9d:
03:55:35:df:c0:62:e4:ca:0c:47:2c:b3:ff:2f:9b:05:dc:2c:
4e:20:1f:f5:03:f4:08:1c:e2:a2:24:17:c6:2f:c5:d1:33:42:
c4:97:bf:58:01:fe:de:21:bf:6d:e1:73:90:4d:8d:41:2b:bf:
a7:2d:aa:99:a7:30:9f:89:ed:b2:3b:e8:03:b8:2a:69:c7:45:
86:dc:35:b3:28:70:0e:a0:17:15:dd:1d:da:7b:4c:c0:03:2b:
74:ca:8f:72:4d:dc:b2:50:bb:41:34:3b:e5:8f:f3:36:c9:77:
fc:76:2d:8d:13:85:55:97:95:f8:75:b2:63:2e:a2:90:d4:11:
6a:59:be:6e:b0:70:b6:d8:54:1a:a8:e8:c8:6b:5e:7f:0f:e2:
4b:a8:e4:19:cc:3d:28:b6:e0:ce:7d:1d:f7:c9:55:b9:4f:cd:
5d:47:7b:69:2c:7d:38:64:04:c4:a6:f8:27:eb:eb:44:19:fe:
1a:4f:be:74:bb:a3:49:e3:da:c8:ce:8c:a0:49:57:73:c2:37:
20:9f:93:37:2d:f0:10:88:93:fe:6b:fc:a0:b9:a3:f7:9f:29:
51:01:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:36:05 2026 by rpki-client