
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d36ac7fe-4c9d-346b-b186-34186998bf60.roa
File: d36ac7fe-4c9d-346b-b186-34186998bf60.roa (raw, json)
Hash identifier: rHb6Ttg/vsKJZDrCqT90f8F+ATdcpgptacROoKAf0aw=
Subject key identifier: 39:A6:E4:6C:81:8A:BA:6C:A4:32:24:91:9A:A6:56:A3:64:DC:DF:42
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CE36222B0BF15AC4B1C7AC920
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d36ac7fe-4c9d-346b-b186-34186998bf60.roa
Signing time: Tue 17 Feb 2026 02:00:31 +0000
ROA not before: Tue 17 Feb 2026 02:00:31 +0000
ROA not after: Mon 18 May 2026 01:00:31 +0000
asID: 54253
IP address blocks: 40.233.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e3:62:22:b0:bf:15:ac:4b:1c:7a:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 17 02:00:31 2026 GMT
Not After : May 18 01:00:31 2026 GMT
Subject: CN=32acd9e2-b52b-4350-9bbd-66effff08372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:ae:5a:f8:b7:62:c8:ce:2e:a8:98:b6:2a:
08:ce:57:90:04:07:82:03:7d:68:90:09:a5:af:0c:
e6:5b:71:31:43:d0:cd:e6:84:d5:11:c3:15:bb:b0:
75:c3:6a:61:cb:89:3c:e1:67:d9:1c:11:5c:a1:fb:
01:70:6d:e4:f5:c3:d2:50:a1:22:eb:a3:34:c8:f9:
fa:43:a0:25:61:80:68:57:cc:a2:90:17:3a:8e:f9:
f3:12:ad:05:ad:3d:06:84:6e:69:02:49:d0:d6:f2:
a2:3f:d0:6f:b4:11:b6:59:98:7d:10:f3:fa:f2:3f:
05:48:39:1d:ba:fe:10:27:6d:93:12:74:05:13:12:
26:f3:af:df:93:99:8c:fd:5a:84:e8:da:2f:0f:23:
32:ef:22:42:26:4d:c0:1a:30:8a:ff:e3:f9:e5:c0:
c8:92:b3:18:10:51:f0:c3:dc:5d:e2:11:f6:24:a5:
ad:74:23:6d:92:41:af:96:e2:d1:b6:50:32:fc:a0:
12:d9:cf:94:65:4e:47:e3:d3:f2:a3:a8:f2:d3:96:
0d:d4:64:0f:24:4e:88:24:fb:0e:e9:55:2a:85:ee:
82:71:58:9c:a1:4a:e0:14:c5:e3:d7:b1:e0:e5:03:
7f:6e:9f:53:99:7d:0a:28:eb:e6:53:fc:f9:89:ad:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:E4:6C:81:8A:BA:6C:A4:32:24:91:9A:A6:56:A3:64:DC:DF:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d36ac7fe-4c9d-346b-b186-34186998bf60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
40.233.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a4:f9:f7:68:ec:70:fe:18:69:61:c4:71:9b:07:e0:de:23:
f0:b5:31:58:ba:d3:8b:10:06:45:fd:8d:8e:f6:76:0d:ad:78:
56:dc:b6:00:6f:41:73:87:6d:00:9e:ba:fc:25:1e:53:f8:3d:
32:30:6a:8c:d8:6f:a0:b5:22:e8:58:8b:c1:9a:81:b7:29:f4:
91:2e:31:12:96:9d:aa:4f:ac:e2:91:3a:f5:35:40:b7:be:89:
97:b0:98:42:ee:f9:3a:0d:a3:59:91:7f:54:44:3e:09:de:ca:
aa:49:b0:9e:03:62:97:79:09:d5:63:a9:a6:79:02:41:d9:b0:
23:dd:ea:8c:4c:8d:38:ec:78:45:37:7e:2d:4e:d1:5a:1f:ea:
8d:8f:b4:2b:c1:61:a4:15:b9:a5:82:fe:4f:ec:5b:75:e0:07:
63:4d:35:f6:03:4e:be:78:f1:13:c0:ab:07:c5:a1:53:1a:4f:
55:65:cf:72:72:a2:50:2e:34:81:a0:61:ee:2b:55:11:18:95:
d9:28:0d:6a:a9:8d:31:76:9c:9b:1f:dc:7f:45:2f:af:47:55:
e6:f4:25:bd:67:66:3f:46:b6:36:d0:7f:f5:91:65:25:6a:20:
ca:5a:06:09:06:d4:8b:1c:94:79:69:48:37:8d:87:72:9b:70:
54:69:54:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYiKwvxWsSxx6ySAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk
MzJhY2Q5ZTItYjUyYi00MzUwLTliYmQtNjZlZmZmZjA4MzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpauWvi3YsjOLqiYtioIzleQBAeCA31okAml
rwzmW3ExQ9DN5oTVEcMVu7B1w2phy4k84WfZHBFcofsBcG3k9cPSUKEi66M0yPn6
Q6AlYYBoV8yikBc6jvnzEq0FrT0GhG5pAknQ1vKiP9BvtBG2WZh9EPP68j8FSDkd
uv4QJ22TEnQFExIm86/fk5mM/VqE6NovDyMy7yJCJk3AGjCK/+P55cDIkrMYEFHw
w9xd4hH2JKWtdCNtkkGvluLRtlAy/KAS2c+UZU5H49Pyo6jy05YN1GQPJE6IJPsO
6VUqhe6CcVicoUrgFMXj17Hg5QN/bp9TmX0KKOvmU/z5ia1WdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmm5GyBirpspDIkkZqmVqNk3N9CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDM2YWM3ZmUtNGM5ZC0z
NDZiLWIxODYtMzQxODY5OThiZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKOkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2k+fdo7HD+GGlhxHGbB+DeI/C1MVi604sQBkX9jY72dg2teFbctgBv
QXOHbQCeuvwlHlP4PTIwaozYb6C1IuhYi8Gagbcp9JEuMRKWnapPrOKROvU1QLe+
iZewmELu+ToNo1mRf1REPgneyqpJsJ4DYpd5CdVjqaZ5AkHZsCPd6oxMjTjseEU3
fi1O0Vof6o2PtCvBYaQVuaWC/k/sW3XgB2NNNfYDTr548RPAqwfFoVMaT1Vlz3Jy
olAuNIGgYe4rVREYldkoDWqpjTF2nJsf3H9FL69HVeb0Jb1nZj9GtjbQf/WRZSVq
IMpaBgkG1IsclHlpSDeNh3KbcFRpVEU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:30 2026 by rpki-client