
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa
File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json)
Hash identifier: l2DHEgo95K/iC6Xlb9Mddg4epKUWbODQ38ezY8TcahM=
Subject key identifier: D6:F2:5A:E3:2E:C1:EE:27:94:52:85:6F:A4:08:85:E9:04:4B:E5:B0
Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823
Certificate serial: 010D0C9F4328584DBBA04125270E46334D33F900
Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 15177
IP address blocks: 199.102.60.0/22 maxlen: 24
199.191.120.0/21 maxlen: 24
208.74.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:41:25:27:0e:46:33:4d:33:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a485a4-e936-4174-8999-571e03203823
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=17b22998-ed62-49f6-bd77-815542ce1168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:3e:32:d1:2d:26:88:69:71:96:f4:9e:28:
a5:1b:6c:da:62:87:4b:5a:35:d3:63:18:b1:6d:1b:
a2:92:1a:01:49:b4:8a:53:20:8c:81:d4:3d:08:60:
57:74:4e:24:0c:da:23:74:0a:05:f9:5a:b7:9c:e1:
be:4d:d4:05:1f:1b:c0:1b:9e:4d:da:f3:89:45:6e:
ad:42:48:cd:58:ef:04:e8:a0:d6:4d:3c:ff:5a:8a:
95:42:3f:55:7a:e6:d4:e9:85:91:be:61:cd:60:58:
1a:b2:7e:02:ec:06:7a:b9:7f:cb:02:41:89:26:cb:
84:8b:78:06:2b:82:2e:3e:4a:0e:2f:9a:6b:43:c8:
0b:9e:a6:99:12:f1:f3:74:20:0e:35:fa:14:f9:79:
1b:11:79:9d:d6:77:22:51:4e:10:3c:36:fc:ee:2e:
7a:fb:5f:32:9d:6f:4f:54:1e:7d:bf:4c:be:f5:43:
f5:d3:b5:01:2d:e0:0f:cd:f8:df:72:94:57:bd:bb:
86:ad:3c:a3:30:99:8a:52:f7:21:93:b7:bd:1a:de:
af:0f:67:ee:f7:f5:7a:76:00:48:67:39:cf:48:e0:
a3:f7:dc:e3:5e:fd:e6:bc:ea:4d:23:8d:1c:7c:6b:
8f:6d:ef:da:f7:4a:cf:7e:03:10:0d:75:6b:fd:97:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:5A:E3:2E:C1:EE:27:94:52:85:6F:A4:08:85:E9:04:4B:E5:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl
X509v3 Authority Key Identifier:
keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer
sbgp-ipAddrBlock: critical
IPv4:
199.102.60.0/22
199.191.120.0/21
208.74.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a6:d0:d8:a2:7e:ad:eb:28:e4:61:9a:16:99:e5:7c:de:2b:
7f:d2:5c:2a:d2:cd:8c:d8:be:f5:87:de:34:53:7e:c2:20:09:
31:62:dc:3a:72:c1:97:e4:10:07:5d:18:32:26:cc:df:c9:b7:
f5:19:f3:e4:10:7c:e1:77:90:18:bf:45:40:56:9c:74:84:3f:
6b:e1:ff:68:ae:ff:5a:72:f5:2a:17:9e:be:2e:81:05:1c:d5:
35:e3:5b:4e:f8:18:d1:0f:df:74:a1:c9:95:a8:cf:9b:2e:28:
97:58:a4:72:7d:b2:2e:05:4f:8d:4f:19:1a:7f:75:83:4a:c5:
34:43:4e:09:cd:98:fe:51:a8:87:45:34:02:ce:fe:ab:b1:86:
60:9a:fa:9a:64:58:77:73:6c:8c:51:2c:6a:b8:98:16:77:c9:
50:64:ba:59:c4:58:75:c0:1b:f4:95:10:9a:74:fd:e9:b9:0b:
5d:93:e7:00:8b:e6:3c:cc:6e:79:f8:b4:a0:26:78:a2:ee:73:
4f:65:cf:44:e4:ff:9a:da:59:ab:20:05:0f:24:f7:19:0e:62:
77:72:2e:ee:b1:18:69:ed:f6:76:37:4b:26:1d:31:23:e8:35:
c9:77:b4:29:d1:27:f1:06:c2:6d:84:9c:b6:8d:af:69:77:ca:
d3:f5:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:21:55 2026 by rpki-client