
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa
File: 2835e3ce-fa92-3982-99cc-4b7897a5f628.roa (raw, json)
Hash identifier: r1ocVFYDFosJeFkqBySCdBF4vWIkrK3zNDQb2o2z/GE=
Subject key identifier: AE:17:F1:F3:37:AC:E3:98:A0:3C:B4:A2:1F:A0:3D:8B:67:0B:88:99
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584DB4A5858DB2296194BD1649C0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa
Signing time: Sun 03 May 2026 01:00:23 +0000
ROA not before: Sun 03 May 2026 01:00:23 +0000
ROA not after: Sat 01 Aug 2026 01:00:23 +0000
asID: 11290
IP address blocks: 199.36.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b4:a5:85:8d:b2:29:61:94:bd:16:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: May 3 01:00:23 2026 GMT
Not After : Aug 1 01:00:23 2026 GMT
Subject: CN=4cb8cfbf-2609-4074-9235-15e0c30de448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:00:11:c0:56:37:6f:11:12:06:5f:01:6f:
00:d6:71:ab:b5:a2:12:97:bf:fc:51:15:0b:50:cb:
77:3c:cc:c0:a9:8d:54:94:18:29:9b:41:a6:53:45:
95:fb:9b:f2:45:ee:5c:08:72:1d:ac:a7:df:7c:78:
da:b7:78:8e:5c:cd:0c:67:be:78:f6:71:1e:98:ff:
e3:b1:c4:30:60:27:ce:31:66:b1:73:7e:6d:04:94:
6e:d7:b6:a3:bf:af:23:3f:5e:8a:f6:43:ef:ba:57:
70:b8:db:ea:a3:f1:c2:91:65:59:99:fe:e7:2d:15:
53:eb:45:ef:9d:bb:22:74:20:0f:7c:b0:47:ee:42:
6b:1c:29:20:6f:48:ad:4f:23:97:2c:53:94:f4:b0:
02:69:ca:ac:50:a9:8a:5b:4c:d2:f5:60:da:05:b7:
02:41:82:95:fe:e2:ab:ee:c6:d5:07:2c:8a:e4:cf:
8c:99:ce:b0:cc:c2:1e:9d:0d:2c:9e:29:b0:e7:d7:
32:2a:39:02:ae:27:3b:20:6e:33:82:be:a2:82:c0:
1b:42:eb:a6:49:0b:49:85:8e:f4:6a:d5:0b:08:0e:
a6:e0:e0:52:7d:9f:d6:f6:1f:4f:b0:20:00:98:8e:
0f:6c:06:83:56:ef:9e:85:40:05:42:91:16:56:b3:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:17:F1:F3:37:AC:E3:98:A0:3C:B4:A2:1F:A0:3D:8B:67:0B:88:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.36.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:90:36:9b:71:4c:01:d7:0a:f3:c4:8d:72:18:0d:e1:cb:57:
42:d8:75:9c:b5:a0:91:ac:83:f9:20:b8:8e:80:c8:c6:cd:5e:
01:1f:54:da:09:d6:ee:82:00:77:98:62:04:ac:a5:e4:0d:44:
fa:78:ca:7b:b1:4d:9e:9c:f0:28:87:07:96:21:29:57:e1:35:
3b:cb:72:62:fb:72:23:f1:ce:26:ed:0a:df:a8:b4:b9:2f:2d:
b5:d1:a7:4b:1e:e7:b6:b1:06:dd:f8:80:54:36:db:b7:e5:07:
42:ac:70:17:83:1d:28:4b:d5:61:54:38:18:5b:34:ff:cb:0b:
93:3a:5a:ec:96:ff:5f:3d:90:9b:12:41:07:e5:e5:7e:df:5e:
de:76:4f:8b:56:01:a3:4e:f8:fb:a9:72:d0:b7:70:a2:87:c0:
03:c9:ce:ff:5e:0a:f5:5e:61:cc:af:2f:8e:80:18:aa:12:6e:
e3:40:d7:77:74:cf:b9:a5:89:c8:4d:e9:e2:f0:bd:94:6c:ce:
46:38:1b:62:8d:7f:0e:eb:56:47:cb:b6:03:18:ef:f5:0a:74:
b7:8a:12:88:b2:18:e0:bb:eb:1f:c2:bf:c4:69:2c:1a:be:ad:
81:ff:ce:5f:6b:e9:84:b0:9a:72:6c:71:a8:74:b4:5b:4e:44:
fa:ba:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:45 2026 by rpki-client