
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa
File: 372b639d-5c46-306f-9666-b8d03b1e82dc.roa (raw, json)
Hash identifier: 2HWJtEWj8Upiauc1EPJ/XCXHPbOSJUK2oyNeTImhzow=
Subject key identifier: 9F:DE:E7:38:18:2E:0D:16:90:68:B8:D5:1B:64:A0:7A:13:6A:EB:AC
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584E94EA5CF584382A307C8918C8
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa
Signing time: Wed 22 Jul 2026 09:00:11 +0000
ROA not before: Wed 22 Jul 2026 09:00:11 +0000
ROA not after: Tue 20 Oct 2026 09:00:11 +0000
asID: 11290
IP address blocks: 104.244.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:94:ea:5c:f5:84:38:2a:30:7c:89:18:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Jul 22 09:00:11 2026 GMT
Not After : Oct 20 09:00:11 2026 GMT
Subject: CN=dced0541-9e90-4801-9f93-1fe5d2522dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:e9:ac:1d:e4:ab:9d:08:5f:d3:22:41:c3:
92:8b:0c:4f:79:3d:e6:43:14:48:71:01:99:49:01:
69:4b:12:0b:59:c4:94:ae:fc:fa:77:bb:09:e2:be:
d4:92:a5:94:02:08:34:dd:22:dc:46:0c:30:cd:d0:
b8:08:a5:1f:93:97:ad:8f:b9:45:10:18:99:f6:b3:
20:d5:bc:6b:38:d6:04:61:7f:bb:d0:67:98:22:d9:
f2:ba:8c:e0:e6:eb:b4:00:97:29:72:06:fe:b6:1e:
b4:98:58:19:47:01:86:75:29:df:d6:a8:0f:43:6c:
78:57:6c:1b:9b:4b:c8:0d:f0:50:35:fb:ce:af:55:
2a:cc:f2:60:cc:59:0f:db:a7:71:5c:cf:cf:13:aa:
20:d2:7a:76:b3:d0:8c:34:0c:9c:38:f6:ad:a0:10:
b4:6d:09:78:36:f8:1b:90:30:13:24:61:65:94:ef:
84:17:ff:f3:80:21:87:e6:12:fd:07:74:b2:2b:57:
13:d4:0e:97:5c:fc:a3:27:b9:fa:e5:da:9e:93:f5:
3d:6e:aa:de:16:b0:eb:97:ae:36:17:0a:cc:6e:5d:
f3:ac:88:b7:0c:f3:c2:c6:8f:00:14:91:f5:89:57:
9d:02:72:46:7a:9f:59:c9:f2:22:4a:c8:f8:31:91:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:E7:38:18:2E:0D:16:90:68:B8:D5:1B:64:A0:7A:13:6A:EB:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:1a:e1:88:07:17:24:43:e2:cf:01:32:bb:49:b9:f4:7d:10:
5b:62:65:60:31:0d:64:bd:57:8b:35:34:84:06:96:e1:80:c6:
6e:d5:4c:34:fe:0d:ef:e5:e2:56:65:af:ea:b9:d2:37:03:29:
2c:c6:ba:a0:2e:60:af:81:bb:d4:34:fc:9e:2d:41:68:58:15:
65:7e:28:7a:98:64:ff:eb:58:97:e5:81:5d:9d:25:a0:0c:a8:
77:fc:ea:2c:1e:a5:8e:f2:31:cd:98:37:73:1e:5d:50:25:00:
d1:6d:5b:c7:9b:dd:a0:9e:5e:65:4b:c4:bd:52:95:66:50:c0:
94:75:88:dd:af:81:25:39:e5:e6:1f:48:0f:73:20:45:fe:9b:
c1:3c:fc:87:03:77:98:76:41:74:69:41:a3:58:e7:27:04:7c:
e4:6f:8d:4d:77:54:b7:fc:ce:ca:99:ba:bc:19:62:73:86:ca:
d1:26:38:f8:06:98:49:81:6f:70:dc:96:0a:0e:b7:bb:d5:c1:
64:f7:45:83:7a:9e:cc:5c:44:bd:35:06:23:ab:ec:bd:11:c3:
09:05:a4:1e:d8:5e:49:8f:3a:b9:0b:94:8f:ab:fb:00:9d:d5:
8d:43:88:70:4c:d7:59:9b:cf:18:d6:46:f9:5b:c4:76:b2:07:
c6:55:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:07 2026 by rpki-client