
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d36ac7fe-4c9d-346b-b186-34186998bf60.roa
File: d36ac7fe-4c9d-346b-b186-34186998bf60.roa (raw, json)
Hash identifier: 3d3DWzVHthauRSirrpOj+JeaN3VEnjCmXhonRqnv8ho=
Subject key identifier: 91:F4:35:26:59:7D:33:53:80:C6:1D:37:D7:19:61:1D:AD:9F:7B:B8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584DC400606CAAAD0C05D46BACC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d36ac7fe-4c9d-346b-b186-34186998bf60.roa
Signing time: Fri 08 May 2026 13:00:30 +0000
ROA not before: Fri 08 May 2026 13:00:30 +0000
ROA not after: Thu 06 Aug 2026 13:00:30 +0000
asID: 54253
IP address blocks: 40.233.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c4:00:60:6c:aa:ad:0c:05:d4:6b:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: May 8 13:00:30 2026 GMT
Not After : Aug 6 13:00:30 2026 GMT
Subject: CN=eb120b18-ddc6-4c32-84a7-d9cde77c1bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:53:d2:b0:31:cd:78:46:5e:71:8c:84:1a:
bf:ad:02:f1:a3:af:0b:9f:1c:fe:a0:d4:63:63:10:
46:d0:5a:54:29:ec:1d:77:31:57:07:0c:e5:1a:c0:
72:79:0e:ff:ef:ec:4b:ee:f3:21:76:fe:fa:fc:4c:
ab:1b:14:6a:1e:44:3b:85:87:57:05:d0:51:9f:6f:
e9:da:d1:e2:b3:73:c1:88:18:8f:90:f2:66:c9:07:
93:f4:77:a0:ae:fe:8c:1d:4d:56:af:d1:9b:b2:0b:
ca:98:14:4c:09:7d:15:03:51:53:2f:87:57:14:f6:
ce:c0:0e:81:2a:bc:43:73:2d:6e:4d:b5:e0:dc:88:
4e:0a:43:71:e0:2a:52:15:f1:d2:05:9b:81:3b:d7:
e6:85:83:66:a4:33:a0:7f:1e:63:99:1b:a0:ed:39:
c4:84:5c:2e:a2:b0:6c:97:4b:c6:b2:e1:ea:a1:1b:
d1:03:e4:ef:88:09:de:69:d2:d5:10:09:ae:30:7d:
09:a9:9c:49:f2:85:07:fe:77:d3:8f:f5:27:f5:a4:
73:4a:94:04:7f:42:83:65:d6:15:cc:b5:17:48:47:
76:a4:02:79:ff:c3:12:9f:12:ef:78:56:11:b1:b8:
b5:54:de:05:86:1c:75:2e:64:7f:c4:0a:97:2d:81:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:35:26:59:7D:33:53:80:C6:1D:37:D7:19:61:1D:AD:9F:7B:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d36ac7fe-4c9d-346b-b186-34186998bf60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
40.233.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:36:8c:ec:2e:d4:2f:ff:d0:8d:f5:6a:1a:3d:ce:82:2d:21:
ae:81:1c:4b:25:e4:4e:e0:a4:f9:03:9c:b1:35:f1:28:d8:f7:
86:58:b4:89:8b:6a:27:f5:db:5d:5a:93:94:29:46:b7:ca:62:
20:f2:02:aa:1d:d0:94:0d:bd:e9:f8:3f:19:20:32:f8:80:a2:
1c:3a:aa:84:d8:18:37:b9:ef:3f:62:9c:33:de:40:56:bd:5f:
cc:ab:ee:80:59:c5:02:39:f8:19:7b:c7:f5:79:5a:05:ce:bf:
e0:d4:34:e0:0b:e9:5f:84:34:42:c9:3a:0a:99:c4:6f:24:5c:
c8:20:87:a9:29:62:60:6c:19:ae:47:f0:0f:0f:73:24:29:e3:
49:86:d9:81:dc:c5:98:8e:cb:f7:81:f1:f3:6d:9a:49:c8:40:
f9:4b:dd:78:41:7a:9d:8c:06:c0:a3:55:47:11:9e:1d:9d:92:
d6:19:e2:f8:a8:74:8b:0c:cd:23:08:3e:6b:cf:32:50:77:0b:
32:76:71:57:09:ce:40:f1:8c:72:ea:b5:89:66:ee:3d:23:ee:
8a:9e:b0:bd:33:d5:47:b1:69:e0:99:88:6b:c8:9d:30:35:44:
63:37:1d:d7:86:72:f7:1a:04:13:38:ba:b7:28:3b:81:22:e9:
e3:4d:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:06 2026 by rpki-client