
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa
File: 400e6027-1418-38f3-8d41-13b0faa52044.roa (raw, json)
Hash identifier: BZYDVRQ+s103cwcqJsUE7CbMwjrnMd62QewK7Tw+uwM=
Subject key identifier: 4A:BF:94:FF:8E:8A:F2:4F:65:FA:30:5A:BD:87:C4:A1:C5:5D:32:DE
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F4328584DE15074F8A1CB0F2C8AEE1700
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa
Signing time: Tue 19 May 2026 01:00:24 +0000
ROA not before: Tue 19 May 2026 01:00:24 +0000
ROA not after: Mon 17 Aug 2026 01:00:24 +0000
asID: 149428
IP address blocks: 168.91.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e1:50:74:f8:a1:cb:0f:2c:8a:ee:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: May 19 01:00:24 2026 GMT
Not After : Aug 17 01:00:24 2026 GMT
Subject: CN=c3684fb9-9dc2-4876-8d38-0adf5958b865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:82:9f:92:9f:09:ff:76:b5:ee:56:00:86:
50:26:8a:c2:81:cc:89:67:37:ad:55:70:19:2b:c7:
cf:01:4a:42:5a:92:38:d6:50:8c:83:04:d3:86:af:
bb:fe:df:e6:b5:7c:d5:78:7f:71:ab:96:12:43:1c:
87:cf:b4:20:ce:4d:68:89:39:c9:8a:e8:df:d1:c5:
25:76:83:96:8b:60:ac:89:b0:7f:e8:83:a7:e1:6f:
85:21:65:b2:3c:4f:d2:fa:e0:61:e8:90:27:e4:87:
28:36:2e:e1:b0:3b:a1:ce:69:c3:b8:33:fd:89:09:
fa:6c:ca:0c:0b:4d:8b:bd:ef:70:b8:32:a8:9f:f1:
c2:c8:e7:e7:64:0a:0e:f2:c6:65:37:fb:04:98:ce:
2c:b3:3e:56:79:3d:e0:f9:b9:07:21:3e:c3:36:4f:
2d:89:5f:0d:99:ef:6c:47:18:8f:91:f4:cb:4f:62:
59:b7:80:2d:ed:7c:55:1a:22:b4:54:e0:59:2d:63:
be:22:8d:83:5a:f6:5d:b1:82:ac:b1:56:bf:dc:a3:
63:72:4f:c9:7f:57:28:6f:99:95:35:f7:d1:4a:f7:
29:73:18:eb:63:63:16:8b:ba:7f:18:77:bb:1d:50:
88:fa:a5:4f:78:0c:2b:c5:14:ab:9a:ea:e0:eb:c5:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:94:FF:8E:8A:F2:4F:65:FA:30:5A:BD:87:C4:A1:C5:5D:32:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f7:0e:ec:f9:31:02:d4:36:9b:35:53:55:c1:d2:0c:f4:07:
89:7f:67:6c:67:f7:da:2e:6c:34:9c:d7:2d:bb:7f:1e:23:ea:
19:c5:47:f3:d9:1b:31:56:90:6f:53:77:82:15:d8:f2:00:44:
cc:de:51:5f:77:a5:f4:2c:a1:08:f6:e7:c4:51:e5:ca:1a:05:
15:15:73:09:24:df:88:cb:fa:33:00:2c:97:36:f5:86:3d:19:
45:8e:d7:74:72:4e:3b:f3:b3:dd:bb:45:10:3b:32:a4:3a:c7:
2c:e0:29:df:f0:61:5c:cf:c0:b9:d0:2c:81:23:37:53:1b:21:
58:5e:09:2e:9b:c7:0a:13:24:9f:24:42:f0:cc:f5:76:93:33:
54:57:d3:ef:7b:12:2a:48:57:46:f7:c3:c1:36:f8:e0:e0:a2:
ba:2a:27:57:0e:e5:28:6c:20:a4:75:c7:73:70:7e:d7:ec:7e:
e2:97:ee:6e:ad:26:74:d8:1a:c6:2b:21:ac:09:04:a8:84:8f:
9d:cc:e5:95:85:b8:50:ff:85:22:92:92:17:7a:84:0e:2b:94:
71:ac:84:60:8d:f3:c4:3c:b2:ba:66:4b:df:ee:60:67:b0:b9:
12:28:64:b3:c2:8c:d5:d3:16:b6:fd:d4:4e:d3:f4:70:1f:ea:
a8:22:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:33:44 2026 by rpki-client