
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa
File: 25dcf021-d643-33d2-b7c8-9a3520f1b453.roa (raw, json)
Hash identifier: gK0ItrJ0Zm3HjI3B+pQjhocv0c+y0mYrYwWuNXDoafw=
Subject key identifier: EE:8C:44:A0:51:A0:56:65:97:5A:70:FA:86:E9:F1:00:20:06:2A:18
Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496
Certificate serial: 010D0C9F4328584EB2B1FD004D6FC784BDB97900
Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 40623
IP address blocks: 140.208.0.0/18 maxlen: 18
140.208.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:fd:00:4d:6f:c7:84:bd:b9:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=eb34135c-0313-4a61-91a7-9d7d306eac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:6a:47:42:be:08:95:19:24:78:cf:57:04:
e7:29:27:9b:e5:09:2a:ca:7f:ba:44:13:7d:5f:85:
e2:97:27:6c:86:f3:13:00:9c:51:f5:57:a3:f0:d5:
b7:cb:42:3c:b5:83:41:0c:14:d0:e7:a2:24:ca:3e:
02:44:dc:7b:53:3f:4f:45:a1:62:6e:2f:c8:08:8b:
ad:93:52:a2:a0:c1:d1:1e:eb:6e:f8:f6:88:77:75:
0f:78:9a:a2:16:98:e8:b5:f8:0c:ff:ad:0d:d9:2f:
05:b4:37:06:28:91:78:a0:29:51:42:a9:2b:a2:36:
af:a6:cf:f1:69:a1:64:34:ea:92:7e:1f:44:e9:7e:
e9:30:8a:75:a3:d1:f8:37:64:18:a8:b8:6a:5d:18:
84:ef:21:fb:f8:57:38:c3:17:83:2d:b9:0d:6f:d7:
9c:65:59:43:25:9f:3f:19:b1:3c:ca:07:a9:21:b0:
5b:ef:80:5d:82:01:dc:87:94:cd:19:03:17:a0:52:
aa:3e:0f:b0:3b:62:a5:28:08:a1:01:fd:50:fd:a7:
21:72:d0:77:72:70:07:10:4b:c0:fb:37:4e:89:85:
fb:8a:06:f9:b7:4c:c2:33:3d:62:87:e9:4a:d7:40:
e6:c2:72:62:33:97:80:7b:12:8a:e5:73:b2:00:23:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:44:A0:51:A0:56:65:97:5A:70:FA:86:E9:F1:00:20:06:2A:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl
X509v3 Authority Key Identifier:
keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
sbgp-ipAddrBlock: critical
IPv4:
140.208.0.0/18
140.208.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:40:ba:a3:ab:d0:56:30:3e:f1:13:05:ad:14:39:1c:59:29:
d8:de:75:58:92:14:b5:b9:ab:90:15:21:ca:f4:05:b8:7a:50:
31:57:b4:a4:67:be:57:af:1f:54:aa:3d:f6:a1:20:a3:3a:1a:
ba:bc:3b:6a:3c:6e:d4:cf:9e:bf:0a:fb:80:4d:48:6a:e4:ec:
52:6f:a8:73:33:d1:3b:bb:00:b9:d6:18:0f:5d:27:22:2a:f9:
f8:c4:62:84:24:91:d6:e6:43:d1:a2:6f:59:81:7b:b5:39:c1:
30:9b:ec:cf:18:37:eb:53:59:44:e3:41:ea:81:7d:04:a7:26:
1f:ad:b7:61:fb:94:43:30:e9:84:5a:a7:31:89:bc:99:4e:66:
bc:eb:3c:a6:62:31:6c:3f:6f:24:91:ac:66:5d:7a:77:ac:c2:
ec:8b:3e:79:bc:7c:7f:b0:0b:97:c7:a8:4d:b7:84:df:f4:09:
eb:4a:fd:70:4c:23:5a:f4:cc:3f:8c:2c:fc:4b:be:49:5a:58:
60:34:08:5b:14:08:f9:aa:89:8d:e0:46:e6:3a:fd:37:4d:59:
53:4a:7d:0e:da:20:0d:d8:36:4b:d0:da:21:66:49:9c:f4:e4:
6b:47:5c:5e:58:11:65:32:96:06:e4:df:67:2c:00:af:63:61:
e6:15:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 20:19:57 2026 by rpki-client