
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa
File: 1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa (raw, json)
Hash identifier: 0bMdbb3CqTpLd1c5ESpDHZGTztiJMj07frJE9weBusc=
Subject key identifier: 3C:AD:88:B9:D0:13:EB:E5:8A:C6:62:22:CE:40:79:13:EC:7C:16:EC
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA271417AF043E5841A06A40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 140.238.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:14:17:af:04:3e:58:41:a0:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=1b933d86-8894-4c32-bf25-a0de4c6c0708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:1f:47:89:33:ed:77:93:f3:55:92:7a:45:
b7:51:af:af:86:d7:55:92:25:be:d1:05:3c:04:96:
14:1a:56:99:a4:cc:8d:1e:e5:52:85:da:c8:fc:53:
a7:e2:56:9b:68:03:fc:3b:b0:b6:db:ff:36:15:8b:
2b:4b:67:2a:8c:08:8e:eb:93:10:64:dc:41:49:28:
c6:64:21:d4:52:2b:05:24:6c:b2:31:7d:9f:de:39:
54:3a:fb:90:ea:51:56:93:7c:6b:fd:2a:ca:3c:b0:
d0:05:2d:c2:57:ca:98:af:0c:b2:2d:34:5f:8a:76:
a2:b2:bf:db:c2:76:38:8d:2d:5e:0b:22:aa:9e:fc:
28:3c:a8:c3:55:fa:8a:5e:dd:ce:dd:12:94:40:0f:
5e:4f:ff:38:ce:f0:19:b6:cf:c9:c1:6f:5c:2f:48:
1f:4a:6c:11:d0:2b:1d:67:5e:80:38:43:fc:51:1c:
f7:b0:01:eb:d1:18:cf:8b:dc:a0:e9:99:8e:67:d9:
a0:2c:89:80:04:4d:a3:a2:cd:76:cf:fa:5a:7f:99:
61:32:dc:76:41:5b:f1:31:29:a2:c3:39:7a:36:95:
93:9f:af:fd:10:fa:6b:0f:0a:2c:53:ef:27:19:84:
cf:21:b6:a1:91:ca:af:fb:ab:1c:64:10:31:3d:82:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:88:B9:D0:13:EB:E5:8A:C6:62:22:CE:40:79:13:EC:7C:16:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.238.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:d7:ac:ce:c5:7a:c1:fa:dc:11:67:5b:53:0a:98:14:f1:6c:
0e:44:19:ae:e2:98:9a:ed:ee:00:03:3c:06:85:34:28:1c:26:
bb:f6:b8:0a:53:f4:fe:86:cc:8e:dd:73:49:ab:4c:6b:fb:47:
c4:28:f2:13:0c:b6:3e:88:a4:eb:4d:2c:75:ca:28:c5:af:2c:
26:f4:f6:be:26:6a:4b:9c:6f:ad:e1:e3:3a:16:1e:f4:c6:df:
4b:a8:42:35:8f:c9:37:ee:2a:56:a3:88:64:22:11:7a:34:00:
0e:40:a3:ea:a2:17:c5:71:88:ae:84:ee:d4:44:75:4d:b1:57:
b4:13:ad:a4:34:98:6d:23:65:16:7f:87:33:a0:07:75:8f:99:
03:34:ae:91:70:1f:dd:c8:26:9f:0e:bd:93:0c:a5:fe:57:39:
b0:da:aa:bf:84:d4:8d:99:e1:5d:66:c3:97:61:45:5d:36:6b:
d1:fd:13:02:a8:50:81:1a:7d:c5:29:f5:17:4e:c1:81:7b:80:
5b:95:51:30:8b:82:cf:f0:c2:fd:f4:c6:23:23:85:9a:12:e3:
3a:87:57:97:ee:17:d2:17:14:8a:6e:05:17:04:aa:10:9c:b3:
f7:73:d1:37:99:87:06:7f:9d:f2:01:7d:0b:5f:1d:32:03:60:
27:8b:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:24 2026 by rpki-client