
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa
File: 21cf8a76-4555-3d30-876a-9f938d02a731.roa (raw, json)
Hash identifier: fqW8CD66ELFDrstnDRxMJanBim6mCGGu4io8Bgfurf0=
Subject key identifier: 01:CA:75:0D:5D:4A:FE:C8:8F:BA:95:EB:D5:C8:E3:8E:BA:AA:CB:AF
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CA5F746D45E2C65D591346380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 140.204.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:46:d4:5e:2c:65:d5:91:34:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=2d439b6f-4976-4f3a-91ee-a45a23e28ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:cc:d2:56:fc:bc:c1:a6:65:5e:cb:bb:fb:
b3:b5:ee:59:7f:7c:f6:bb:16:04:27:45:74:0a:9b:
24:fd:60:9c:9d:38:de:d8:e5:6c:a5:09:ff:03:e4:
ba:7c:33:9c:60:cb:82:05:82:76:4b:8a:49:d7:a5:
8a:15:4f:85:1e:e2:b3:d7:3d:78:0d:ec:1c:c0:ba:
c4:23:ca:f1:a2:f7:06:09:58:b8:f0:8c:79:62:97:
bc:04:2e:10:43:a6:78:54:be:50:6d:65:32:d3:2d:
f5:c0:d4:d6:2b:fd:75:c3:ee:b9:a2:40:21:0a:ba:
89:3f:2c:ee:4d:58:93:76:c9:49:b4:d6:16:00:57:
c5:e0:da:c4:65:45:30:c6:08:a4:cc:20:67:1a:3d:
22:65:75:15:6a:df:88:40:b1:f0:fa:0a:61:e4:37:
58:71:98:82:b4:fd:c0:cd:4b:23:3f:b2:a0:b7:92:
8b:04:11:51:f9:9c:a7:57:3a:9b:5f:f3:fa:ed:af:
de:74:e6:b4:c0:2c:c4:e0:05:fd:6e:d1:5c:ac:3b:
e6:b2:93:88:f6:7f:67:06:12:c8:27:74:c4:53:ba:
b9:74:f5:e2:cf:f3:cd:cb:bf:66:3c:b8:8f:23:31:
e9:64:82:11:5a:5b:0b:bb:31:b3:4c:dd:51:bd:8b:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:75:0D:5D:4A:FE:C8:8F:BA:95:EB:D5:C8:E3:8E:BA:AA:CB:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.204.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:35:b5:b1:20:45:df:8f:0c:fd:f4:a7:3c:88:04:7c:58:ec:
48:1e:43:c2:39:ac:c0:53:19:40:90:46:28:4b:c3:b2:4c:e6:
6c:f9:c8:9d:17:12:ac:33:d7:e9:b6:7c:ae:53:e9:6f:c8:de:
99:20:75:ae:1d:5c:61:ef:37:e5:42:96:5b:b6:11:7a:27:e3:
2d:60:b8:86:d7:e3:f5:2d:bb:84:5a:22:41:f4:ed:26:e9:c7:
6d:7b:fc:08:eb:08:0b:6d:16:fa:53:ba:8a:05:b7:14:5c:13:
e2:a0:46:e3:4d:7c:72:0f:3e:d3:ce:09:d8:16:51:73:3b:c3:
e2:94:42:98:30:ab:d4:be:9d:98:76:26:62:96:83:54:4a:3a:
d5:31:e8:b6:28:70:a7:f8:fa:c1:59:05:a9:37:f5:c9:c3:38:
e9:ac:1e:71:73:ad:b8:01:be:43:f9:9a:bf:b6:5a:89:d4:8c:
6d:e1:fb:fb:8e:55:81:6f:1e:45:e4:26:30:73:0c:7e:e1:f5:
bf:98:b9:d0:12:65:ed:8e:fb:c0:64:7a:c4:c8:c3:6d:b2:3f:
c3:4e:a8:c1:9b:d8:69:08:67:e8:bd:b2:34:f4:8a:1c:70:de:
de:04:d2:63:af:bd:8e:57:a5:db:4b:72:7f:e2:8d:df:58:f0:
1f:fc:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:47 2026 by rpki-client