
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28f57591-b561-313b-a2d8-a6757d672b03.roa
File: 28f57591-b561-313b-a2d8-a6757d672b03.roa (raw, json)
Hash identifier: dK1qL3lvYkryv53N0CnVYeTDSptJezUQVzaxaoVZtUg=
Subject key identifier: CA:A0:FF:7E:64:1E:A2:26:35:52:C1:13:D5:E6:85:6B:D2:3A:F4:7E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5EC760BD82236DF1BA2600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28f57591-b561-313b-a2d8-a6757d672b03.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 140.91.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:c7:60:bd:82:23:6d:f1:ba:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b7053c12-bb9c-46bf-9e55-455e584def23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:b2:c6:a4:47:7c:bf:32:ab:fe:5e:38:57:
7b:e5:a8:b7:3e:2a:ac:89:46:2d:47:c2:19:fb:95:
c4:13:9f:ca:6e:4e:bd:98:53:cf:4c:63:95:4a:03:
69:d9:e2:d8:5b:26:96:de:49:42:4f:a1:b1:c1:6d:
34:d7:33:04:fa:6c:ef:18:0e:95:b1:77:e4:dc:e6:
ee:ab:82:46:c8:9e:ad:a2:81:b1:8e:f9:83:c8:01:
70:f6:a2:5a:0b:ab:79:7a:c8:1b:1c:81:02:b6:74:
10:22:3e:38:55:79:3d:cd:ea:d2:69:bc:4d:47:d4:
9f:7b:da:c8:2a:61:47:5b:0b:98:60:b1:08:b3:7b:
c8:0d:14:85:50:24:58:50:e9:60:d4:1d:52:22:0b:
b9:3b:75:ea:ba:ed:e8:ec:34:e7:55:71:a8:ee:a9:
3d:d9:2f:52:d7:1d:13:19:e4:15:c4:28:e9:2f:2e:
e8:eb:4c:16:25:5f:d7:b2:1a:37:cd:40:e7:6e:56:
36:02:b9:14:ac:22:13:1c:89:e9:b0:be:81:31:f9:
98:57:cb:c9:66:c6:63:11:70:df:ae:2e:97:e1:ef:
9c:fc:c4:ce:c5:16:43:cf:0f:49:2f:1d:f2:ff:b6:
a2:55:6e:47:c5:09:1d:88:f7:22:3d:16:b7:74:58:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:FF:7E:64:1E:A2:26:35:52:C1:13:D5:E6:85:6B:D2:3A:F4:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28f57591-b561-313b-a2d8-a6757d672b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:60:d5:e6:10:06:fd:7e:c0:88:79:79:e1:5b:02:d5:78:07:
5f:66:d0:05:e0:f4:ed:d6:a5:b0:9a:02:a7:0b:cb:d8:5e:dd:
3d:11:f4:7c:cf:79:84:e0:ba:b0:32:1b:23:53:2c:fa:04:41:
d9:af:82:a5:68:5d:72:09:57:12:01:1b:8b:f0:ff:ed:64:65:
1f:5c:0d:c1:6f:42:d5:f2:20:a4:50:a7:21:6e:e0:72:c7:63:
67:6f:4a:be:c8:26:40:87:b2:81:31:97:f2:61:01:53:4a:04:
16:29:97:2a:bc:3a:6c:9c:66:dc:4a:55:c2:89:63:b7:c3:f4:
95:61:2c:50:80:b8:68:b3:25:29:66:01:07:53:7e:d9:c2:ac:
d3:86:0f:04:f3:02:1f:53:82:88:4e:85:8e:64:1f:25:aa:7a:
d2:ad:9f:a2:de:37:65:3f:f0:b1:1d:61:1e:0d:2b:66:54:b5:
4a:d6:eb:cd:95:87:68:e8:cb:8c:7e:7c:ef:61:c7:8b:10:3c:
47:22:96:f9:e0:50:ae:2d:1c:62:29:df:e1:d9:8c:01:38:32:
00:ee:2c:3a:b4:aa:75:7e:2f:ae:3e:2f:88:fd:af:3d:98:aa:
98:a7:cb:96:89:e5:d3:92:1f:ef:9e:e8:43:4d:4b:fa:1c:0e:
63:5c:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:36 2026 by rpki-client