
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa
File: 42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa (raw, json)
Hash identifier: 5sP3KYwwSHkobXRVFYXPpt75qNUjLpkyBzX8LB3tTds=
Subject key identifier: EB:AB:F0:0F:64:6B:C8:67:7A:98:36:0A:82:E5:3C:30:26:C4:CD:D3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D7CCFC66A92B56B5E53025200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa
Signing time: Mon 13 Apr 2026 01:00:24 +0000
ROA not before: Mon 13 Apr 2026 01:00:24 +0000
ROA not after: Sun 12 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 140.204.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7c:cf:c6:6a:92:b5:6b:5e:53:02:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 13 01:00:24 2026 GMT
Not After : Jul 12 01:00:24 2026 GMT
Subject: CN=a727855e-5a98-4fdd-b339-79c5218fb040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:6a:bd:9d:8d:91:c2:cd:e0:55:4b:28:64:
8e:96:c9:5e:67:de:4a:1f:4b:81:9e:39:b0:5a:46:
12:70:22:fd:f1:da:09:5c:50:ea:e2:8c:d9:dc:df:
d9:d4:45:0a:70:bf:dd:04:17:8b:f4:4e:bd:58:e4:
47:fe:c6:10:d9:01:7b:d1:d0:d3:65:d5:78:d9:e0:
af:b0:1f:2e:88:93:08:04:24:18:fa:33:15:fe:30:
d5:e1:2e:18:7a:e3:ef:61:9d:7c:15:7f:db:7b:b5:
24:bc:a2:03:56:c5:ed:cb:d1:3f:44:f7:ee:2b:e1:
41:38:5e:af:32:9c:37:cd:79:dd:69:40:a7:19:97:
91:92:69:7e:17:c6:12:85:3c:71:ea:80:9b:cb:91:
79:09:a6:a5:db:9c:d2:2b:4e:5c:5e:d4:d9:89:bb:
7a:7e:e8:34:05:7c:c2:85:2a:a6:cc:52:ad:34:05:
80:ea:26:a0:17:bb:0c:60:d9:85:08:0d:3c:2e:95:
40:36:b1:5d:bf:95:14:02:8c:f3:b8:7c:ce:ee:cb:
d9:ac:3e:2b:43:e0:fb:55:3d:0f:85:36:3d:66:22:
18:96:cc:a4:16:74:8d:d4:50:b2:90:49:41:30:5e:
81:d0:df:1e:7c:8f:bd:c9:ab:99:52:37:69:e2:42:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AB:F0:0F:64:6B:C8:67:7A:98:36:0A:82:E5:3C:30:26:C4:CD:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.204.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:15:96:92:fd:d7:a4:13:39:ec:df:42:dc:22:59:d0:b7:95:
dd:2d:f2:d4:46:c0:d8:56:25:63:78:6a:6d:4d:73:8a:0b:18:
99:68:ca:6d:ea:53:5b:ca:49:0d:5a:f7:e7:49:1f:7c:6a:3e:
27:be:e5:44:30:d1:58:4c:2c:71:95:77:70:eb:74:c8:0a:d0:
b6:17:65:bf:20:8f:fd:bd:46:db:c6:56:c9:46:07:f5:ff:f2:
72:32:d3:72:d6:c1:b5:92:0f:61:18:17:34:94:73:bf:80:22:
59:fb:d7:aa:68:bb:25:71:37:49:77:ad:64:1e:66:af:e6:52:
12:f8:07:76:20:7d:ad:9e:e7:75:1d:e4:a7:2a:d8:81:9d:42:
b7:86:52:ba:21:36:82:f6:8c:c2:90:43:62:66:02:0c:70:77:
80:0b:aa:96:66:14:55:10:90:3f:aa:b1:bd:66:34:e7:2c:e5:
6f:d9:43:e5:6b:46:b1:c1:85:60:41:07:7a:7d:81:82:05:99:
9f:85:3c:71:cc:89:22:6f:0b:cc:95:da:39:27:d8:67:cc:c9:
18:14:4d:1a:cd:49:98:58:df:0c:18:28:a7:d6:74:bb:58:07:
58:3e:96:9e:b5:c3:cf:d0:17:6b:a2:21:96:e6:f1:0f:a2:38:
09:2b:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:36:12 2026 by rpki-client