
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/484989d2-183b-3b0e-9d7d-b3a50f030c09.roa
File: 484989d2-183b-3b0e-9d7d-b3a50f030c09.roa (raw, json)
Hash identifier: ByIycN0H0VEKENy+JatUf5GuI00dFgxILXnrE2WU7OI=
Subject key identifier: A7:99:C7:0F:A6:29:75:46:A4:CF:C5:EE:E3:5B:51:FE:00:C8:12:28
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5E65DFAC97B287DB2EDB40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/484989d2-183b-3b0e-9d7d-b3a50f030c09.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 140.91.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:65:df:ac:97:b2:87:db:2e:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=6a8f7526-320d-4066-86cb-5779dea63127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:fa:2d:5e:32:22:ea:eb:eb:93:24:63:7b:
aa:6e:65:3a:8f:bf:17:7a:d2:84:2f:13:14:6d:cb:
0e:36:9f:1b:c8:c2:2b:8f:2c:8a:b4:5a:f8:91:65:
a5:60:cd:cb:4c:2a:7d:9a:52:e1:f0:0d:d0:f1:6f:
5b:03:cd:83:32:1e:b5:73:b4:bb:49:a4:87:75:ca:
25:1a:2e:58:7c:0d:d3:6e:2e:31:a5:54:43:9f:26:
8c:51:df:8b:e5:81:df:22:2d:25:57:7f:28:c3:b8:
f2:96:e1:1c:c7:98:04:1d:16:61:e0:98:87:58:d2:
5c:3f:17:75:ce:0e:a4:b7:d3:35:b3:e0:9e:c1:69:
0d:c1:04:4b:ad:62:ad:04:67:19:13:52:72:36:44:
05:8e:b0:36:72:fd:9f:48:16:20:ef:80:02:6b:39:
01:09:3a:41:92:f3:d3:8d:01:76:dc:f7:7e:7d:92:
e0:42:c9:ad:4b:3a:77:9e:31:ff:8f:22:00:a2:d9:
f9:d0:20:a7:79:69:47:b1:82:b2:55:74:54:b3:95:
f7:9c:ef:9e:a7:61:f9:6f:39:76:c0:80:3f:86:3b:
32:70:8f:8b:36:8c:cf:0b:b1:9b:84:98:60:9d:2d:
0e:cc:09:b7:0b:08:c7:aa:ab:69:5d:c2:04:7a:30:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:C7:0F:A6:29:75:46:A4:CF:C5:EE:E3:5B:51:FE:00:C8:12:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/484989d2-183b-3b0e-9d7d-b3a50f030c09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:5b:3c:f8:1a:91:12:f9:c2:38:fe:89:8d:e7:a7:9a:91:95:
d4:e0:da:70:63:ea:cf:99:e6:7f:d7:57:e7:21:27:01:1c:82:
13:22:ca:f3:45:d3:2c:51:f9:8c:67:96:bd:db:62:cd:96:d5:
eb:78:63:c1:3f:b6:cc:b5:a4:8d:45:2b:83:00:e7:52:2e:2e:
51:26:12:77:ba:e3:f1:a8:fc:98:f0:2d:23:c0:f9:52:c2:41:
73:74:e8:cc:d1:b7:b6:bf:68:7d:8e:f8:86:ef:a8:fe:38:8d:
c3:d2:a2:87:ea:8d:19:96:49:45:95:68:dd:94:cf:23:28:2b:
5c:0a:cc:ef:fb:95:2a:b4:45:0b:68:6a:33:bc:87:19:2a:d5:
84:b7:95:32:b7:71:84:3b:c7:5b:06:0c:09:17:ee:44:53:6e:
f6:5e:a8:14:07:c3:4a:bb:ab:4e:e0:18:82:b9:9f:60:04:6d:
03:7f:3f:fb:79:a4:e2:9c:f3:9a:0a:54:83:6e:0c:57:78:21:
09:01:de:1b:b6:fd:14:f4:a2:02:aa:bd:17:54:5d:75:44:ec:
37:bd:2b:b0:23:40:15:fa:25:59:57:7a:8f:7e:e6:0c:a9:9b:
ec:7b:a7:40:7a:dd:7d:65:25:3b:b8:3f:39:00:a9:f0:c2:7d:
f6:39:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:32 2026 by rpki-client