
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb2f7395-412d-3902-9022-8fed5a5aabf1.roa
File: bb2f7395-412d-3902-9022-8fed5a5aabf1.roa (raw, json)
Hash identifier: 38iL6vaR427lWCtHKL7f8aCQ5XgjcA6+myPtfzx/mA0=
Subject key identifier: D5:33:2B:1D:F6:BD:EB:C7:EF:33:04:32:99:33:65:7E:C8:03:71:A2
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CACF1D50639D101D2FA241380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb2f7395-412d-3902-9022-8fed5a5aabf1.roa
Signing time: Wed 28 Jan 2026 14:00:36 +0000
ROA not before: Wed 28 Jan 2026 14:00:36 +0000
ROA not after: Tue 28 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 140.91.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ac:f1:d5:06:39:d1:01:d2:fa:24:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 28 14:00:36 2026 GMT
Not After : Apr 28 13:00:36 2026 GMT
Subject: CN=07aeba05-4fda-4095-8610-d4ed5e854668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:ba:0e:20:d9:a7:68:eb:c6:96:d8:7b:3c:
b9:a7:3e:07:9b:bc:86:53:c5:a4:21:88:a3:ab:b4:
d6:e0:0a:89:46:e2:56:87:b8:6c:fa:d8:c2:02:ba:
3c:1a:9e:d4:d9:c1:60:b7:44:0c:6b:47:fa:30:f1:
3b:1a:b3:f6:ed:6f:e7:62:ca:d1:87:17:c1:3b:ef:
d3:37:c0:95:35:78:7a:6e:4f:87:8a:6b:b9:10:00:
ad:20:e5:65:37:ca:1d:01:44:02:bf:ff:8d:ac:c6:
08:be:d2:9f:80:ca:d1:6f:a5:19:ca:dc:3d:45:48:
df:0c:b6:20:6a:15:c0:da:a5:15:1d:f6:bb:35:2e:
97:a2:f5:7f:e5:fc:44:b7:66:9c:88:8d:84:73:27:
cd:5b:da:c3:51:77:64:2b:12:af:c2:dd:f8:62:6c:
99:fe:83:4c:cf:a6:6c:86:bc:9e:4b:be:e9:94:50:
a6:79:4d:42:7c:95:ea:c6:89:d8:b6:ec:4b:2f:3a:
ce:7a:20:7e:fe:c0:42:32:f9:2d:84:ab:16:f4:ee:
6d:c2:36:c2:d5:e7:4d:98:2c:d4:62:e1:d7:de:d7:
d3:6f:b6:5e:ed:3e:7d:f2:05:a7:0d:5f:1c:67:48:
b2:9a:8c:26:9e:e2:e1:8b:13:8e:ae:69:20:63:ba:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:2B:1D:F6:BD:EB:C7:EF:33:04:32:99:33:65:7E:C8:03:71:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb2f7395-412d-3902-9022-8fed5a5aabf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:dc:83:81:91:34:f8:ad:bc:50:a2:dd:e0:b6:65:ea:23:50:
00:c6:44:16:6f:6b:fb:75:7d:e1:3e:e7:68:41:8a:02:df:2e:
85:28:66:14:47:0c:67:55:e8:cd:9e:dd:bd:53:e2:30:0a:8b:
c7:94:05:2f:be:48:ad:59:e1:e4:a4:ba:c0:66:b0:f6:a5:88:
be:5a:e2:a4:36:14:de:e9:39:1b:79:1c:04:e6:24:89:01:d6:
d6:7b:ec:e9:35:76:a8:f2:ba:99:97:58:3c:d5:eb:cc:16:28:
d4:9f:00:01:90:91:81:f0:e7:6a:57:ec:58:c4:0f:21:53:d4:
6c:97:44:e4:4a:4d:93:15:c7:ae:a2:e3:f9:d2:63:1f:45:fa:
31:ee:f3:44:bd:74:20:7f:6c:f1:86:a4:de:75:cb:13:92:ff:
2c:8c:0d:01:e6:61:f0:f4:60:96:f5:19:0d:8c:8d:bc:4a:8c:
c4:79:c6:7d:16:80:69:55:99:98:2d:e0:fe:bf:f8:53:00:aa:
e1:5d:9f:cc:0a:92:a6:25:d0:39:29:c8:d9:44:47:60:14:f7:
ed:d9:72:c9:77:9b:e2:de:e8:a1:ff:23:e7:fa:71:3a:03:f2:
d7:8f:33:87:0e:36:0a:53:dc:0f:98:71:fb:7b:36:cf:e3:8e:
c4:e3:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 05:04:49 2026 by rpki-client