
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa
File: bb5c8181-de03-3082-935b-bbbeac181c59.roa (raw, json)
Hash identifier: nnFQRUlgUpmXHuCwcah7Go2224CMW0Nqbt6oIhjg104=
Subject key identifier: 58:3E:7C:A3:38:CA:63:EC:45:73:E9:53:C8:39:24:0C:E2:80:36:7A
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CB981F81B6F863F973C99F300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 31898
IP address blocks: 140.91.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:f8:1b:6f:86:3f:97:3c:99:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=dec5ed0d-ef5b-45b8-9bf4-caf77b354fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:1b:ec:4c:01:0b:ea:04:1c:a1:4f:1f:ae:
14:cd:5c:85:91:6e:98:b5:ad:be:9d:7c:31:00:ef:
71:d2:56:9d:16:87:7a:99:4b:69:32:45:23:fa:63:
00:0a:b5:30:9d:73:48:aa:4e:49:f8:56:80:f4:3c:
84:b9:74:f8:33:26:c8:e3:0b:99:e1:f7:52:53:90:
4d:8b:de:48:02:26:4b:a8:35:67:8c:b3:97:f7:d1:
c9:c8:0c:62:d7:ee:0a:40:2d:c9:f6:8a:8f:be:dc:
56:c2:52:0e:8c:58:83:f1:1a:9e:53:5a:6a:db:7e:
16:d1:9b:e5:9f:12:ad:f5:5c:6e:ca:cb:93:f2:e6:
c1:5f:66:8e:61:08:69:04:c8:49:00:c3:e6:02:d6:
4d:06:66:9b:50:a6:e7:51:2f:26:c0:10:ac:af:13:
e2:d4:33:5c:a1:fa:f9:b5:0c:37:6c:cf:b2:d6:ef:
b6:59:18:e2:8f:3a:d0:5e:f7:90:f4:d4:70:fc:ab:
17:04:45:b4:71:d2:25:0c:46:df:0d:c0:58:c5:2d:
f5:82:5b:e4:f9:c9:9c:55:54:a3:33:a7:5c:e9:35:
a4:fc:b2:83:ba:27:5f:5e:d4:b4:a1:aa:62:e6:4b:
e1:fb:3e:b1:b2:98:9d:83:6c:cb:31:d9:4b:70:fe:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:7C:A3:38:CA:63:EC:45:73:E9:53:C8:39:24:0C:E2:80:36:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:6d:0e:40:2e:c5:95:53:31:b0:a4:53:5f:fa:04:3a:3c:74:
d9:42:80:09:08:d3:ad:cf:b8:e1:da:ea:fe:f0:2e:a7:b1:da:
67:7c:f8:6e:19:23:22:96:bb:ef:36:d9:cd:0d:2e:2c:44:d6:
91:32:48:6f:96:60:58:7c:27:cf:d5:f3:0a:d4:a3:d1:2a:5b:
45:36:4b:ea:20:4c:a5:83:f4:98:23:b4:56:87:db:1d:8c:a3:
4b:04:f1:6d:81:7c:6f:25:4d:3a:87:0a:25:a9:fb:b1:b6:e5:
1f:19:07:8e:8a:62:1e:bf:44:40:49:40:ab:15:ff:c4:d9:a4:
43:83:6e:2b:b3:b2:1f:09:05:62:92:25:ab:6f:da:a4:2e:7b:
5c:0c:39:c1:7a:43:02:39:8d:63:2a:c4:80:e8:7d:6a:fd:33:
a0:03:22:1c:d1:38:55:d3:7e:0e:72:89:d5:35:a4:5a:83:c4:
d9:05:01:a3:ba:2b:ed:65:00:0b:04:a4:c9:ed:9f:ed:9e:ef:
aa:d4:82:17:7e:a1:df:c5:c3:75:6c:ef:e2:15:cd:cd:89:33:
cf:9b:f0:4d:9c:2f:40:d0:a8:c3:df:77:4a:79:29:83:8a:d5:
8f:9d:38:2e:84:c5:ad:82:44:e9:7d:c2:e6:be:3e:88:8f:5f:
ad:44:ad:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gfgbb4Y/lzyZ8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk
ZGVjNWVkMGQtZWY1Yi00NWI4LTliZjQtY2FmNzdiMzU0ZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIUb7EwBC+oEHKFPH64UzVyFkW6Yta2+nXwx
AO9x0ladFod6mUtpMkUj+mMACrUwnXNIqk5J+FaA9DyEuXT4MybI4wuZ4fdSU5BN
i95IAiZLqDVnjLOX99HJyAxi1+4KQC3J9oqPvtxWwlIOjFiD8RqeU1pq234W0Zvl
nxKt9VxuysuT8ubBX2aOYQhpBMhJAMPmAtZNBmabUKbnUS8mwBCsrxPi1DNcofr5
tQw3bM+y1u+2WRjijzrQXveQ9NRw/KsXBEW0cdIlDEbfDcBYxS31glvk+cmcVVSj
M6dc6TWk/LKDuidfXtS0oapi5kvh+z6xspidg2zLMdlLcP7NVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg+fKM4ymPsRXPpU8g5JAzigDZ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmI1YzgxODEtZGUwMy0z
MDgyLTkzNWItYmJiZWFjMTgxYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdtDkAuxZVTMbCkU1/6BDo8dNlCgAkI063PuOHa6v7wLqex2md8+G4Z
IyKWu+822c0NLixE1pEySG+WYFh8J8/V8wrUo9EqW0U2S+ogTKWD9JgjtFaH2x2M
o0sE8W2BfG8lTTqHCiWp+7G25R8ZB46KYh6/REBJQKsV/8TZpEODbiuzsh8JBWKS
Jatv2qQue1wMOcF6QwI5jWMqxIDofWr9M6ADIhzROFXTfg5yidU1pFqDxNkFAaO6
K+1lAAsEpMntn+2e76rUghd+od/Fw3Vs7+IVzc2JM8+b8E2cL0DQqMPfd0p5KYOK
1Y+dOC6Exa2CROl9wua+PoiPX61ErYM=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:47 2026 by rpki-client