
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa
File: eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa (raw, json)
Hash identifier: pamzsvrBnspdtkXca+f2NnhujHjTIzvHRrh9EL+3o4k=
Subject key identifier: 9A:5D:F3:D0:34:0B:3D:01:72:51:81:46:6E:E3:4A:37:71:58:3A:E2
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA270279F81E137CC0995A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 140.238.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:02:79:f8:1e:13:7c:c0:99:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=11a20ee6-8a3d-4d39-a878-f3e094bf9d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:4f:82:14:7e:e5:b2:60:50:9c:ff:01:f1:
d9:f0:bb:c1:ab:ef:d3:b9:fe:66:37:92:46:69:e4:
aa:1b:97:fa:6c:18:97:09:7b:2e:97:6d:cd:eb:83:
9b:f7:1f:13:d7:c5:49:21:c8:8f:9b:56:4c:a5:8e:
1c:75:a3:e5:78:2b:82:3f:c9:90:01:e8:04:1b:91:
3e:1e:3f:b0:31:c7:49:cb:89:71:c2:28:7d:82:3c:
1e:3a:25:81:e1:80:0a:94:a0:61:7e:28:d7:bf:16:
69:53:d8:67:ef:c2:65:3a:45:26:53:f2:3d:cd:92:
b9:67:b1:f2:8a:04:33:43:db:47:68:2c:be:4b:1e:
49:d9:f6:4c:da:1f:c7:ea:ba:0b:e7:53:95:03:5b:
a0:c6:04:94:9c:2c:b7:43:3f:0f:37:c1:df:06:03:
58:a3:df:0a:6c:a8:ad:2a:2a:ee:40:54:6e:2b:52:
1d:0a:49:2b:47:19:5d:84:66:b9:07:c0:b3:6d:4a:
21:7f:2d:ee:06:ff:b3:5a:1a:b0:b5:97:67:4a:07:
91:c4:25:f5:e2:9b:06:44:7c:f6:a8:71:8a:2e:2a:
3c:04:27:0b:c8:52:4f:9b:80:24:57:c3:f8:67:64:
44:0b:03:59:12:39:31:ee:f2:fe:51:89:71:fb:ed:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:F3:D0:34:0B:3D:01:72:51:81:46:6E:E3:4A:37:71:58:3A:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.238.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:67:3f:be:7e:72:01:d9:a0:30:c9:62:37:22:7f:d1:70:f0:
d2:18:72:c5:e9:d1:2d:da:f7:08:e7:4d:ce:d1:45:eb:05:cd:
12:49:be:fa:0a:f6:b0:1d:bb:7b:e3:d8:2d:cb:ea:da:36:bc:
ba:aa:4d:e5:3d:03:71:9a:f7:70:83:10:ec:53:ef:b7:a4:3e:
05:82:ea:e1:b2:be:b4:17:f4:9a:28:54:e0:90:0a:93:09:09:
4a:a4:60:28:e0:7c:36:a2:e4:2c:16:1a:94:a1:6e:ec:bd:86:
af:42:ea:03:42:6a:5b:42:87:be:f0:f9:1e:4e:50:b6:a1:3a:
65:7a:8d:a6:36:1e:64:cf:55:14:ee:01:c6:a8:f9:d3:4c:0d:
34:9c:6a:2f:5d:64:97:16:3d:ef:63:93:84:39:35:8a:85:42:
50:14:0b:40:f3:48:e0:67:14:73:5c:e0:f1:61:02:6a:20:44:
97:01:24:01:08:51:19:39:2a:c9:ca:4f:95:73:fc:41:b2:62:
b1:fb:84:73:2d:54:5c:16:5b:46:a2:20:2e:02:f9:7a:b7:07:
af:4e:99:c5:74:bb:80:38:31:fc:ee:69:e3:c8:a2:ef:22:8e:
bc:d5:62:f0:2b:fb:f1:42:5a:48:60:1e:10:21:8b:25:0d:fa:
1d:5f:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 05:06:30 2026 by rpki-client