
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa
File: ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa (raw, json)
Hash identifier: Bm/Nu0ucPVdEJEyskQne+yHTMnlDMrl9FJlT/QW22zw=
Subject key identifier: 04:84:43:EE:E0:07:0A:33:C7:6F:C4:A9:9D:79:35:69:79:73:A7:41
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CACF1B7E855A44D61A9456380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa
Signing time: Wed 28 Jan 2026 14:00:36 +0000
ROA not before: Wed 28 Jan 2026 14:00:36 +0000
ROA not after: Tue 28 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 140.91.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ac:f1:b7:e8:55:a4:4d:61:a9:45:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 28 14:00:36 2026 GMT
Not After : Apr 28 13:00:36 2026 GMT
Subject: CN=80a1a5ee-332f-4d95-96b8-d8336cb2ef73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:5b:5a:76:9d:97:61:ba:8c:ee:bf:af:1b:
40:f2:67:82:f2:98:9c:3f:08:0e:09:a2:84:55:d8:
be:7b:e0:95:e7:55:6f:77:c4:eb:32:55:5c:ec:18:
c9:63:6e:bf:00:8b:b6:b6:dd:45:11:36:68:ed:e4:
a7:03:95:08:ca:d1:0f:64:d7:91:11:3c:aa:2e:e8:
df:fa:ee:6e:e8:52:7e:26:af:74:92:10:73:28:a8:
62:e0:9b:39:9f:c0:bf:d6:f9:a3:ff:f2:17:22:f4:
3e:cc:5f:d5:05:38:74:98:48:7d:97:07:c7:73:2a:
61:6b:13:08:73:33:81:2c:94:c9:e3:94:06:95:d4:
3b:a5:1b:ab:db:99:60:e4:a2:bb:d5:33:44:9d:20:
15:1c:5a:c8:e6:19:22:b0:7b:33:9f:06:2c:a0:da:
9a:92:1c:3f:de:30:8c:7a:a5:8d:6b:80:e9:ad:98:
88:ea:ca:8f:f5:2f:b7:fa:0b:e0:9f:6e:a4:4e:64:
79:c8:65:37:97:63:81:c3:13:12:78:81:2b:8f:9b:
0d:fd:72:48:9b:12:a1:d8:14:d2:ac:17:f7:7e:09:
61:1c:ba:f6:92:1c:78:6f:ce:34:7b:af:1c:ac:83:
40:0f:cf:52:34:e9:fa:ba:e0:75:ba:02:3d:08:9a:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:84:43:EE:E0:07:0A:33:C7:6F:C4:A9:9D:79:35:69:79:73:A7:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffd82e79-63f3-3fd6-987e-7db1ba53115d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:bc:74:a5:d6:ed:e0:e7:a3:bf:37:cd:e1:f1:ec:c7:5b:15:
4a:b3:dc:b5:da:e9:34:38:b9:a3:07:eb:1c:17:f5:1d:61:0b:
ee:b1:f7:9b:f5:4e:5f:25:49:91:d0:1d:3a:92:41:f9:d8:22:
15:8c:3d:45:03:c2:49:fb:07:69:dd:d2:72:a4:8f:af:b6:c6:
e1:09:3e:e7:99:ae:7f:87:40:72:92:3a:2b:51:4c:cc:91:8f:
af:f4:9a:25:04:df:27:6d:44:cb:ef:0f:06:66:dd:66:fc:5c:
75:2f:4e:ca:2e:5c:3f:fa:aa:ce:be:4a:53:f0:a0:da:55:fa:
85:87:ff:22:32:e9:fe:e5:c2:c7:cd:c0:d9:8a:b6:54:26:8c:
e4:68:7a:1d:11:0b:40:e4:61:31:25:3b:8e:af:cc:ed:74:b0:
f0:5b:60:9d:6b:a8:ce:4a:a5:10:d3:9b:e8:ff:31:d1:1c:a6:
45:d9:a8:c7:19:db:b8:12:9b:65:6d:bd:35:14:24:96:07:85:
88:a1:51:7b:e0:99:3d:0a:1f:bc:43:10:5c:61:b9:7c:24:a8:
cb:b5:1a:d4:a6:ca:4e:1f:c6:d4:61:f3:46:4d:2b:15:61:b2:
da:7a:60:af:33:66:5c:d1:48:c6:01:e5:b2:56:b0:ae:69:6f:
8d:2c:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:42 2026 by rpki-client