
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa
File: 400e6027-1418-38f3-8d41-13b0faa52044.roa (raw, json)
Hash identifier: fbag3l4HyTFvza+BU1oX8bFcE3HZOjgk1Rwh96m2r8Y=
Subject key identifier: FC:32:08:4B:D4:E5:0D:58:E5:D3:E6:86:6B:FC:1C:EB:53:23:50:EA
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F4328584F4973ECE61110D3069F885D00
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 149428
IP address blocks: 168.91.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:ec:e6:11:10:d3:06:9f:88:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=17e230c7-2acc-4632-85a7-d27dc0ac8a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:ef:58:d5:0a:0f:59:04:17:b8:39:31:ed:
df:0b:bc:50:70:f9:6c:7e:9e:c8:2e:86:5b:cc:46:
e5:cf:e7:0e:18:34:b5:d0:d0:ca:14:ff:93:bc:2f:
32:81:9d:a6:9d:81:a3:bb:ed:75:46:5b:29:87:d8:
bd:25:70:89:4b:6c:0c:48:0b:7f:00:51:59:6d:c7:
82:19:a5:19:59:26:c0:65:90:fd:41:73:a2:cb:e9:
31:d7:12:72:3f:63:a0:9e:d6:2a:29:10:2c:e6:27:
a2:a6:c5:33:c9:57:ee:c3:6d:a3:34:a1:7f:58:d2:
3e:98:74:78:90:88:6e:c1:42:a3:63:07:85:0b:75:
c0:fd:7d:26:0c:8b:41:4c:11:db:3b:08:48:7a:be:
89:81:69:02:d7:80:2c:3f:3b:4d:a8:65:7c:b0:d0:
94:26:cb:22:d4:af:a5:ae:8a:63:f0:2b:f2:d0:64:
00:f6:05:21:65:f5:e9:94:16:a3:40:12:b3:2c:db:
fa:93:ff:69:8a:b1:51:a9:b6:67:fa:5a:b0:7a:d9:
21:3d:df:9d:28:84:99:7a:d7:4a:f7:14:52:f9:93:
a3:e9:16:b2:57:7b:f6:4b:28:e2:5c:58:8e:a3:7e:
37:c4:47:5d:53:23:c6:a0:90:f8:f8:2f:0d:15:bd:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:08:4B:D4:E5:0D:58:E5:D3:E6:86:6B:FC:1C:EB:53:23:50:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:9a:a9:99:ea:c5:28:56:b4:72:6f:d3:b0:76:fb:ac:9e:44:
5d:a1:91:bb:fa:1a:37:74:4d:38:1a:b3:0f:2c:f6:93:8f:b2:
07:21:12:70:b1:c7:89:1f:c5:92:cb:6c:b0:04:fe:41:b3:83:
da:63:13:a0:0f:a0:5b:8a:d4:f5:80:40:d1:4f:f3:81:c7:0c:
4f:67:5d:cc:cd:f6:89:8e:ba:61:60:6d:73:63:0a:2f:81:78:
34:01:07:ca:f4:df:d3:59:8a:5b:16:fb:9e:d1:f6:49:a3:3b:
d7:43:5a:b4:29:29:7c:b5:6f:7f:ba:1c:57:55:61:5c:77:65:
20:8e:e3:46:b1:96:59:07:68:6a:ef:a7:2c:cb:90:4c:91:6f:
f5:a8:36:b9:45:3d:03:5e:56:15:57:d6:f2:d5:6b:71:18:07:
7a:55:7c:70:86:a9:7a:a8:ad:30:1a:52:de:da:26:87:5e:91:
42:43:26:3e:b3:d4:23:b8:39:f1:24:1e:fe:0e:5d:26:9e:13:
f2:9a:3c:70:48:26:30:59:d4:9d:d7:77:30:aa:1b:4e:9b:a9:
df:96:0e:3a:ad:50:45:86:f1:e3:de:86:aa:e0:30:bb:dd:5c:
85:e5:5d:bd:53:9b:a1:3c:20:3b:21:61:7b:a8:27:d9:cc:3f:
82:8e:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:25:38 2026 by rpki-client