
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b99281a-91e9-3d65-adbe-275bca80bc04.roa
File: 4b99281a-91e9-3d65-adbe-275bca80bc04.roa (raw, json)
Hash identifier: 2Zgdit7HoDGIvLSYOYAovpr8sLYIZvUXmZ6zMvMnpy8=
Subject key identifier: 9D:69:B0:53:04:70:14:1D:59:22:EC:57:64:D3:F7:F4:88:D3:1C:09
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8C2AAD96933974038487E160
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b99281a-91e9-3d65-adbe-275bca80bc04.roa
Signing time: Sat 18 Apr 2026 13:00:30 +0000
ROA not before: Sat 18 Apr 2026 13:00:30 +0000
ROA not after: Fri 17 Jul 2026 13:00:30 +0000
asID: 31898
IP address blocks: 140.204.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8c:2a:ad:96:93:39:74:03:84:87:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 18 13:00:30 2026 GMT
Not After : Jul 17 13:00:30 2026 GMT
Subject: CN=4cb22875-c88b-46a1-a92d-b5b7be418e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:8c:31:bc:be:f4:c0:26:73:8e:08:74:42:
91:1a:6b:12:42:13:ad:cc:0b:c2:3b:2a:73:24:95:
a3:3c:e3:f3:14:8c:69:ee:3b:47:d1:ca:07:b1:f1:
ff:18:fd:09:03:b8:9d:6a:7e:f6:8e:6c:b0:d6:15:
f2:8a:1c:3a:8c:65:61:97:a5:e5:e8:ce:25:e1:5d:
43:62:71:b4:16:f8:03:13:0c:ad:e3:c8:74:a9:1a:
1e:18:e6:73:b0:6f:41:f9:ec:43:b6:ea:c3:99:19:
99:60:0b:10:7c:e4:f9:94:64:91:2d:fa:e1:6e:ff:
69:7d:00:e4:8a:d9:93:1f:02:77:03:38:b6:72:cb:
6b:a8:0b:7e:1c:4b:cd:ff:1f:63:45:06:0e:67:dc:
0b:13:e4:71:71:94:95:d4:d2:b7:ef:81:42:87:9f:
7e:45:cc:cd:d6:80:ec:f4:cc:7f:2b:18:d3:ff:3b:
0f:ba:79:c9:94:4f:34:f8:3b:90:4e:eb:e2:cf:ea:
2f:77:e9:89:cf:12:20:b7:7a:33:21:77:83:e5:be:
c4:cd:db:cc:10:38:62:bd:54:65:23:9f:89:5c:b6:
15:b4:c8:d6:7b:e9:72:9e:a4:10:13:b2:f9:cd:33:
18:64:e5:01:30:c6:2b:90:14:15:4e:47:19:16:55:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:B0:53:04:70:14:1D:59:22:EC:57:64:D3:F7:F4:88:D3:1C:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b99281a-91e9-3d65-adbe-275bca80bc04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.204.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b0:34:33:dc:5e:16:a2:aa:51:05:0a:7d:80:fb:24:03:f2:
ea:50:29:09:11:80:a9:ca:a1:75:89:d1:66:91:a4:98:7f:1f:
68:26:f7:2d:0f:56:2e:61:df:d4:84:47:6f:2c:3e:a2:1a:78:
7e:bb:6f:e1:7e:5a:47:6d:82:97:4e:66:ee:69:87:73:34:ef:
56:2d:4a:b5:40:01:e4:4f:ce:43:a1:da:4b:ed:79:6a:02:22:
2e:51:ea:39:d7:dd:25:99:f3:3c:b0:f6:84:60:87:cb:2a:6b:
3a:af:e1:a5:98:2f:d6:3a:8b:04:47:18:55:f4:01:83:4d:8f:
ea:01:d0:1d:14:3c:09:94:99:4b:a6:b8:bb:8b:a4:9a:f1:e5:
39:37:2f:ce:ad:25:ea:83:39:ef:64:da:56:fc:d8:98:fb:ba:
61:0d:2f:a3:87:12:e5:11:31:60:6c:8c:62:8f:87:58:c1:b3:
72:8b:76:39:23:60:74:28:4c:92:0d:3c:1b:f6:05:10:d8:de:
9d:ca:7e:ec:6e:07:b3:1c:87:23:e6:fe:1e:56:a6:71:27:03:
ff:1f:19:25:c7:b6:35:79:37:01:05:1b:2e:aa:9d:1a:d8:fe:
1d:1b:34:bb:76:a3:22:84:7c:49:1e:84:e5:81:a1:20:a6:8c:
6d:9d:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:30 2026 by rpki-client