
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/647ba6df-d8f4-34d4-bce9-3bfc2059eae7.roa
File: 647ba6df-d8f4-34d4-bce9-3bfc2059eae7.roa (raw, json)
Hash identifier: V9ZnPFT8++dvgFxvWPnGRAJ1j+XtnFdMSVifSO54V4w=
Subject key identifier: F0:82:39:34:B0:A4:D9:E4:74:FC:A8:65:5C:5B:F6:DF:45:C0:E1:E0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8EF56B4506A3623018976900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/647ba6df-d8f4-34d4-bce9-3bfc2059eae7.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 31898
IP address blocks: 140.204.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:6b:45:06:a3:62:30:18:97:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=751a9a27-f27d-40d7-b733-6cde1ca26bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:1e:71:0e:11:d4:fe:b1:41:20:59:fd:4b:
b2:d2:42:df:10:ba:31:ed:b6:b2:9d:75:6e:56:2a:
41:64:d4:2d:b6:af:41:c0:33:e0:d5:df:ba:c2:07:
71:fa:84:1f:b7:35:24:3e:af:6e:75:6d:fa:44:e3:
87:69:fa:5f:c0:d2:be:a7:d2:cc:2d:4e:95:f4:3d:
57:4c:9b:47:77:4f:0e:36:cb:96:14:fe:4a:2f:c5:
d5:40:7b:a5:d5:37:24:2e:84:04:df:d3:03:57:3c:
a5:89:21:ad:25:b4:76:1f:64:02:68:e0:a9:26:1c:
02:7c:85:71:ec:ae:d9:77:b1:b5:5c:64:c6:43:b5:
50:21:e0:a0:dc:09:c2:8b:a1:f1:5e:38:36:10:b9:
74:66:ef:26:31:3b:6a:74:ab:3b:89:2d:48:5a:60:
ec:2a:f9:90:53:7c:ae:50:da:bf:d9:d2:28:1a:5c:
1e:15:20:00:df:bd:1b:3a:ea:74:9a:3c:bd:51:d2:
35:ef:f9:00:c6:ab:80:98:23:4c:9f:81:d8:78:b0:
86:9c:9f:60:d1:1c:ae:a8:e2:69:eb:dc:0e:3f:3f:
16:d0:7c:18:4a:af:3d:93:26:bd:b1:0d:80:cb:d2:
e2:ba:85:95:22:a9:45:e7:55:8b:ae:74:39:31:8e:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:82:39:34:B0:A4:D9:E4:74:FC:A8:65:5C:5B:F6:DF:45:C0:E1:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/647ba6df-d8f4-34d4-bce9-3bfc2059eae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.204.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:01:80:18:2a:2b:93:88:77:9e:11:50:c1:86:36:e6:28:9d:
e7:2f:38:87:24:4d:c2:8a:8f:33:63:ab:ee:fb:5f:f6:cf:12:
96:28:02:46:bf:6b:bb:42:0c:c3:c6:d3:c7:e3:1b:22:00:7d:
80:45:c5:47:15:34:e4:47:21:60:e5:c9:2e:ce:7c:01:44:c6:
b3:dc:b0:65:06:c9:98:1a:21:7a:07:37:a2:72:74:10:6a:66:
08:15:f0:df:6e:26:85:65:d2:0f:7c:88:c0:b7:2e:f5:18:b4:
a0:1a:a9:02:55:ac:cd:8c:1d:ad:28:e5:ae:d4:27:7c:22:99:
24:e2:c8:75:6f:4f:96:7b:4d:24:71:3d:b1:c8:30:c6:9b:aa:
0d:b6:d4:27:20:5a:a6:56:68:33:d9:a7:0d:38:90:e0:76:d9:
5c:08:5a:39:71:a8:ad:5c:09:ce:f2:a7:b8:73:89:ff:54:64:
69:3c:12:5f:4c:43:37:65:43:3d:62:d1:74:91:2b:91:fe:c9:
02:a2:66:78:4a:e8:b2:e9:57:22:c9:67:a5:ff:34:e9:63:90:
48:e7:fe:2f:52:75:1b:bd:61:90:c8:53:6f:cd:1a:1e:8a:9d:
b0:9b:4a:ae:a4:fe:ee:42:ce:42:41:83:3a:0c:df:19:00:b2:
8d:f4:a6:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WtFBqNiMBiXaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NzUxYTlhMjctZjI3ZC00MGQ3LWI3MzMtNmNkZTFjYTI2YmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzoecQ4R1P6xQSBZ/Uuy0kLfELox7baynXVu
VipBZNQttq9BwDPg1d+6wgdx+oQftzUkPq9udW36ROOHafpfwNK+p9LMLU6V9D1X
TJtHd08ONsuWFP5KL8XVQHul1TckLoQE39MDVzyliSGtJbR2H2QCaOCpJhwCfIVx
7K7Zd7G1XGTGQ7VQIeCg3AnCi6HxXjg2ELl0Zu8mMTtqdKs7iS1IWmDsKvmQU3yu
UNq/2dIoGlweFSAA370bOup0mjy9UdI17/kAxquAmCNMn4HYeLCGnJ9g0RyuqOJp
69wOPz8W0HwYSq89kya9sQ2Ay9LiuoWVIqlF51WLrnQ5MY6qvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCCOTSwpNnkdPyoZVxb9t9FwOHgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjQ3YmE2ZGYtZDhmNC0z
NGQ0LWJjZTktM2JmYzIwNTllYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQBgBgqK5OId54RUMGGNuYonecvOIckTcKKjzNjq+77X/bPEpYoAka/
a7tCDMPG08fjGyIAfYBFxUcVNORHIWDlyS7OfAFExrPcsGUGyZgaIXoHN6JydBBq
ZggV8N9uJoVl0g98iMC3LvUYtKAaqQJVrM2MHa0o5a7UJ3wimSTiyHVvT5Z7TSRx
PbHIMMabqg221CcgWqZWaDPZpw04kOB22VwIWjlxqK1cCc7yp7hzif9UZGk8El9M
QzdlQz1i0XSRK5H+yQKiZnhK6LLpVyLJZ6X/NOljkEjn/i9SdRu9YZDIU2/NGh6K
nbCbSq6k/u5CzkJBgzoM3xkAso30pnU=
-----END CERTIFICATE-----
Generated at Wed May 13 05:17:41 2026 by rpki-client