
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08caafba-8423-3f74-872c-6183b05566ff.roa
File: 08caafba-8423-3f74-872c-6183b05566ff.roa (raw, json)
Hash identifier: Xks46vItnx3nkuNoMj1kwK2xFdO0UfJ6eqXVDVImtTo=
Subject key identifier: E9:B3:21:B0:9A:38:6F:91:5B:AF:F4:13:8F:27:05:0E:06:3F:CD:75
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D86957DF4EF450D461495D080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08caafba-8423-3f74-872c-6183b05566ff.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 31898
IP address blocks: 140.91.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:7d:f4:ef:45:0d:46:14:95:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=f5d7d84d-e549-4014-9381-e965244b6cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:14:a3:04:cf:e1:c1:bd:e8:0c:4b:21:87:
f8:c2:61:19:79:b8:d8:7c:a8:31:2d:fa:5b:53:8b:
bc:d4:88:77:3a:60:ac:5f:bf:b1:09:b6:1c:00:81:
b8:08:64:9f:da:cf:7a:9e:1a:9f:6e:cf:19:a9:b5:
2a:a0:15:6b:51:f6:3b:74:58:4d:7f:9e:53:2c:2b:
ce:3e:ff:ae:5d:d2:b4:40:2d:0d:7e:fe:9c:97:65:
da:30:1d:97:b7:00:40:15:44:5f:63:d5:9a:14:88:
a3:37:49:ad:4b:ac:92:3b:1d:3d:4c:e2:ec:7a:10:
ce:81:a4:f7:91:1e:eb:7e:29:01:8c:90:a9:cb:91:
ad:ea:15:50:f6:2b:8b:58:b9:0a:fd:db:47:92:d3:
af:73:ce:de:24:83:de:97:f1:0a:95:c9:42:6d:21:
74:25:b7:49:b4:35:53:dd:fa:75:a6:6a:f5:d7:96:
d7:a5:ce:89:2f:be:cc:8b:e3:a8:f9:e6:07:5e:21:
2f:78:5b:92:bf:32:ca:c2:01:72:8b:f2:e8:64:53:
d4:40:8d:15:6f:c9:b7:dd:3a:b9:f0:37:84:38:b0:
10:c8:72:b5:31:58:00:a5:60:2e:c8:d8:b8:6a:71:
4f:2e:79:35:3c:31:3b:d1:31:eb:5f:f8:df:5c:2e:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:21:B0:9A:38:6F:91:5B:AF:F4:13:8F:27:05:0E:06:3F:CD:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08caafba-8423-3f74-872c-6183b05566ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:0b:49:7e:05:d6:61:c3:c1:74:5b:81:d3:6f:d4:f7:b5:b0:
7d:e7:67:39:b9:4a:86:3c:f7:06:51:b7:ba:04:15:ea:6e:db:
91:05:fd:df:e9:1b:b4:b6:73:bc:97:63:06:2f:bf:af:c6:17:
43:13:fa:d2:0c:81:d0:b8:12:71:94:27:17:66:6b:f5:c5:c8:
d9:d8:5d:04:a5:71:ad:08:bc:f0:74:1e:99:2c:06:b1:58:81:
6a:18:94:8a:bf:76:9c:58:8a:6e:b9:7a:bc:6b:7b:fe:d6:71:
b3:a7:b7:30:d5:fc:70:1f:86:78:30:e2:0b:d5:45:1b:11:c7:
e7:47:af:ff:c0:69:f2:21:6d:dd:ea:56:56:01:34:d3:e2:85:
f5:b2:ae:f9:97:dc:3b:27:5c:7c:83:0f:d6:cf:56:1c:06:65:
47:b5:e2:8f:2e:c5:95:f9:c9:91:09:3f:fb:ef:00:2f:1d:f8:
30:f8:cc:04:27:83:7e:b5:eb:29:73:d1:be:fc:95:38:d6:11:
9b:3a:4d:df:2e:ef:a0:0d:26:3a:f8:aa:6e:e7:93:e8:9c:32:
f1:f2:1e:5e:ad:43:66:4d:3f:fe:dd:10:da:52:35:23:f0:be:
f6:30:dc:bb:f0:d2:1b:cb:c9:57:b4:b1:73:87:bd:20:3f:c0:
3a:3e:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:17 2026 by rpki-client