
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa
File: b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa (raw, json)
Hash identifier: jtV4mNncka4mTkq2Ow4jTCgriH29bsr/5OHeq/GLFQY=
Subject key identifier: D5:AD:43:E7:F3:4F:97:75:1D:3A:7A:DD:A4:FA:64:C3:17:6C:EA:0E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F11A155BAA2CD2CBD60C5A340
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 140.91.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a1:55:ba:a2:cd:2c:bd:60:c5:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=38f26201-8a48-4d79-ba56-d7313efa989a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:8a:fd:ed:71:cc:5d:69:d6:98:74:1b:a8:
b2:dd:56:b6:0d:70:70:35:9c:95:a2:e4:54:da:db:
f8:3b:d6:16:87:f0:36:7d:39:fd:00:35:10:a4:2c:
b2:f0:18:7e:b0:04:34:01:ce:c7:3b:d5:58:8e:80:
a1:b5:f4:26:55:39:38:c9:67:c9:5e:6e:05:a1:e6:
62:d9:f2:f9:0e:d4:dc:d5:ce:ce:4a:27:76:0d:57:
24:0c:00:09:73:80:d4:f6:33:3c:17:6c:cb:18:42:
27:0b:48:c4:67:02:1a:e8:79:34:e2:a6:8f:50:e0:
61:48:e5:04:79:ba:87:16:34:f8:ca:35:4c:a7:76:
43:64:b4:87:f9:69:d9:bd:46:ee:70:2c:60:99:39:
35:2f:c2:74:3e:49:f7:a6:bb:f7:d1:58:00:e7:d7:
2e:e7:0b:4e:81:9e:ed:cf:b0:a5:18:6c:f1:53:0b:
fe:9a:54:a1:5b:1d:a5:a6:59:9c:8a:d8:50:28:2a:
76:e6:b0:61:6f:43:3c:63:8a:5a:83:36:d9:6e:41:
db:4a:fb:b6:4c:50:4d:07:6f:63:31:0c:a4:8f:a2:
12:17:6b:99:17:22:cf:c5:04:62:61:2b:53:79:cd:
e0:8b:1d:37:1f:6f:36:d6:c8:90:8b:6c:1c:71:81:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:43:E7:F3:4F:97:75:1D:3A:7A:DD:A4:FA:64:C3:17:6C:EA:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:69:fb:8c:bc:db:da:42:e4:b4:1d:3d:a3:c1:3a:55:c9:23:
be:18:78:b8:bb:1f:dd:cd:73:5a:1f:24:60:37:7b:42:d2:05:
d3:bc:8d:c0:e6:e5:80:0f:6a:d9:4a:5a:e7:ba:4e:c6:57:5e:
53:71:04:ba:a7:b1:a4:5d:6c:1a:66:0f:21:0e:11:22:79:90:
79:ca:ac:6e:3d:ba:7a:32:f6:d7:bf:70:d8:40:e7:dd:3e:4d:
84:b9:53:29:f1:98:05:57:f7:f7:09:45:ec:52:2f:16:5d:88:
52:21:52:a1:33:50:91:b8:3f:62:00:ab:63:61:52:62:53:35:
dd:09:bb:fc:b6:51:61:b5:17:71:95:85:a5:35:de:64:d3:27:
0e:8c:fc:99:0e:84:64:d8:1e:33:2e:4a:44:cd:28:be:ee:5b:
d0:75:55:86:99:2e:38:76:86:11:24:ad:d1:9f:7f:8c:2c:c1:
8d:55:59:c6:4f:36:66:ad:46:50:09:a6:77:f0:ec:74:f3:14:
05:c0:a7:d8:1f:35:eb:50:40:d7:9e:9e:f3:d5:7c:0d:ad:dd:
11:8d:8d:71:0d:19:60:de:99:34:7b:d3:be:52:86:42:98:07:
34:07:b2:ff:15:83:90:cd:c5:3d:8f:7b:b4:b8:0d:70:6d:09:
b7:d6:ea:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVW6os0svWDFo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzhmMjYyMDEtOGE0OC00ZDc5LWJhNTYtZDczMTNlZmE5ODlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GWK/e1xzF1p1ph0G6iy3Va2DXBwNZyVouRU
2tv4O9YWh/A2fTn9ADUQpCyy8Bh+sAQ0Ac7HO9VYjoChtfQmVTk4yWfJXm4FoeZi
2fL5DtTc1c7OSid2DVckDAAJc4DU9jM8F2zLGEInC0jEZwIa6Hk04qaPUOBhSOUE
ebqHFjT4yjVMp3ZDZLSH+WnZvUbucCxgmTk1L8J0Pkn3prv30VgA59cu5wtOgZ7t
z7ClGGzxUwv+mlShWx2lplmcithQKCp25rBhb0M8Y4pagzbZbkHbSvu2TFBNB29j
MQykj6ISF2uZFyLPxQRiYStTec3gix03H2821siQi2wccYGmHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWtQ+fzT5d1HTp63aT6ZMMXbOoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjFhNDhmZGQtNDJlYi0z
N2Y2LWEyOTQtYTAxZjdhNjA5ZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFv0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJp+4y829pC5LQdPaPBOlXJI74YeLi7H93Nc1ofJGA3e0LSBdO8jcDm
5YAPatlKWue6TsZXXlNxBLqnsaRdbBpmDyEOESJ5kHnKrG49unoy9te/cNhA590+
TYS5UynxmAVX9/cJRexSLxZdiFIhUqEzUJG4P2IAq2NhUmJTNd0Ju/y2UWG1F3GV
haU13mTTJw6M/JkOhGTYHjMuSkTNKL7uW9B1VYaZLjh2hhEkrdGff4wswY1VWcZP
NmatRlAJpnfw7HTzFAXAp9gfNetQQNeenvPVfA2t3RGNjXENGWDemTR7075ShkKY
BzQHsv8Vg5DNxT2Pe7S4DXBtCbfW6h8=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:02:49 2026 by rpki-client