
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf7e073c-165b-3ad9-8846-77672348ef57.roa
File: cf7e073c-165b-3ad9-8846-77672348ef57.roa (raw, json)
Hash identifier: 1ymNItye9i7VN1WEavN4XyVy3f6VWw9bbnv7USb1e+Y=
Subject key identifier: 61:DE:FD:30:D1:94:FE:41:34:B9:76:C8:13:15:12:80:0D:DC:F0:8A
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F10379A79434A54DD390A4180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf7e073c-165b-3ad9-8846-77672348ef57.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 140.204.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:9a:79:43:4a:54:dd:39:0a:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=0aa012a8-fb80-4f06-9aaa-bef6f6906893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:18:50:f9:ce:40:aa:82:6a:5a:55:a3:62:
b7:4d:f9:d8:2f:a3:44:06:5b:d8:5e:25:ee:1b:f7:
5c:1a:06:96:8f:0c:65:c3:f1:53:cb:f5:73:45:67:
71:3c:06:de:5b:76:81:c2:80:05:15:6b:91:0b:83:
d5:b7:6d:06:4f:f7:a6:47:c0:b6:a7:f8:ce:2a:66:
cb:d0:9f:92:c8:3a:32:c7:ee:df:d2:32:1c:73:9b:
df:ba:b9:13:29:d0:f1:39:8f:9b:03:bd:38:1a:34:
90:d6:2a:d8:45:94:6e:5e:72:87:b5:2c:db:9b:6c:
a2:ec:6f:47:fc:fa:9b:66:34:b0:72:84:f6:fb:46:
1c:b1:95:c0:69:94:6c:ea:aa:5e:e3:41:e2:9c:19:
58:26:9e:99:dd:37:56:b1:c5:5e:98:3f:5a:5d:9e:
5a:80:df:6c:51:63:32:a5:b8:3e:23:8f:ae:32:35:
05:e5:79:1a:d7:a0:83:63:d9:da:96:e6:40:27:75:
0f:db:4a:3d:b9:95:38:3e:a4:ad:a0:07:dc:79:a9:
2a:1b:83:0f:17:e9:87:8a:b6:8c:54:a4:35:5b:d0:
d8:61:4e:ee:07:e1:6c:45:0b:96:e0:90:71:ff:c0:
7c:d9:e4:bc:73:99:01:4b:55:f3:d6:9e:27:37:1a:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:FD:30:D1:94:FE:41:34:B9:76:C8:13:15:12:80:0D:DC:F0:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf7e073c-165b-3ad9-8846-77672348ef57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.204.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:df:5d:1d:d7:93:55:70:49:51:1d:6d:f9:2c:03:5f:70:92:
40:80:05:4c:06:51:7f:27:56:8a:dc:67:ac:85:d4:78:7a:b4:
bf:26:53:0a:2d:92:07:c6:31:dd:2a:0b:ba:0e:5b:8d:18:91:
d9:40:26:f0:88:77:16:f5:ef:d2:2a:63:ca:13:16:00:88:89:
7a:b5:80:18:3d:ff:1c:d1:df:82:6a:63:72:05:f0:d1:0a:a8:
e9:6c:42:45:09:b9:72:f3:3e:0d:1a:39:bb:fb:30:91:60:03:
4c:4f:32:7f:00:df:7f:86:f1:c8:ad:6c:75:7d:b4:8f:e1:94:
f6:27:01:a5:3e:a2:e1:71:4b:cb:41:45:e9:d1:bc:8f:fa:94:
86:34:26:1d:d9:fc:25:89:40:ad:88:b8:8b:de:7d:21:d3:cc:
b5:ef:0a:c6:73:a3:85:03:1e:d8:06:78:f5:d5:1f:e5:c6:6e:
28:24:98:6d:13:12:4e:35:69:92:5b:70:2a:0f:2b:d4:dc:c1:
86:c6:45:94:6a:03:31:82:f2:a1:f4:ef:d3:35:93:fc:ad:b9:
e7:5e:21:05:49:fc:ec:af:f2:6f:eb:f6:a1:cb:4b:2c:66:59:
3c:75:4f:d0:51:b5:6f:c1:c4:e3:2b:82:1c:fa:74:d1:55:84:
8a:52:be:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5p5Q0pU3TkKQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
MGFhMDEyYTgtZmI4MC00ZjA2LTlhYWEtYmVmNmY2OTA2ODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28kYUPnOQKqCalpVo2K3TfnYL6NEBlvYXiXu
G/dcGgaWjwxlw/FTy/VzRWdxPAbeW3aBwoAFFWuRC4PVt20GT/emR8C2p/jOKmbL
0J+SyDoyx+7f0jIcc5vfurkTKdDxOY+bA704GjSQ1irYRZRuXnKHtSzbm2yi7G9H
/PqbZjSwcoT2+0YcsZXAaZRs6qpe40HinBlYJp6Z3TdWscVemD9aXZ5agN9sUWMy
pbg+I4+uMjUF5Xka16CDY9naluZAJ3UP20o9uZU4PqStoAfceakqG4MPF+mHiraM
VKQ1W9DYYU7uB+FsRQuW4JBx/8B82eS8c5kBS1Xz1p4nNxrDMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHe/TDRlP5BNLl2yBMVEoAN3PCKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2Y3ZTA3M2MtMTY1Yi0z
YWQ5LTg4NDYtNzc2NzIzNDhlZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHfXR3Xk1VwSVEdbfksA19wkkCABUwGUX8nVorcZ6yF1Hh6tL8mUwot
kgfGMd0qC7oOW40YkdlAJvCIdxb179IqY8oTFgCIiXq1gBg9/xzR34JqY3IF8NEK
qOlsQkUJuXLzPg0aObv7MJFgA0xPMn8A33+G8citbHV9tI/hlPYnAaU+ouFxS8tB
RenRvI/6lIY0Jh3Z/CWJQK2IuIvefSHTzLXvCsZzo4UDHtgGePXVH+XGbigkmG0T
Ek41aZJbcCoPK9TcwYbGRZRqAzGC8qH079M1k/ytuedeIQVJ/Oyv8m/r9qHLSyxm
WTx1T9BRtW/BxOMrghz6dNFVhIpSvnc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:01:20 2026 by rpki-client