
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e201970a-0989-35aa-9842-a37c35183086.roa
File: e201970a-0989-35aa-9842-a37c35183086.roa (raw, json)
Hash identifier: xi7X+DS7g24vfu+fZ1eX4n6TI8uVv+823m824QJIdGo=
Subject key identifier: DF:1E:A8:74:97:4F:F3:5F:BF:92:95:EA:30:0B:CC:27:E0:9E:04:0E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F119CE2983CABB6E18DEBAC80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e201970a-0989-35aa-9842-a37c35183086.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 140.91.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:e2:98:3c:ab:b6:e1:8d:eb:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=b0cc51f6-4ea0-47ca-916b-cb29de6a1c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:35:f8:54:76:0f:80:41:5f:6f:51:fa:8a:
93:2b:68:87:8b:5e:3d:d6:1c:29:f1:a7:6d:d9:d9:
d1:5b:8a:7c:56:08:2d:59:e6:4b:28:a4:74:e8:0e:
a8:a4:bd:f9:28:7d:2a:e4:74:af:1b:84:2c:44:5d:
04:9d:d2:48:b7:83:f2:77:14:3d:a4:f9:7c:39:36:
e0:d1:24:72:b0:ae:09:fb:bc:da:27:76:c2:14:fc:
67:39:1d:0b:9a:ab:ca:45:e2:35:ee:c6:fe:86:77:
7c:49:6b:d2:e3:ff:8b:0d:8e:d1:79:63:7f:31:51:
d7:21:03:2e:78:3e:7b:14:f9:20:4d:95:dd:7e:81:
9f:9b:31:6d:95:ac:f3:77:e4:d0:37:a3:c3:df:5d:
cf:a4:4c:02:19:ef:02:b3:eb:2a:63:fd:4a:3f:9e:
56:ea:64:67:1e:d6:bf:d7:45:81:7a:96:e9:bc:0b:
71:c8:51:b9:9a:62:32:e4:72:89:8c:bf:26:f9:da:
a5:e0:bc:8e:04:1a:df:1c:f8:ae:f4:76:08:62:0a:
16:52:c9:f6:55:2b:60:ec:21:f3:b5:55:e2:f0:8e:
63:3d:17:41:0a:44:c8:9a:fb:6e:19:de:a9:90:2e:
96:c2:1a:64:35:72:da:3f:1a:0d:9a:fa:27:c2:32:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:A8:74:97:4F:F3:5F:BF:92:95:EA:30:0B:CC:27:E0:9E:04:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e201970a-0989-35aa-9842-a37c35183086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:67:94:a5:16:c2:1c:df:05:dc:27:6f:c1:1b:6c:3c:13:72:
a4:e5:10:4b:ab:a7:98:cf:c5:f2:3e:73:f4:3d:d2:36:d5:a8:
da:bf:a6:a1:51:4b:8b:d0:2c:1c:6c:e7:29:f4:cd:11:6d:ce:
94:56:32:a6:d9:53:fe:86:27:10:5e:62:21:24:6d:54:a2:61:
db:96:b5:ec:fa:44:2e:02:bd:4f:e7:6a:34:8f:92:a3:bf:d7:
7c:09:5c:83:bc:18:57:4c:04:2f:61:36:3c:b6:d3:8b:3e:e5:
02:32:ac:a1:7c:11:0a:11:ba:e2:98:99:bb:39:27:44:1a:3b:
52:1c:1e:79:60:b7:62:8e:fe:09:b6:ae:29:e3:0b:74:a5:46:
fa:7a:31:4c:cc:8e:f9:85:83:92:27:31:65:28:ca:56:0c:31:
e3:04:b7:5c:77:7c:46:9a:ae:64:4b:5b:7f:a3:33:a9:45:a7:
21:01:a4:6e:78:82:ca:78:22:d9:a7:96:84:c2:7a:e5:26:03:
55:cb:39:15:b9:3d:94:59:91:74:2a:2d:c0:0c:81:f6:09:87:
b8:1c:c7:0f:38:f4:ff:1f:be:2e:b5:00:e3:97:8b:3f:2e:f5:
6f:25:94:84:54:60:de:eb:0c:7e:67:6c:4d:92:64:fb:49:47:
36:b8:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:42:58 2026 by rpki-client