
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b2e9864-cb0b-356e-a303-342ffbcfc17c.roa
File: 1b2e9864-cb0b-356e-a303-342ffbcfc17c.roa (raw, json)
Hash identifier: vNYZl8P729X80MSozi2nUn8JPYfCjbTenv1j6WZXeko=
Subject key identifier: 5D:91:4E:87:E9:EF:86:5A:EE:A8:5E:79:97:F1:AC:0F:73:B5:05:05
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8EF5552CBBE50ED302B69D40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b2e9864-cb0b-356e-a303-342ffbcfc17c.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 31898
IP address blocks: 167.234.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:55:2c:bb:e5:0e:d3:02:b6:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=b3de2bcf-2fd5-424f-8d85-e6a59d37a9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:be:95:77:58:80:9c:82:eb:49:0e:89:8f:
d6:97:85:84:e8:df:cf:bb:70:4c:18:70:b1:e0:46:
c6:42:0b:5b:c8:62:dc:7f:6a:20:6c:29:16:78:56:
cc:e5:1a:97:c7:02:92:bc:95:59:08:6f:e8:36:2c:
4f:74:11:cf:ff:cc:6e:4b:9c:4d:a3:d3:90:fd:d3:
bd:4b:e8:08:4a:02:89:76:17:fe:fd:69:fe:82:ce:
8f:a1:18:a0:26:53:8c:a8:14:06:9b:e5:1b:10:c5:
dd:16:9e:cf:2c:ee:82:c5:25:75:ce:56:bd:22:77:
5a:51:7d:18:f0:53:cb:45:20:df:f4:a8:6c:33:21:
83:ba:b1:35:fd:dc:8b:b9:61:d5:80:94:15:0d:54:
bf:21:53:e3:1e:d6:85:73:5e:33:51:e7:ec:6c:29:
98:09:13:b8:ee:04:1a:74:2c:c9:83:bb:ef:1d:42:
51:ae:bc:4f:81:94:b3:9b:68:f1:a9:dd:5a:09:b4:
86:cc:90:fe:ef:05:30:97:c2:31:0b:4b:8d:17:8b:
7f:7e:f5:14:ca:63:0d:a8:46:d3:b1:d7:84:ee:8d:
90:89:b0:cd:12:9c:26:47:89:48:df:44:2e:94:f4:
36:e3:68:cb:39:f7:aa:ee:f4:91:0b:5d:e8:67:74:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:91:4E:87:E9:EF:86:5A:EE:A8:5E:79:97:F1:AC:0F:73:B5:05:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b2e9864-cb0b-356e-a303-342ffbcfc17c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
167.234.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:2d:fc:32:be:97:eb:b4:c4:05:89:30:4d:44:38:7c:2a:ee:
97:13:40:0e:e8:1b:0b:c8:b1:d3:30:54:9c:13:a6:53:53:c9:
a3:82:96:09:cf:38:a8:f3:96:72:12:37:44:9f:99:08:b1:ec:
de:cb:6f:75:95:1c:ea:f0:a2:a8:53:4a:2e:f0:df:06:ca:63:
53:9e:ab:97:ab:09:2e:c4:fd:21:0f:58:69:85:30:bb:f8:a1:
63:8d:90:78:01:7c:2c:b7:eb:79:d5:21:02:49:e7:90:ae:10:
66:74:bb:7d:b1:0e:8b:e9:47:4c:f9:5d:52:2d:94:fc:d3:4e:
89:f5:58:bc:79:c6:dc:ef:bb:d2:66:ee:84:42:9f:fe:6e:14:
4a:a0:59:11:16:14:36:19:9c:f2:4c:b3:e9:47:13:dd:41:54:
6f:e4:c7:30:b6:0a:a6:eb:77:ad:75:48:ca:4e:e0:5b:62:ba:
1c:ad:59:8e:9e:96:9d:57:ed:5f:a2:c9:7f:e8:f8:ba:2c:21:
41:65:21:bb:39:93:33:93:d5:ed:17:af:44:8e:db:79:d0:b0:
ac:6d:50:5b:a1:13:85:a2:19:7d:2a:a7:30:18:47:7c:f3:41:
46:e2:b3:0c:ba:ee:6e:a3:b3:2a:1e:54:37:c5:63:e8:4d:b3:
59:3e:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:53 2026 by rpki-client