
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff4c7452-682b-36ec-b14d-0097bc8111b0.roa
File: ff4c7452-682b-36ec-b14d-0097bc8111b0.roa (raw, json)
Hash identifier: ogA2LkeHhN3qVofYVugW2gezbqOLVKgWv10RbtlWlEk=
Subject key identifier: 01:BD:27:BF:36:D6:91:D7:65:DD:4D:B0:FD:4E:84:B7:98:8B:86:D0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D9E502CA51B6FF6B3D9E73580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff4c7452-682b-36ec-b14d-0097bc8111b0.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 134.70.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:2c:a5:1b:6f:f6:b3:d9:e7:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=70ca00fe-eee3-4aa2-94db-e0a7dacac8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:18:86:cd:79:db:77:12:44:89:43:e8:47:
10:b1:f2:20:8a:ff:08:1b:92:00:31:13:4f:c0:54:
04:6c:98:75:ab:42:cf:d4:b6:7d:4f:0d:c1:d6:4d:
2d:56:42:61:ba:bb:39:69:90:da:08:b2:14:58:19:
84:bc:66:c6:73:8e:1d:d0:fd:39:46:d5:53:5e:96:
c3:f3:46:73:b3:dd:d6:b8:1c:bf:e6:26:99:14:67:
64:43:b7:b8:95:16:90:a2:0b:52:8e:e6:19:6f:11:
7c:a8:f5:57:a9:3e:a2:7c:51:f0:36:2c:22:c1:59:
18:ae:a8:ef:dd:2a:69:35:8d:05:f0:d6:f1:ed:f3:
3d:c4:7f:6e:40:b5:df:81:4a:51:22:6d:e0:66:6d:
a8:d7:e1:07:2e:64:ea:bf:28:9f:34:71:e8:cc:7c:
e1:70:07:d1:97:cd:0e:1d:96:7f:c4:2b:10:96:db:
be:f1:e9:67:8e:49:31:53:9a:1c:98:a8:a5:7d:cc:
e6:ba:ae:60:63:0e:3c:0c:52:44:09:b3:47:54:ff:
3c:5c:b2:13:7e:89:7c:07:aa:cb:0f:f2:21:03:6d:
60:ca:ef:b8:ff:2f:a8:20:93:5d:f8:26:5f:25:08:
f0:78:11:79:97:8c:29:4b:0d:ac:76:47:08:63:40:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:27:BF:36:D6:91:D7:65:DD:4D:B0:FD:4E:84:B7:98:8B:86:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff4c7452-682b-36ec-b14d-0097bc8111b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c1:0d:11:05:a5:9d:35:cc:ea:ce:7d:14:86:bd:d8:40:63:
d0:8f:16:d1:41:76:c5:b9:fa:ff:56:25:f8:3f:77:5e:53:5e:
59:da:b4:5c:94:2d:17:c5:51:9d:f6:bb:c8:57:a1:1c:19:bd:
59:ac:97:1f:53:d1:1f:e3:3c:41:a8:48:6b:b7:e7:bf:73:f8:
c6:23:16:99:4a:24:e6:c4:99:e1:cb:81:94:6d:da:c0:c0:b4:
8d:50:02:1b:39:88:bc:a9:5f:25:61:d7:75:92:52:a3:58:1b:
32:7e:f4:5a:90:09:b3:d7:17:12:7f:18:cb:17:97:41:90:2b:
0c:f9:e2:b0:d8:9e:5a:e2:d0:ac:08:df:c8:f9:1c:3f:ba:8f:
89:f3:43:43:5c:1b:27:b5:13:42:a2:dc:60:fc:e5:98:7a:78:
b6:c2:64:f6:6e:20:ad:58:34:06:2a:bd:28:f5:90:1c:47:3f:
6e:16:fb:27:df:4a:d9:d6:dc:05:da:0d:96:7d:2a:b5:f1:e0:
22:ad:36:d1:36:ea:21:4d:cb:71:33:65:37:3b:53:29:e4:a7:
25:c4:7a:de:97:10:11:c8:c4:09:d7:3f:27:22:5c:cb:f6:ba:
f2:25:a0:39:79:1a:21:64:4c:05:1d:13:b3:d6:13:76:3b:19:
4b:bb:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:47 2026 by rpki-client