
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ab3b341-a8e8-313f-b996-5aaec49c2685.roa
File: 0ab3b341-a8e8-313f-b996-5aaec49c2685.roa (raw, json)
Hash identifier: 2THOOQ30c9qdEnM2GcIEM1G/AKeNbLsaqV1uusaJHKY=
Subject key identifier: 7B:33:46:5B:9B:40:BD:DC:58:70:36:01:78:BA:F6:A8:65:C4:58:11
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA272F1C5C4FBA17DAAE7880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ab3b341-a8e8-313f-b996-5aaec49c2685.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 134.70.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:2f:1c:5c:4f:ba:17:da:ae:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=e30a2ecd-36fa-47c1-9ca4-ef8a5b0ee9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:64:f6:f9:ef:0b:9b:d5:d9:04:b4:50:cb:dc:
00:d1:eb:d4:ca:d1:a2:90:ec:74:4f:40:6b:8f:2d:
72:0c:39:1e:6b:48:1e:b7:18:24:e4:cc:3f:d8:65:
f1:3a:66:bf:91:04:f0:43:00:a0:81:bf:86:06:ee:
d6:d4:37:de:8b:0f:a0:1e:e0:1d:f4:7e:f9:92:21:
93:cf:26:c6:ce:4d:58:72:a3:0a:d8:92:22:93:0e:
18:03:34:9f:65:6b:fe:a1:99:52:55:18:29:0d:ab:
7b:cf:50:da:5c:55:48:4f:4a:07:3b:69:23:c0:91:
77:9f:7f:87:91:aa:89:2a:a3:9f:50:c3:b0:56:6b:
b0:46:3a:6e:c9:9e:07:b8:47:57:f6:54:e1:0c:2f:
23:73:da:58:ee:30:c5:b0:cc:9b:84:8e:fe:5e:77:
9d:13:0f:f2:15:56:c7:3b:ad:11:dc:29:3e:88:d8:
55:85:e3:6d:f9:ff:65:6b:33:a8:e1:26:d2:b5:c0:
b7:aa:d8:d0:e8:53:ae:3a:f5:2e:7a:49:36:23:df:
74:b2:b1:0d:c8:68:ea:62:8a:ae:2f:aa:61:d6:6e:
82:6c:e9:7b:a5:ee:e8:a1:6f:50:81:91:8d:5e:46:
58:ad:f9:c3:69:ff:60:58:d9:6e:b7:df:3c:4e:19:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:46:5B:9B:40:BD:DC:58:70:36:01:78:BA:F6:A8:65:C4:58:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ab3b341-a8e8-313f-b996-5aaec49c2685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d6:ec:14:90:d0:25:90:a9:c5:93:b9:c9:42:88:26:d9:39:
e5:b6:7f:e0:07:1d:03:32:1d:6b:1c:15:80:c8:28:0b:c2:36:
0d:8d:33:f0:84:21:64:ee:0f:a5:eb:d4:c5:cf:45:08:ab:8b:
d4:c0:d3:aa:28:d0:ab:52:c5:cf:23:c9:24:02:59:6d:df:84:
00:3d:91:20:70:25:1e:4e:47:33:4f:8d:e6:20:65:f9:e1:1d:
58:73:2a:28:6b:12:be:05:d4:f6:d2:9e:47:22:de:f6:e0:08:
ac:7f:3a:b1:6d:c5:12:a5:5c:6f:d7:48:ed:9c:8d:12:3c:90:
5c:3c:b6:99:0d:c9:34:12:97:af:87:69:96:9c:c4:f8:05:22:
27:ef:2d:84:f5:91:6f:86:ef:4f:df:9c:01:c7:27:48:29:84:
bb:6c:d1:4a:d7:a9:ea:b6:98:af:0e:87:d0:66:98:53:44:24:
3f:2c:b9:66:e0:74:09:59:fe:7d:99:83:26:b4:f7:f8:65:83:
16:e9:71:5f:51:bb:02:a5:81:3e:90:40:df:9d:67:1c:fc:70:
6b:a1:43:d0:6f:8c:ee:f7:7e:51:23:ab:dc:9c:c9:ae:10:72:
a6:35:64:4f:f3:aa:b5:51:f3:47:e4:b8:68:fa:d0:45:ae:3f:
eb:d7:ff:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy8cXE+6F9queIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
ZTMwYTJlY2QtMzZmYS00N2MxLTljYTQtZWY4YTViMGVlOWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WT2+e8Lm9XZBLRQy9wA0evUytGikOx0T0Br
jy1yDDkea0getxgk5Mw/2GXxOma/kQTwQwCggb+GBu7W1Dfeiw+gHuAd9H75kiGT
zybGzk1YcqMK2JIikw4YAzSfZWv+oZlSVRgpDat7z1DaXFVIT0oHO2kjwJF3n3+H
kaqJKqOfUMOwVmuwRjpuyZ4HuEdX9lThDC8jc9pY7jDFsMybhI7+XnedEw/yFVbH
O60R3Ck+iNhVheNt+f9lazOo4SbStcC3qtjQ6FOuOvUuekk2I990srENyGjqYoqu
L6ph1m6CbOl7pe7ooW9QgZGNXkZYrfnDaf9gWNlut988ThkgfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHszRlubQL3cWHA2AXi69qhlxFgRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGFiM2IzNDEtYThlOC0z
MTNmLWI5OTYtNWFhZWM0OWMyNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3W7BSQ0CWQqcWTuclCiCbZOeW2f+AHHQMyHWscFYDIKAvCNg2NM/CE
IWTuD6Xr1MXPRQiri9TA06oo0KtSxc8jySQCWW3fhAA9kSBwJR5ORzNPjeYgZfnh
HVhzKihrEr4F1PbSnkci3vbgCKx/OrFtxRKlXG/XSO2cjRI8kFw8tpkNyTQSl6+H
aZacxPgFIifvLYT1kW+G70/fnAHHJ0gphLts0UrXqeq2mK8Oh9BmmFNEJD8suWbg
dAlZ/n2Zgya09/hlgxbpcV9RuwKlgT6QQN+dZxz8cGuhQ9BvjO73flEjq9ycya4Q
cqY1ZE/zqrVR80fkuGj60EWuP+vX/4I=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:33 2026 by rpki-client