
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/59f7e654-bc16-33fe-b64c-e6181e6043bf.roa
File: 59f7e654-bc16-33fe-b64c-e6181e6043bf.roa (raw, json)
Hash identifier: /zr1865q+JxFjX5qLpJwxx7iAinopQwTkeJTEoIZxeo=
Subject key identifier: 19:3F:75:AD:4B:A4:C8:4D:DC:05:94:06:8E:C2:FE:67:55:74:B5:70
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5E805E7537A3423B385500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/59f7e654-bc16-33fe-b64c-e6181e6043bf.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 134.70.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:80:5e:75:37:a3:42:3b:38:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=8f4bec8e-df89-4247-b0e9-ca7bcacdd3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:3b:69:b3:8c:c7:c0:bf:85:a7:38:6d:c4:
f9:cf:24:2b:df:59:83:8a:71:a1:33:68:de:5c:04:
07:79:c5:05:6c:2b:46:b8:5f:0e:78:e4:f1:b3:c2:
99:e1:ea:48:27:5b:9c:19:38:47:8c:f6:d7:91:85:
6f:2a:b3:9f:73:9f:6c:58:ea:b6:dd:d5:ba:5a:52:
f9:7f:7f:30:53:43:a2:02:37:2b:8c:9a:67:13:e5:
f2:dd:d3:f0:3b:7b:58:0c:da:54:8e:f4:e5:da:f1:
99:2a:81:9e:29:04:31:53:e3:87:83:f0:5d:ac:32:
52:66:cd:5c:7c:fd:15:b7:78:92:96:c4:07:30:54:
5f:8e:f3:e1:1c:c7:da:05:9b:be:45:ec:a5:a4:69:
09:13:eb:6f:8b:12:3d:de:7e:22:97:a2:b5:1a:2a:
f3:0b:de:d9:72:0c:6f:2f:b5:d7:84:7a:94:60:32:
6e:aa:85:53:5d:af:b1:cf:dc:a0:0e:2b:88:34:1f:
05:6a:54:5f:e5:32:2b:1a:91:ba:2f:29:92:2d:52:
b1:17:d2:b0:e1:62:ea:6a:13:11:21:a1:3e:25:eb:
5d:c0:bc:dd:55:a9:56:57:97:50:3b:3a:02:61:3a:
1c:3b:ac:20:54:d8:16:09:de:9e:e5:07:e8:cc:e8:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:75:AD:4B:A4:C8:4D:DC:05:94:06:8E:C2:FE:67:55:74:B5:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/59f7e654-bc16-33fe-b64c-e6181e6043bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:e0:c9:b9:4b:59:0b:c3:47:7e:72:dd:19:ba:de:39:bd:41:
d1:dd:0b:63:d3:7b:5a:58:da:87:39:4f:fb:cb:2f:1a:41:b9:
c7:b1:62:13:1b:02:5e:e3:fc:c5:b6:3c:2b:08:ae:ab:2e:07:
c4:4c:83:56:c1:63:91:83:6a:68:9f:a3:eb:f4:e8:20:5b:a7:
50:7e:ad:b5:aa:57:fa:ac:e8:f1:a6:02:f7:00:e8:93:63:84:
52:2f:01:78:e8:a2:99:06:78:22:c8:cf:2a:03:20:84:1e:29:
a7:96:dc:b3:d4:67:d3:23:79:03:54:62:5e:c8:0d:dd:46:4f:
67:5d:4e:7b:d4:c9:49:08:f5:b5:dc:8a:9c:38:74:32:00:65:
98:d3:1a:0b:fe:f9:1b:82:b1:68:96:74:e6:00:f3:09:65:07:
fb:23:3c:15:fe:83:fb:75:76:37:11:b4:72:a3:3a:8a:0f:49:
eb:dc:b7:7a:70:d0:01:05:36:ad:a9:5f:c8:98:28:42:98:45:
69:f3:3f:03:08:1d:c6:a0:e5:ef:f2:94:77:09:dc:69:a2:87:
76:e0:53:27:9d:28:e4:44:e6:35:43:1a:8d:1e:d3:7a:ce:52:
a5:75:6c:11:67:f5:9e:52:5a:4d:6f:95:4f:3f:cd:53:20:a6:
68:dc:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:03 2026 by rpki-client