
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6189edae-7a69-3db3-875d-bbc30a380d84.roa
File: 6189edae-7a69-3db3-875d-bbc30a380d84.roa (raw, json)
Hash identifier: tfN+OMGy9FqWd8TFekujEgfmUCUkyNLQWaHnSxeY64c=
Subject key identifier: 6A:89:B5:18:41:CB:1F:03:AB:41:02:70:52:F7:14:DE:03:E4:EF:AE
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CB981FAAE1BA6D67959F78080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6189edae-7a69-3db3-875d-bbc30a380d84.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 31898
IP address blocks: 134.70.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:fa:ae:1b:a6:d6:79:59:f7:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=3dcfd0bd-e445-4cb5-90c3-e31a0a242723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:83:93:9a:3f:6e:9d:f2:c2:f0:21:1f:16:
59:78:77:b3:17:17:dd:d0:d2:df:67:2f:6e:d9:42:
01:73:b8:a7:8e:d7:d8:a3:11:d2:fb:1a:08:0b:f6:
75:3b:95:da:f2:e9:34:75:91:ff:de:76:21:91:41:
2d:94:36:2b:b5:f8:20:22:f3:a9:a5:ba:fe:2d:93:
0a:5e:16:99:84:0d:d3:c8:05:81:86:38:9a:a1:2c:
0a:91:b1:25:86:84:53:89:39:c1:34:25:0b:05:94:
d3:fe:ea:76:37:a2:90:d5:39:62:8f:33:5b:37:ec:
fa:70:a3:11:f0:02:fb:d7:41:a9:a6:b3:ba:c7:d6:
3b:ed:c1:2d:f8:c5:e6:69:bf:73:07:69:1c:c3:c9:
62:a5:c8:3f:eb:6b:1c:6c:52:e7:10:df:0f:d6:d7:
c6:1b:55:80:a0:3a:49:08:d4:5a:9c:17:c4:19:fc:
4e:a3:85:84:74:5c:fa:f1:4d:73:39:ba:33:f4:cc:
58:07:bb:b1:75:35:d6:c6:a4:1c:5c:6f:d6:12:a2:
a2:b6:5e:af:e8:ba:71:50:c2:a7:65:f4:32:1c:47:
7b:f5:27:ce:2e:03:43:ec:36:00:85:2d:ef:81:62:
80:b2:2f:b7:58:ea:ff:b9:88:ce:df:e7:a8:03:b0:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:89:B5:18:41:CB:1F:03:AB:41:02:70:52:F7:14:DE:03:E4:EF:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6189edae-7a69-3db3-875d-bbc30a380d84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:1f:b2:1e:5d:a3:ee:4a:2a:6a:72:6d:8d:01:f5:fc:a6:bb:
f6:fd:0e:e6:f5:40:04:d5:05:51:6e:2e:4f:ba:0c:81:10:f1:
98:45:c3:cc:58:fa:ea:23:28:b1:86:f2:3c:68:d1:df:70:df:
99:6d:e2:c7:e6:d7:43:76:d1:48:d4:d4:5d:57:29:d9:28:c2:
4a:15:d5:ed:a6:6b:3b:b0:04:5f:33:23:c0:2c:42:af:cf:a4:
23:b5:bb:36:5b:ad:e6:a1:fe:c2:4e:a9:bd:d9:45:13:f5:f5:
4d:e0:f0:c9:50:cb:de:47:e9:c2:f4:ef:cd:10:e2:24:19:60:
0b:4b:d5:b7:f7:de:2b:6b:eb:d5:4a:42:32:78:85:a7:b2:20:
cb:a8:c1:dc:2e:c2:c9:1d:4d:19:f1:0c:10:5d:78:50:4a:db:
4c:8a:1d:84:07:44:f3:f1:34:cf:e8:56:03:f8:8f:00:2c:83:
3d:96:b8:13:3e:93:89:2d:54:52:30:16:1b:71:03:ce:e0:2d:
dc:6f:08:cd:2a:1c:27:f3:78:3b:1c:89:59:e6:2f:d8:8e:66:
55:5c:fb:9b:ab:03:aa:46:d0:6d:2e:06:5b:70:7d:e4:fa:16:
2a:86:f2:82:5a:89:37:a0:d0:cf:d4:a5:9a:a3:d5:8d:1e:20:
e5:af:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:10 2026 by rpki-client