
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a5a1d32-c301-3d60-8011-0f2d37d60580.roa
File: 8a5a1d32-c301-3d60-8011-0f2d37d60580.roa (raw, json)
Hash identifier: +rZqILlwVc08MM9vQAUXzJi/KGfD/iElZLZFZAR58OE=
Subject key identifier: F1:47:58:62:BD:8E:70:DD:D6:7B:E2:8D:A5:B9:5A:5E:04:3F:6A:93
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EA786DD81850FEAA68C791C60
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a5a1d32-c301-3d60-8011-0f2d37d60580.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 54253
IP address blocks: 134.185.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:86:dd:81:85:0f:ea:a6:8c:79:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f89f764d-882b-4e18-a220-7889fc90888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:cb:0c:3a:35:03:16:83:8c:aa:90:6c:38:
40:aa:b1:e1:be:bd:02:eb:4c:8a:52:a8:9b:22:66:
75:2b:a1:ff:54:7a:a5:25:59:93:de:67:5e:9b:d3:
29:85:71:3d:27:08:96:67:b6:3c:19:cd:86:f5:75:
cf:94:a1:f7:d8:fd:16:51:61:f5:e8:8f:4c:12:99:
40:cb:f5:4d:9a:1c:8f:52:96:a5:28:87:34:7b:c8:
11:4e:f7:45:3e:2f:48:24:f9:87:aa:56:dd:38:61:
fa:7d:63:36:62:98:17:d9:3e:44:0a:50:ec:d7:58:
35:8f:a8:9c:6d:69:a0:6c:7c:85:41:7e:79:d5:07:
2e:44:f9:23:4d:55:4d:55:69:16:65:73:cb:cd:da:
1c:0f:63:fd:3e:90:bd:62:07:4a:6f:d3:a8:61:d6:
48:eb:6e:9a:0a:fa:c4:72:20:6d:c7:c3:2e:cf:55:
92:5d:0d:08:e4:af:31:3b:fb:1a:aa:0e:72:1f:ba:
d8:c9:c9:f2:66:13:f8:f2:9d:59:36:0e:fc:af:db:
83:9a:c7:29:ba:70:54:16:1e:9d:e8:48:81:80:3a:
ea:eb:86:7f:d2:1a:c1:ab:fe:28:57:09:07:aa:98:
e0:d4:f6:e6:d0:86:60:e2:92:72:6d:ca:40:a8:e6:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:58:62:BD:8E:70:DD:D6:7B:E2:8D:A5:B9:5A:5E:04:3F:6A:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a5a1d32-c301-3d60-8011-0f2d37d60580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.185.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:a9:2f:08:90:34:90:22:7a:60:b1:27:b7:f7:b8:6f:0a:c7:
66:af:fe:2e:f6:c1:90:be:12:3b:5b:00:89:a4:45:b8:88:ee:
57:ec:3e:01:27:da:f2:c8:53:9b:57:d0:a8:17:76:87:8e:37:
bf:35:c4:26:4b:e7:38:41:10:48:8e:8e:82:48:85:f8:97:b8:
ba:b3:1b:94:82:d3:aa:71:e3:9d:32:40:88:b5:aa:5d:f7:6f:
5c:51:10:30:35:ae:1f:e7:6d:b5:3e:51:ab:57:19:bb:02:d8:
56:b5:b3:a6:b4:97:bb:03:3d:01:15:ae:81:a9:fa:d1:48:b9:
03:ca:2d:a5:e8:2a:d4:0f:94:64:8f:f6:75:fe:3d:4f:3d:54:
59:67:7e:58:8b:1c:51:b5:72:b9:55:22:b5:bc:01:91:0e:05:
7a:4d:94:f4:49:bc:d7:4d:98:07:6c:10:d4:7f:5e:d5:2b:27:
ea:9e:c2:31:5e:26:9c:55:05:6f:11:7f:a9:77:4f:61:ac:a3:
42:ee:18:2c:97:42:b6:f1:7a:c6:d5:8d:89:c7:40:d2:07:ca:
2b:dc:50:6e:f1:f3:15:3b:ac:7f:2a:00:4b:b6:3c:bf:ca:a6:
2f:e2:f7:67:2c:91:6d:d7:1e:9c:d0:f5:f6:21:0b:9c:29:08:
7e:ca:48:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:01:28 2026 by rpki-client