
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cbca1f7-85ba-3250-b351-05cf651470e9.roa
File: 8cbca1f7-85ba-3250-b351-05cf651470e9.roa (raw, json)
Hash identifier: 3TAXTT4txRZXMEENJoLjbLwvuXm8Dnrbywg8X9oa8Jo=
Subject key identifier: E1:C4:BC:CB:79:99:52:E2:92:98:18:92:9E:BD:B1:A8:42:28:4D:76
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA2715991FAB10CACABA5D80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cbca1f7-85ba-3250-b351-05cf651470e9.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 134.70.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:15:99:1f:ab:10:ca:ca:ba:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=19bbc604-fd2e-4e1c-8521-6a2b92d146cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:2e:de:d1:fa:09:c2:c8:2d:e5:53:48:dc:
2e:11:53:e6:2b:63:ab:9e:a3:19:0e:2f:b5:f7:7d:
28:73:13:6b:38:c6:04:66:f1:f7:36:7f:5f:fb:73:
96:60:bb:b2:20:12:ae:d9:e8:3b:8d:07:52:46:8d:
7e:70:05:e5:d1:48:b3:3d:b7:de:0e:74:14:fd:43:
32:ec:22:2e:7c:ea:3c:d5:9e:10:42:a5:bb:65:89:
bc:0e:9b:a4:f6:60:a4:01:c1:4a:e1:d6:b7:60:35:
49:dc:6e:71:b3:91:90:66:75:53:68:bc:34:ef:96:
3a:45:8d:ce:27:aa:2e:71:ec:ab:f1:37:d9:40:fe:
92:7b:0f:d9:3c:06:a2:37:92:b4:bf:2e:24:ac:b4:
c4:39:9d:bf:d7:ad:d2:d3:af:46:65:dc:70:32:f9:
a3:76:29:e7:94:e0:f6:e7:ec:91:c0:e2:ba:d9:98:
6a:1f:71:f5:39:35:78:17:21:5a:df:0a:44:a8:6c:
65:82:da:64:d9:dd:6b:47:45:a7:be:a3:cc:b8:84:
0f:03:98:ee:91:21:45:90:9d:65:82:82:20:2c:5c:
e3:b2:89:db:3d:4f:c7:47:f0:8b:5d:83:f3:a0:55:
19:7a:92:d5:4e:49:35:39:1d:5e:a2:e6:01:9c:4a:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C4:BC:CB:79:99:52:E2:92:98:18:92:9E:BD:B1:A8:42:28:4D:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cbca1f7-85ba-3250-b351-05cf651470e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:52:cf:b1:0f:68:0a:f5:67:b5:5d:eb:62:9b:59:66:c1:9e:
da:c3:eb:a6:87:bb:a0:98:f9:46:13:81:78:75:02:77:8d:75:
b8:d0:ec:72:0f:2c:f9:3d:93:ee:f7:73:1b:61:7f:fd:d4:b7:
29:ac:e1:83:02:32:76:cb:3f:9b:ef:f7:87:b9:2c:f9:b7:45:
bf:cb:4b:1d:42:7b:8e:8c:a5:25:69:00:13:9a:00:8c:39:15:
64:2b:b9:65:bc:32:ac:eb:89:a4:c6:60:c4:cc:62:c2:07:93:
05:98:c6:a6:08:c5:13:79:27:87:fe:76:8c:15:aa:e9:5f:3e:
ee:f7:36:20:b9:ce:59:f4:ab:37:86:de:ff:4c:00:21:04:37:
20:8a:80:13:ef:82:27:6c:19:90:cd:16:92:25:2c:b3:8d:ae:
9a:9a:cb:64:23:b3:ad:5e:c6:b5:d3:76:00:94:45:e4:49:4c:
f8:d5:ac:09:3e:2e:b0:7f:a4:c8:91:8f:22:6a:93:62:18:95:
72:c8:51:e5:bd:1f:60:f8:e7:f7:45:9e:af:a4:99:c1:4e:ff:
2a:57:29:f1:31:55:5a:98:07:1d:4f:cf:7e:b8:74:5c:3c:e1:
51:93:7c:f0:68:bf:10:72:81:5f:72:e1:d1:03:72:9b:e1:18:
99:fb:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:57 2026 by rpki-client