
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c7f59d6-de4e-3640-8107-95106f12eb2b.roa
File: 9c7f59d6-de4e-3640-8107-95106f12eb2b.roa (raw, json)
Hash identifier: VApNlD/pED1gY9kWbYUbmIXc/ykakRjSWTXQhJFqsTU=
Subject key identifier: FC:C3:7E:06:CC:05:8A:95:81:08:E5:31:5D:0E:9A:F8:72:18:5B:A3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E4AEF429AF4D0C134AA410780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c7f59d6-de4e-3640-8107-95106f12eb2b.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 31898
IP address blocks: 134.65.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:42:9a:f4:d0:c1:34:aa:41:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=f757f9a4-d3a7-42d0-b3d6-b03840972064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:7e:ca:92:43:98:8c:7e:53:7f:37:ae:b3:
6d:6c:ca:ab:d6:56:3f:d2:ba:ed:a6:6f:ff:88:33:
3e:44:14:c7:eb:b8:26:24:48:a5:8a:07:47:72:c5:
12:f7:a7:db:54:3d:b9:36:fd:61:ff:1d:a8:cf:5b:
ae:97:c9:9d:c8:e2:d3:11:fc:20:a6:3f:8f:c8:6b:
29:31:cc:c7:96:10:e0:21:9e:fa:87:e9:2e:25:88:
e6:33:fb:6c:13:1c:ac:d8:ce:09:30:29:2e:a5:2f:
33:8f:99:68:ce:11:ec:43:24:12:0e:d2:62:6f:02:
df:92:2c:d7:0f:15:9d:0f:32:7c:51:ad:2e:6a:28:
c5:98:2b:19:f1:d8:63:6e:1d:5b:99:64:bf:d5:96:
05:65:71:d9:57:f5:e2:98:37:48:8a:d4:e0:a9:be:
29:1c:f9:8a:b5:68:8b:12:92:b6:55:48:c2:57:bc:
08:28:59:8a:9a:ce:9f:6a:d7:e1:d9:d4:78:b5:bd:
ec:b6:4d:69:2c:ca:75:7a:5a:66:9c:ea:64:5e:03:
e3:89:b0:08:9a:2a:05:db:a8:be:25:52:93:23:b9:
4d:f9:1d:ff:2a:41:23:f6:92:69:06:92:e4:5b:6c:
0b:e7:99:94:69:42:45:32:85:89:22:e0:f4:c6:05:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:7E:06:CC:05:8A:95:81:08:E5:31:5D:0E:9A:F8:72:18:5B:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c7f59d6-de4e-3640-8107-95106f12eb2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.65.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e5:82:b0:7f:bb:41:8a:01:6f:c9:0e:7c:d2:1b:db:6f:2e:
68:69:21:f6:77:9e:cd:b4:57:b3:05:6a:6e:1f:3b:7d:68:b3:
15:46:c6:6c:82:bf:b2:12:fe:ac:0f:dc:ad:4a:11:b4:fb:16:
b7:b8:b7:f5:2f:3e:a3:12:bc:00:a0:7d:11:d1:4c:e8:db:c1:
ca:72:21:89:11:b6:3d:09:ec:6f:50:4d:ac:f8:ba:09:f5:96:
73:dd:da:d6:5d:ab:1f:a5:dc:4d:19:45:0b:45:da:94:e9:52:
7d:f6:35:f6:58:e4:1c:76:48:f6:c9:de:06:39:d2:31:af:cf:
d9:0e:48:e1:c5:ed:5d:71:58:f4:00:f8:bf:cf:02:74:9a:d7:
ff:30:be:67:b8:c0:93:93:31:0a:36:dc:96:d0:33:80:c9:e7:
fb:8b:44:3c:19:13:3b:dc:fd:f1:fa:42:45:2d:46:47:32:dc:
fc:0f:5b:a3:d6:94:b2:ea:80:96:f8:cd:33:c7:9b:5d:fa:27:
52:ab:df:0b:9b:3d:d1:d4:9d:64:5a:ed:ad:3d:fe:40:64:00:
63:c2:5e:5e:ef:18:83:b7:14:d6:f2:7b:fe:32:c5:eb:c9:46:
8f:65:26:9e:89:a5:44:a3:b3:87:cb:8d:5d:59:30:32:37:a8:
1c:85:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:52:18 2026 by rpki-client