
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa
File: c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa (raw, json)
Hash identifier: 8Io4OMqyZ/DewjOhxc0rok6dU+Eg+ODqUs096mrivUY=
Subject key identifier: E9:0F:FF:EA:34:AB:00:F5:6F:21:86:F8:21:FE:39:0B:B8:C4:47:A4
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CBF171E6789C3C979B477E740
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa
Signing time: Wed 04 Feb 2026 02:00:31 +0000
ROA not before: Wed 04 Feb 2026 02:00:31 +0000
ROA not after: Tue 05 May 2026 01:00:31 +0000
asID: 31898
IP address blocks: 108.59.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bf:17:1e:67:89:c3:c9:79:b4:77:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 4 02:00:31 2026 GMT
Not After : May 5 01:00:31 2026 GMT
Subject: CN=b51d4484-6617-49d8-9439-40e1ab0ddc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:3f:df:13:f8:47:4c:1d:9d:c8:e5:3d:72:
d5:39:4c:23:0e:8a:6f:ad:46:dc:84:ae:55:75:1a:
02:e6:73:1b:11:43:9e:5f:a0:1c:85:9b:58:71:76:
04:fb:0e:34:c8:da:2a:2c:7a:67:7d:ab:6f:70:d9:
34:66:d1:b0:a0:c9:ed:a1:9c:4a:49:8c:1a:f8:8e:
e2:d2:66:c1:59:b7:41:d5:19:f4:11:ea:73:58:fc:
9e:62:3a:60:27:45:76:ed:52:1a:cf:a2:d7:6f:51:
28:82:4c:d9:cc:70:1a:4c:03:ce:9e:ad:ba:f7:d6:
2f:a8:2c:89:32:30:69:bd:29:6c:75:c6:fb:5f:79:
b1:80:c1:12:e9:e7:d2:54:38:de:3d:66:7b:75:e4:
f5:6e:e9:75:ec:e2:db:38:b4:71:d2:c4:3e:e2:d3:
ad:dd:2a:2a:b4:e9:3d:52:7f:32:3d:78:da:87:21:
6e:00:71:ed:29:2b:20:8e:4d:9c:3c:57:c5:18:36:
db:ff:92:80:01:16:a4:d7:68:0c:77:1d:79:5f:e3:
cd:3b:95:80:b7:bf:76:49:36:56:15:3f:8f:59:f6:
5c:6d:02:5c:f4:43:c6:68:a5:aa:d8:c7:8d:06:5e:
18:43:97:17:f9:30:68:b5:89:f0:35:80:73:5e:96:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0F:FF:EA:34:AB:00:F5:6F:21:86:F8:21:FE:39:0B:B8:C4:47:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:18:3a:61:cd:60:80:68:77:80:22:aa:aa:62:9e:8d:43:a0:
29:90:ba:15:06:c9:10:e1:85:d4:9e:4e:73:25:89:5c:55:c8:
1c:7e:9f:76:32:a3:83:db:15:dc:19:a4:08:80:68:37:0f:5a:
99:1e:e2:2a:b9:c1:20:f1:f5:25:bd:6a:87:3b:18:8e:9b:6c:
7c:8e:f2:07:54:81:9a:1c:46:54:70:ff:2c:2d:60:52:21:cb:
3a:3c:b8:4a:94:83:4d:dc:11:33:a7:34:d5:8f:4c:92:2a:4e:
3f:34:33:e7:8a:56:a9:96:c4:3f:da:66:e5:63:4d:69:35:f1:
8a:96:f9:83:be:f2:47:ef:84:4b:09:9e:a4:03:de:a4:c4:e1:
4c:48:98:6c:c6:69:51:a9:ca:70:cf:3e:3c:c8:8e:a7:a2:35:
04:9c:41:20:10:a7:95:7b:0b:ac:3d:b4:5b:79:3c:4c:d4:76:
6c:94:2f:1f:58:7b:2a:a0:6b:a0:3b:df:2e:82:7c:95:cb:69:
bf:e7:bd:6b:dd:14:ab:40:89:1d:a8:18:99:fa:ac:f6:ed:32:
0c:2f:86:49:1d:9e:48:a1:32:25:59:ae:2f:ea:3a:8e:b1:25:
26:91:8a:82:51:7b:89:cb:61:c9:57:64:d0:93:31:90:dc:d4:
78:0d:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:43 2026 by rpki-client