
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
File: d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa (raw, json)
Hash identifier: bxax0rWX83odnuXHg9ydtk7aOq/P6nHTlZhRLzjYApM=
Subject key identifier: 00:96:66:9E:2C:24:31:2F:AE:81:B6:AE:67:14:44:56:D5:A6:3D:33
Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial: 010D0C9F4328584CEA5CF17ADFDEF8626B5F3220
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 8070
IP address blocks: 137.70.156.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:f1:7a:df:de:f8:62:6b:5f:32:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=8b01b1fe-c342-4c58-9f85-d529abd16acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:3d:65:ec:61:6c:bd:c2:0f:04:c7:65:4e:
d3:4b:85:82:e3:a7:8c:01:09:28:b0:9c:5a:fd:6e:
67:e0:5d:e4:29:39:c2:2f:5c:1c:04:38:79:48:3f:
6c:07:aa:d5:9c:33:1d:34:eb:41:48:3d:1b:2e:74:
dc:a3:ff:95:c4:a1:88:94:9b:1c:55:c7:91:e0:76:
db:37:6d:a4:49:66:31:21:3c:69:00:9f:7d:80:48:
17:fd:23:d9:27:0d:f8:10:da:3a:fa:f1:4b:ac:0d:
af:61:62:51:a1:70:dd:9a:d8:04:33:10:5b:9f:7b:
9f:68:4a:9a:1d:ff:c0:92:08:7d:09:39:1f:3c:b4:
3e:2e:a6:7a:f5:7f:92:23:a0:39:51:6d:5a:46:e5:
b5:7e:11:c6:34:ac:22:f5:58:da:29:ad:69:11:ea:
65:44:96:78:6e:f1:ad:b4:c3:b1:7b:d3:04:2d:f5:
a0:4e:9f:2e:d8:5f:a2:82:31:5a:64:d6:65:f6:08:
b7:20:ed:c8:7b:2b:80:49:c2:25:66:44:11:12:a6:
a4:82:06:f0:87:e0:3d:fe:06:b6:a1:fb:43:17:e5:
64:a0:6a:fe:30:0c:50:22:8a:1d:60:41:3f:5b:bf:
49:23:88:91:32:ce:13:06:ac:08:7c:ca:29:58:43:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:66:9E:2C:24:31:2F:AE:81:B6:AE:67:14:44:56:D5:A6:3D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
X509v3 Authority Key Identifier:
keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
sbgp-ipAddrBlock: critical
IPv4:
137.70.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:db:42:1a:c9:5d:e5:b3:75:67:69:fa:c0:cd:3b:8d:8c:ca:
ed:18:c3:21:bb:c3:bc:0b:ff:68:45:63:b8:36:0f:9b:b1:47:
8b:47:f3:41:9b:dc:c1:df:5e:3b:53:08:39:fe:96:a9:88:b3:
c8:54:eb:61:76:a8:48:84:51:2a:bc:84:64:a0:6b:3f:10:b9:
9c:d3:b6:ec:23:45:13:7e:f4:6f:9a:93:95:24:55:51:54:fb:
c3:63:3a:52:f9:20:e1:e4:59:74:bb:51:70:a6:88:7c:ee:bd:
60:8f:fa:da:98:49:1f:e8:36:a3:32:14:9f:d4:eb:f3:53:5f:
6f:e6:dc:cf:fd:c9:08:5e:71:23:6d:81:44:5a:4e:6b:9a:ec:
9a:d7:28:1e:c7:99:87:70:fe:cb:20:50:66:09:4e:e8:31:57:
1b:dc:67:d6:7e:a6:0b:d9:2c:8f:b8:c1:3f:49:7b:72:9a:ad:
53:37:b4:94:87:7a:06:e3:f9:98:38:01:59:cf:c6:0e:cd:89:
4f:3f:0e:a9:0a:9c:8c:a4:37:75:ec:5e:4b:71:1c:24:7f:45:
f1:e8:48:b8:03:fe:80:78:a9:4d:60:65:be:52:60:44:44:f3:
ab:23:db:21:6b:0d:fc:d2:90:d0:4a:a4:c3:d7:c1:97:54:11:
0a:95:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:34 2026 by rpki-client