
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/425cb91b-5eea-3250-948a-db9be357d3b5.roa
File: 425cb91b-5eea-3250-948a-db9be357d3b5.roa (raw, json)
Hash identifier: 7ydwytVPnGvXunNTpMDFAygaISGyeUJsQ1uYhURqrRc=
Subject key identifier: 2E:AA:75:39:86:EF:EB:C9:A9:98:76:15:70:E8:7F:4B:A4:70:0A:60
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CE62CAE9CE20355AB6AA83400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/425cb91b-5eea-3250-948a-db9be357d3b5.roa
Signing time: Wed 18 Feb 2026 02:00:31 +0000
ROA not before: Wed 18 Feb 2026 02:00:31 +0000
ROA not after: Tue 19 May 2026 01:00:31 +0000
asID: 54253
IP address blocks: 207.127.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e6:2c:ae:9c:e2:03:55:ab:6a:a8:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 18 02:00:31 2026 GMT
Not After : May 19 01:00:31 2026 GMT
Subject: CN=e12c1d3b-4f01-492b-8884-56c78ec073f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:2c:b0:1e:e4:a5:ce:b7:2d:30:35:3d:9a:
21:39:d6:c2:89:4e:d9:e2:d1:53:d3:13:1f:23:61:
c1:2e:85:1b:76:82:d7:93:c2:8c:b0:06:71:34:9f:
a7:c2:78:68:68:91:6c:26:b8:39:e2:ae:33:36:bb:
6e:d3:c0:1c:0f:6f:8a:29:95:21:13:1a:48:be:8f:
a7:1b:05:5a:ed:f8:c3:57:3f:01:cf:48:df:96:17:
58:c5:50:45:a4:00:96:3f:2e:02:6f:db:96:5c:8b:
20:41:2e:40:48:7f:4d:60:d4:d4:54:7c:5b:a1:20:
ef:ba:8b:b8:9b:7a:43:ee:4a:93:e1:01:da:38:e5:
0a:11:14:fa:c9:38:cc:88:c7:02:01:d2:f6:74:35:
02:4f:9e:d3:fc:38:04:11:c1:7c:1d:dc:83:82:70:
f4:10:fe:ce:88:69:bc:72:40:36:95:40:31:c3:1e:
6d:d9:82:da:be:92:6b:7e:01:85:63:a7:b8:f7:04:
33:61:54:81:65:bf:47:1f:c5:53:ed:1a:47:fd:fd:
aa:0b:26:f6:99:69:8d:24:d3:48:0e:d3:95:3a:30:
89:47:75:9d:dc:63:37:4c:b6:1d:96:4f:65:f0:c6:
af:d6:bb:00:f8:be:f0:c9:4e:fb:7e:84:1b:ba:42:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:75:39:86:EF:EB:C9:A9:98:76:15:70:E8:7F:4B:A4:70:0A:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/425cb91b-5eea-3250-948a-db9be357d3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.127.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a2:50:1b:0a:05:22:6a:ed:cb:a4:f2:d2:7c:dc:40:81:74:
50:e3:42:2e:a0:07:73:aa:24:19:29:cc:2d:b8:a7:21:81:13:
7f:af:cf:4c:a1:62:28:45:b7:0c:f4:5f:9b:9c:e8:b4:08:ef:
f8:8d:0b:c4:30:c1:6c:41:94:15:57:94:c5:a5:00:cf:7c:78:
fe:f8:47:11:ca:17:ae:2b:8f:1c:c2:99:40:92:d7:ea:78:a9:
74:bc:df:87:11:8f:3d:08:00:86:6c:e9:14:82:b0:51:74:0f:
2b:2e:05:cb:66:d6:88:d7:d0:74:c6:7d:44:3a:09:64:07:e4:
89:74:a0:72:48:72:28:d3:e3:6d:19:4f:86:ff:7b:fc:75:59:
b0:27:f4:b2:79:f2:4a:1c:05:56:73:85:75:2f:24:ac:e5:b8:
96:ea:30:d7:6b:1a:1b:bd:72:f6:40:cb:26:56:b5:ef:fd:10:
82:05:bb:c7:ca:2b:59:29:a9:d9:fa:94:d1:87:27:e5:9a:91:
15:79:43:bf:5a:a2:e6:56:70:f6:b7:01:43:d4:ed:70:5b:e1:
aa:7f:49:dc:ac:69:ce:94:07:95:78:a9:48:15:0e:cd:65:e8:
71:04:7b:f5:17:e2:0f:a5:ce:57:1e:8f:81:b8:28:13:ff:b1:
d1:0a:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:10 2026 by rpki-client