
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/54aeba30-1260-3b71-905d-3c9a8a239f1e.roa
File: 54aeba30-1260-3b71-905d-3c9a8a239f1e.roa (raw, json)
Hash identifier: OswzU5Lvh/xDqVSDaVd5awIy4bctC+0AqjU6BpPd0M8=
Subject key identifier: 0A:8A:C2:43:BC:4B:DF:FD:E6:19:D1:ED:25:A5:38:39:56:F7:A1:F9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F1CC7BEB448364A574E635780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/54aeba30-1260-3b71-905d-3c9a8a239f1e.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 31898
IP address blocks: 134.70.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:be:b4:48:36:4a:57:4e:63:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=f7ea577d-c9d8-46bb-8a08-89b0ce5960cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:df:a5:1d:3c:5a:ff:0b:10:f1:9b:44:b2:
25:b0:a2:01:89:cc:62:57:53:6a:71:d8:da:33:88:
84:19:6f:5e:fe:98:08:8e:35:08:4c:9c:89:11:4b:
ae:dc:d6:e1:4a:ad:05:30:b5:de:3d:be:74:95:6b:
8b:3a:a6:49:8d:bd:02:f2:75:b2:ec:d9:c1:64:48:
d9:31:dd:e4:cc:17:96:67:f3:b2:ba:44:34:57:fa:
9e:c4:a5:5c:8a:8b:34:51:38:ca:78:be:de:bc:f9:
ae:07:e3:60:45:63:aa:b0:86:6e:c1:ae:62:bf:b4:
92:ae:5b:ad:0b:7c:65:03:cb:83:52:0a:72:04:20:
a2:d3:87:ae:0f:59:be:68:92:02:3e:1a:69:9b:f2:
f1:4a:78:40:9b:73:8c:99:a6:1c:f4:a6:bf:8b:40:
4d:a7:84:d0:42:80:1e:96:4d:32:73:f7:68:b3:e7:
15:de:d9:19:b1:f4:e7:30:25:3c:0f:c0:c0:77:12:
51:ff:21:96:82:cc:45:fb:2f:a7:46:08:ff:8d:7d:
5b:52:83:35:64:68:31:6c:f3:b2:61:ee:17:83:0a:
3d:34:a8:d4:87:6c:25:26:98:5d:2b:65:26:e2:c9:
26:c9:5c:26:93:7d:b6:6f:ad:99:88:af:19:74:62:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8A:C2:43:BC:4B:DF:FD:E6:19:D1:ED:25:A5:38:39:56:F7:A1:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/54aeba30-1260-3b71-905d-3c9a8a239f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:19:e8:17:09:9b:5d:ef:59:af:8d:fb:d5:18:22:62:d1:b3:
4d:a6:3c:1d:2d:3c:8c:a9:18:f8:8c:1f:07:0e:22:91:8d:59:
dd:34:0e:10:29:73:a9:7a:41:57:f9:58:f2:84:84:04:9b:fa:
a4:e6:5b:ef:81:8e:78:df:87:7f:bb:00:ac:5b:f0:c8:d9:33:
82:dc:f3:de:83:ce:db:22:78:80:10:a0:ad:f8:7b:0a:0c:d4:
21:dc:8c:d2:4f:95:a3:f1:bd:22:d4:a3:7d:6a:56:73:f6:ab:
b9:39:10:bf:6c:d9:63:fe:d6:8d:b5:2f:8b:7c:8a:24:6f:a8:
77:ef:24:da:4d:37:89:7c:57:96:ba:f0:40:43:2f:65:a4:fc:
5e:f8:7a:ea:af:a0:39:ae:38:d4:ff:67:92:af:f0:35:29:a6:
ef:e6:b0:15:b4:d1:9a:35:31:f4:63:83:9e:1d:5c:4d:ae:e8:
d0:57:ef:59:6c:9d:2f:d8:43:47:bc:04:c2:52:4a:31:f2:61:
fb:74:9a:2c:03:bb:42:be:89:74:73:69:49:b1:f9:2e:d7:07:
5a:50:5a:13:9d:68:f1:67:32:40:9c:d5:32:e3:b1:cd:18:ff:
ad:c1:7f:b4:5a:79:c7:23:b1:89:8e:91:ac:36:87:ce:7d:67:
21:27:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:56:19 2026 by rpki-client