
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d7579f9-7fcd-32f7-9baa-73e848922f66.roa
File: 5d7579f9-7fcd-32f7-9baa-73e848922f66.roa (raw, json)
Hash identifier: Le+7Wa+5gKZ2fjOjFBifDorynPtgquWiUVFc7/fkafQ=
Subject key identifier: 7C:13:17:2A:A7:69:09:F8:69:AD:14:8B:16:09:F8:BC:67:00:DF:4D
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F10379E8CCADBE57704322700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d7579f9-7fcd-32f7-9baa-73e848922f66.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 134.70.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:9e:8c:ca:db:e5:77:04:32:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=bc0a6785-a517-4414-8457-118882803eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:29:13:eb:0c:22:af:25:c7:a9:4f:bb:b5:
51:f0:e4:02:50:ee:7e:b4:8f:06:f2:e6:ea:5b:a5:
58:0c:13:2f:68:16:4c:a0:17:60:e6:5d:13:35:65:
f8:82:af:70:dc:4a:32:01:a0:c2:f5:3f:83:de:1f:
83:db:5e:51:0f:e8:c2:a6:f7:1c:b7:22:53:82:82:
8d:21:f2:3f:10:00:80:5b:59:3c:61:f0:86:0d:87:
90:f8:99:23:21:9e:ed:78:a1:fe:a1:7f:29:a5:78:
02:4e:db:5a:fe:d2:37:55:dd:8d:ab:b0:bd:6c:f8:
c4:b9:0f:c2:23:2d:ba:d3:6a:e1:04:aa:a2:8e:4f:
85:29:76:8f:43:3f:00:81:ba:36:f0:7a:13:a1:22:
cd:29:58:e4:eb:f9:cd:fc:db:c4:54:e9:05:31:c1:
62:87:3f:79:f2:58:81:2e:22:04:59:d5:08:4b:ff:
36:4d:7f:30:3b:60:c0:71:ed:11:65:91:c2:e4:40:
1c:be:4f:f5:4f:a6:dc:ac:b8:76:5a:8c:fc:b7:15:
95:4d:7b:3d:65:f5:cf:93:7d:9e:4d:d3:af:93:09:
63:62:b5:b6:35:d2:9a:86:7c:04:9d:e8:e5:11:ea:
f5:b0:61:75:14:ce:ed:02:32:63:bd:fa:f4:96:c1:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:17:2A:A7:69:09:F8:69:AD:14:8B:16:09:F8:BC:67:00:DF:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d7579f9-7fcd-32f7-9baa-73e848922f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:7c:33:80:62:42:24:5f:04:48:bc:8d:05:92:df:77:f5:dd:
19:06:2c:51:98:5e:07:4e:8a:0a:d7:91:c8:fc:2e:7b:15:ec:
81:85:38:71:d4:f0:6e:8b:6b:5d:eb:7e:6d:62:bb:ee:9f:4d:
04:f1:e7:ab:36:d7:40:28:67:bf:36:95:91:ae:20:59:06:9a:
3b:12:44:57:e4:9a:a2:66:13:80:08:43:06:d3:ce:1e:c8:5c:
cc:37:af:5c:ec:ee:72:25:d9:4f:73:73:d6:c8:84:da:77:71:
30:52:18:94:62:0b:3f:09:83:40:1b:d8:89:5d:c1:14:64:87:
cb:6c:32:1d:f7:d7:ad:dd:52:bb:27:2d:29:3e:fb:43:2d:f7:
1c:7d:88:9b:7d:44:00:4c:39:45:16:4b:ac:b3:3d:9f:61:fd:
60:eb:3b:81:05:5e:a9:a7:0a:72:d8:55:19:3d:bb:25:d6:15:
90:76:2c:79:d1:89:30:a4:a4:c1:be:bc:07:9f:41:3b:9f:05:
36:fd:cb:5a:a1:1d:40:d7:57:03:a7:a0:ac:a7:e8:5b:3e:19:
6c:f1:26:f8:9b:cc:60:24:bf:65:9f:39:e6:54:29:55:6a:20:
09:a2:b5:29:29:be:a3:08:6a:58:53:3a:34:bb:a5:e2:5f:44:
55:8f:3f:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN56MytvldwQyJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
YmMwYTY3ODUtYTUxNy00NDE0LTg0NTctMTE4ODgyODAzZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZMpE+sMIq8lx6lPu7VR8OQCUO5+tI8G8ubq
W6VYDBMvaBZMoBdg5l0TNWX4gq9w3EoyAaDC9T+D3h+D215RD+jCpvcctyJTgoKN
IfI/EACAW1k8YfCGDYeQ+JkjIZ7teKH+oX8ppXgCTtta/tI3Vd2Nq7C9bPjEuQ/C
Iy2602rhBKqijk+FKXaPQz8Agbo28HoToSLNKVjk6/nN/NvEVOkFMcFihz958liB
LiIEWdUIS/82TX8wO2DAce0RZZHC5EAcvk/1T6bcrLh2Woz8txWVTXs9ZfXPk32e
TdOvkwljYrW2NdKahnwEnejlEer1sGF1FM7tAjJjvfr0lsH+UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwTFyqnaQn4aa0UixYJ+LxnAN9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWQ3NTc5ZjktN2ZjZC0z
MmY3LTliYWEtNzNlODQ4OTIyZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIB8M4BiQiRfBEi8jQWS33f13RkGLFGYXgdOigrXkcj8LnsV7IGFOHHU
8G6La13rfm1iu+6fTQTx56s210AoZ782lZGuIFkGmjsSRFfkmqJmE4AIQwbTzh7I
XMw3r1zs7nIl2U9zc9bIhNp3cTBSGJRiCz8Jg0Ab2IldwRRkh8tsMh33163dUrsn
LSk++0Mt9xx9iJt9RABMOUUWS6yzPZ9h/WDrO4EFXqmnCnLYVRk9uyXWFZB2LHnR
iTCkpMG+vAefQTufBTb9y1qhHUDXVwOnoKyn6Fs+GWzxJvibzGAkv2WfOeZUKVVq
IAmitSkpvqMIalhTOjS7peJfRFWPP44=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:12:50 2026 by rpki-client