
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa
File: 8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa (raw, json)
Hash identifier: k10fOsZfISstz0uN0HM33D5cPNwX7iKuGJLkO8rT8Gk=
Subject key identifier: 7A:1A:8D:D2:CF:90:B7:8C:58:C3:FC:67:6B:8E:86:42:1D:1F:62:F8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F497331DF261D5D2196EA5880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 54253
IP address blocks: 134.185.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:31:df:26:1d:5d:21:96:ea:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9da935be-72aa-468c-b8d6-d2692d01b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:4e:6d:53:03:5c:95:8b:51:db:db:27:e8:
d9:29:e1:3d:5e:74:4a:68:9e:21:7d:f6:06:6e:dd:
20:48:62:a8:b0:ef:de:00:d6:41:28:83:1b:59:dd:
2d:ac:c0:10:84:98:df:12:03:a0:40:df:17:a1:df:
29:f7:bb:4b:f4:b8:a7:18:9c:0f:6e:d1:93:bc:13:
d0:57:3a:28:66:0a:3c:4d:e4:5a:64:33:43:93:78:
e0:b4:cc:be:86:04:a7:74:31:77:8a:5f:6f:79:bf:
d6:de:ef:6f:1c:1c:77:57:fa:02:ce:f5:d6:39:9c:
a7:40:86:3f:ed:d1:49:5a:7b:08:c8:0f:80:52:c9:
1f:91:ab:21:03:fe:07:e8:f4:64:58:e4:24:9a:42:
5a:cb:89:c3:2c:1f:e4:d5:73:fc:84:04:dd:3d:ae:
7d:43:28:1a:cc:df:cb:60:43:14:e2:a0:22:05:c0:
4e:7a:0d:36:9d:22:a5:b2:58:b4:ce:a7:a2:c7:7c:
6e:9d:f3:fc:74:d9:70:c9:c9:ea:0a:03:eb:44:85:
5c:5d:56:e3:2e:fa:9e:80:9f:b4:49:15:21:77:4a:
49:db:88:8e:01:84:a9:97:16:66:07:da:72:fc:6c:
53:76:7c:5f:38:79:93:74:8a:fd:bd:ea:7b:20:9a:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:8D:D2:CF:90:B7:8C:58:C3:FC:67:6B:8E:86:42:1D:1F:62:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.185.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:4d:ae:12:4c:e8:f4:9d:5b:09:30:de:d6:d9:ca:9c:da:13:
23:ed:9f:01:39:e1:21:5c:0c:5f:35:68:72:49:40:28:75:c7:
96:11:16:de:43:1e:c2:ec:8c:8d:18:b7:2a:e5:7f:3a:9c:5c:
a1:04:33:d1:47:1c:1d:44:a4:fb:16:bc:1c:ab:06:7c:17:b6:
38:23:31:c6:86:79:30:12:d6:bb:3a:e6:b9:55:b1:51:53:d8:
fe:ce:57:c2:36:21:24:1d:2e:6d:26:25:c7:b6:95:3e:c1:4b:
e6:10:04:c2:b8:2d:77:19:47:85:10:af:8f:44:35:54:4c:a9:
38:c1:a8:70:56:9b:1b:a3:77:97:6e:80:89:41:f8:a1:ab:4d:
35:0f:38:22:dd:49:ed:f2:d3:df:d4:b2:1f:01:d1:6e:05:dc:
41:64:41:95:1b:89:82:00:cb:68:c1:85:64:f8:2f:2f:c8:37:
76:3c:b2:7e:a8:85:58:94:b6:47:d1:5a:59:b2:5e:de:2f:96:
40:4e:86:70:a8:23:4e:5e:75:69:aa:54:04:39:b2:3b:09:23:
73:c6:be:f1:e4:fb:1d:0b:68:c9:40:f1:a7:ad:0d:7e:64:cc:
08:84:81:b4:ba:1f:62:da:6e:52:e7:02:7f:25:b6:cf:44:fa:
f2:67:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:07:55 2026 by rpki-client