
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a29321-c0a8-33cc-81ca-926231f7ef4a.roa
File: c2a29321-c0a8-33cc-81ca-926231f7ef4a.roa (raw, json)
Hash identifier: cNTr7XsK6ulijz6DqLQwAk66UT/QIGMt6Uwiy2Cbmy0=
Subject key identifier: A6:A4:AB:16:9A:FC:76:F9:2C:91:74:23:75:12:81:6F:48:42:DC:D6
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BBE4060D61745D420C5D964C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a29321-c0a8-33cc-81ca-926231f7ef4a.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 31898
IP address blocks: 134.70.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:60:d6:17:45:d4:20:c5:d9:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=de077541-3bc5-4f43-a0a7-9ad3bb0d8719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:81:78:9f:8d:23:ba:13:c5:fc:ca:22:3d:
7b:cc:1e:47:e4:9a:9e:e8:33:34:e5:8d:78:e8:c9:
cf:bc:fc:88:1e:79:8b:50:e0:16:05:06:f6:6c:ae:
37:c4:27:34:5e:23:f3:51:87:05:ef:40:54:05:4b:
06:8e:79:a1:87:e4:84:5e:bf:36:19:9f:d2:e6:bf:
a0:4d:c4:21:41:8b:ba:10:2a:a9:7f:68:6b:f9:94:
b9:e9:af:af:78:87:02:9c:53:eb:83:81:63:f9:da:
47:41:c0:ec:0d:ba:a9:dc:10:75:c3:ea:c5:46:62:
0a:7d:ab:83:16:9b:3d:db:7c:95:30:1e:ce:dd:3f:
25:30:8b:51:fe:3e:fe:c9:61:60:fd:78:4b:2b:fb:
c7:3c:f0:66:45:b9:32:2a:52:9e:78:ef:32:ce:6e:
c0:dd:de:e9:19:2b:4e:e9:75:70:47:db:ce:ea:aa:
f4:b3:ee:37:a7:12:4b:a8:74:0d:04:b6:5d:9c:1e:
ec:4b:c5:c1:15:5b:04:f4:94:c0:d7:51:45:e8:17:
ca:92:36:41:fd:55:89:58:a6:47:ab:b5:df:40:37:
75:96:83:04:a8:41:8c:ad:6f:6b:0a:b6:a6:37:05:
20:18:64:1b:b9:19:1f:eb:ed:05:9b:79:29:36:de:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:AB:16:9A:FC:76:F9:2C:91:74:23:75:12:81:6F:48:42:DC:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a29321-c0a8-33cc-81ca-926231f7ef4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.70.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:f2:36:9c:c9:18:1f:84:e3:86:87:9e:93:68:74:9e:88:ca:
7a:8c:61:81:bd:03:8f:4f:27:22:93:22:8b:c1:ea:9e:f8:6b:
5f:34:30:19:ea:2a:bc:f4:76:62:65:f1:04:61:a4:06:41:14:
46:f8:a3:0c:ed:f4:9f:7f:df:cb:77:b5:97:f7:3f:5a:9c:53:
38:9c:f3:af:91:7b:47:72:6d:27:16:34:98:fa:20:42:cb:70:
04:5f:b0:d3:40:0b:f1:07:bc:48:4d:71:98:a0:69:31:d9:88:
da:17:ce:76:67:a8:4d:1a:ad:a3:1a:af:bd:be:6f:fd:3c:43:
c7:30:8c:f6:29:79:a4:60:db:ab:07:20:7a:9f:34:15:56:f0:
f1:fe:47:49:88:67:87:3a:ce:2a:81:35:ad:88:2e:14:28:0b:
dd:f0:d3:f2:b2:5f:83:f9:90:43:05:28:84:a2:4d:0a:e6:51:
cf:0a:87:06:1f:98:18:f5:c6:af:d9:ff:6e:62:b7:fb:ac:e2:
70:51:4b:ed:a1:b7:8d:b0:ed:fe:f3:b4:44:c8:72:53:86:c1:
bd:e1:fd:46:7e:ff:41:fd:42:57:2b:35:02:f5:f8:51:48:7d:
54:2e:dd:40:1b:78:f7:36:ea:64:f6:8c:c9:c6:32:cc:b8:b4:
94:00:e8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:57:37 2025 by rpki-client