
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa
File: 067b0439-4cea-3e63-ae85-baf79b93fd58.roa (raw, json)
Hash identifier: mikSa5hB4eKiZ8ruxvB2Y6Bu6FrWUA3kYr3RFigt3QA=
Subject key identifier: 44:A4:04:F6:B8:0A:FE:6A:FC:B1:3A:ED:12:91:6A:5B:32:DA:D0:BE
Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial: 010D0C9F4328584EA78848714E3AA2F838E544E0
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 23465
IP address blocks: 70.99.72.0/21 maxlen: 21
70.99.104.0/21 maxlen: 21
70.99.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:48:71:4e:3a:a2:f8:38:e5:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4c17e396-52e0-41d1-b310-00f8a038945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:9e:e4:ea:a5:04:05:2b:d7:63:9a:d8:6a:
88:ab:82:fc:b4:ba:82:e5:84:c8:09:5c:58:be:0c:
4d:db:7f:cf:7b:a9:20:73:e7:75:97:3f:0f:ae:1b:
a9:c2:a6:12:e8:a7:42:0e:0e:75:4a:61:5a:d2:98:
d7:0f:20:d2:24:3f:13:ce:05:d3:85:e0:d9:8c:e1:
8e:0b:51:9d:21:d9:5d:96:20:75:70:b7:d5:55:4b:
95:09:72:a9:c6:aa:6a:c2:9b:5f:6c:f9:00:d9:89:
e5:2f:ef:3f:a9:eb:ff:05:21:03:12:ba:0c:69:3c:
ff:1d:42:42:31:c7:92:e8:ad:63:54:52:39:aa:87:
5b:21:1e:b0:bb:9f:f6:1f:f0:3d:1b:8a:72:05:2d:
70:ef:15:4f:f8:66:a3:bd:52:46:59:95:48:d4:a5:
d4:78:1d:64:fa:12:d6:cf:4e:88:e0:ad:e2:51:7e:
c5:15:49:d0:1b:27:99:52:02:f1:4d:a0:ad:94:53:
51:2e:14:b8:2b:bb:31:2f:69:3c:db:d9:0f:02:d2:
af:18:64:5e:fd:52:17:f1:62:de:2a:1d:73:da:5e:
b2:99:ca:ae:d0:44:dd:46:a6:20:b7:9e:46:a0:d8:
d6:0e:74:e6:42:26:c0:58:f1:31:ea:9c:3c:41:53:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:04:F6:B8:0A:FE:6A:FC:B1:3A:ED:12:91:6A:5B:32:DA:D0:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
X509v3 Authority Key Identifier:
keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
sbgp-ipAddrBlock: critical
IPv4:
70.99.72.0/21
70.99.104.0/21
70.99.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:aa:b4:9b:a7:cd:a6:4a:ec:13:fb:cc:67:6a:4a:ca:9a:80:
70:87:af:84:86:88:c3:6b:d3:ce:db:01:34:f1:e2:47:8f:99:
5e:ce:af:ac:35:8f:3a:43:ad:87:69:44:a7:3e:1c:75:22:21:
97:24:b5:e2:ec:88:f6:33:88:b7:04:c9:e6:52:93:f3:a9:86:
b4:8b:90:c2:f3:ef:66:3e:33:73:e8:e1:a7:e7:29:41:e4:d8:
88:d3:55:b1:aa:0e:6c:96:d9:b0:12:9e:10:a8:82:6e:ad:83:
02:e0:49:a8:0a:af:4b:db:f2:69:7c:96:50:b2:b4:22:de:a7:
0b:38:ed:bd:33:13:ea:19:b2:c7:f8:7a:32:fa:94:a6:2f:5f:
73:e6:f3:1b:f7:2e:dc:ed:4a:2f:0f:d8:83:1a:81:76:59:50:
e5:aa:80:85:4b:3d:4c:cc:dd:1f:51:61:ae:c1:d5:7f:19:c4:
c0:e5:15:b9:38:d1:4a:92:a3:9f:9f:52:62:d1:87:93:42:c7:
73:2b:86:32:9a:5c:b4:6e:8b:57:3b:5f:da:c5:e9:40:e9:3f:
81:40:cd:48:b0:ab:e5:bf:9d:6d:9c:1b:1e:ca:27:73:6a:e5:
53:c4:08:8b:26:a1:f4:3a:c7:ed:83:5b:00:d0:41:de:d8:13:
be:c9:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:10 2026 by rpki-client