
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa
File: 067b0439-4cea-3e63-ae85-baf79b93fd58.roa (raw, json)
Hash identifier: bvZyWUZMnXTFImY5nSG5NiTM29+E5vtBHTHmzUcxsKs=
Subject key identifier: BF:D6:48:76:A4:EA:E9:EB:73:BD:9D:57:75:50:0C:E7:36:D9:CE:32
Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial: 010D0C9F4328584CF58791DCFA80F3B69728D580
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 23465
IP address blocks: 70.99.72.0/21 maxlen: 21
70.99.104.0/21 maxlen: 21
70.99.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:91:dc:fa:80:f3:b6:97:28:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=4a35f216-191c-4a5e-b0aa-570157f419b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:09:e0:29:57:f0:4f:ee:4e:f6:d8:29:54:
5a:b4:51:65:b4:e0:41:d8:10:3a:29:2d:7f:2b:db:
f4:a6:0e:35:3f:3b:ae:2c:f8:a3:e7:0e:3e:78:99:
18:e5:c4:f8:30:8d:f4:3c:35:20:16:c1:a2:ed:f6:
ac:c3:bc:1d:d5:74:47:51:d3:5b:0c:65:ce:83:7c:
35:88:d3:95:cd:39:83:47:02:18:10:48:fe:c0:0f:
28:fa:50:50:71:29:8c:87:d4:3c:c9:c3:06:5f:d4:
12:b9:47:91:00:a0:af:71:85:88:8f:59:fb:aa:9f:
d2:8b:17:29:d3:cb:eb:8c:3c:7c:83:55:50:87:72:
e4:7e:79:a5:13:88:db:ad:62:21:b8:f6:fb:2b:1d:
9d:8d:a8:5e:00:e8:7a:f3:1e:70:97:e5:e8:96:50:
ca:b4:3f:0b:20:d9:66:2d:c0:86:b2:12:33:39:d5:
a2:9f:f1:58:3e:5d:0d:e5:59:c6:65:bb:66:d7:bc:
aa:a4:b3:51:d6:8c:ae:23:c1:b3:90:7a:c9:a7:c4:
55:57:7f:5d:4c:bb:b0:e4:44:b1:94:cc:e2:41:20:
43:df:06:80:77:a2:fb:b4:33:2c:11:84:e6:6b:77:
1b:a6:a7:21:1b:a9:19:d2:f1:83:1b:dc:78:17:78:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:48:76:A4:EA:E9:EB:73:BD:9D:57:75:50:0C:E7:36:D9:CE:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
X509v3 Authority Key Identifier:
keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
sbgp-ipAddrBlock: critical
IPv4:
70.99.72.0/21
70.99.104.0/21
70.99.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:03:2d:87:c9:8e:7c:e3:2b:c2:5b:4a:25:cf:70:01:b5:c5:
f4:2d:69:59:af:d4:73:05:61:8f:05:67:bf:15:d0:9f:88:03:
e7:67:88:83:13:ca:bf:00:d3:26:a5:21:c2:ed:d0:29:83:96:
15:01:ae:70:05:27:ac:43:12:02:0d:16:70:fa:4a:b5:c2:8b:
b2:32:ba:d7:6c:ef:0a:f7:84:d5:62:2e:9b:a2:c2:f1:8d:61:
65:d2:77:0d:ee:c0:2d:90:ff:a3:df:ed:39:53:34:31:46:69:
87:2c:9a:fc:56:02:95:e6:e1:14:bf:b4:2c:da:58:60:11:69:
3f:e0:c4:1b:46:ab:de:93:08:87:6d:10:52:f7:75:85:8a:e4:
76:22:c7:e2:75:44:0a:59:80:8e:a0:c5:38:21:47:37:ff:ba:
f8:72:95:e9:81:73:9a:d0:74:05:58:52:61:df:6b:b5:78:67:
2a:ab:0f:e5:a8:1c:1e:37:a1:b2:4f:92:b3:88:e1:4f:db:88:
b8:ca:8c:2a:b5:4a:63:d5:79:bc:55:27:c1:ea:14:11:b0:16:
63:65:30:b1:47:27:d8:0a:0a:87:c3:24:73:ff:ba:8c:e1:b0:
ed:34:65:a8:f5:c6:5a:f0:8f:d8:0e:de:8d:98:9e:ce:6f:48:
ad:99:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:21 2026 by rpki-client