
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa
File: a20f1c23-b345-360d-ab0a-26cae59bee50.roa (raw, json)
Hash identifier: 6zZcDB56a4QPEfJc/UqRfH8/Lmt7dk3XKl86r81wpq0=
Subject key identifier: BE:96:BE:99:51:13:1C:9E:12:70:EB:E2:40:6D:CF:7D:D1:BE:05:8E
Certificate issuer: /CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8
Certificate serial: 010D0C9F4328584D703FCE542AFB11ACD8E8ABC0
Authority key identifier: FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 16509
IP address blocks: 64.207.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:ce:54:2a:fb:11:ac:d8:e8:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=5f5f68b8-1a26-4a13-a5b1-72812c2f925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:f8:df:60:f8:c6:00:83:0e:a6:9f:1f:7f:
44:b2:78:41:3a:68:6b:02:66:cd:15:d9:28:59:44:
90:94:f2:12:62:81:d3:b2:18:6e:80:55:07:f3:65:
32:5c:e9:cd:2a:f1:b6:1a:4b:ee:19:76:72:69:3e:
81:a2:80:22:29:bf:75:83:a4:e3:31:64:90:b4:b0:
74:fd:b5:9f:df:e0:c5:d2:ec:60:fa:40:20:70:3f:
a2:64:fb:f1:ad:f6:e4:69:2d:3b:32:d7:62:bc:d3:
2d:9b:e0:a7:44:a7:86:fe:0e:78:aa:d5:df:01:3b:
a1:ee:e0:0f:1e:9b:3e:f5:94:51:89:f8:a1:72:6b:
03:31:d1:f3:50:5b:70:a1:fb:3f:10:31:1b:4d:ee:
8e:ed:0c:01:84:37:30:82:0e:23:a3:ab:9c:ae:de:
ce:0a:d2:a7:ff:ca:03:9b:ed:28:0a:63:9d:7d:91:
99:c6:9f:24:4d:b2:ca:f3:d4:07:f1:b9:3a:0b:d4:
af:96:f9:5f:cd:64:7e:9b:27:f6:57:cf:d9:9b:6d:
f9:ae:a1:3b:22:5d:23:82:d4:22:b1:ba:59:41:6c:
5f:d9:a8:b0:eb:62:18:83:6a:1e:45:de:42:b6:89:
3a:77:5f:3b:9c:78:82:1a:12:4f:74:8d:83:7c:c8:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:BE:99:51:13:1C:9E:12:70:EB:E2:40:6D:CF:7D:D1:BE:05:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.crl
X509v3 Authority Key Identifier:
keyid:FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.207.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ab:3f:5a:d9:e7:97:38:25:cf:6d:2e:11:bc:f1:27:2d:c9:
84:68:6b:22:73:ec:ca:46:00:2b:e5:d2:4e:d4:10:cd:91:85:
2e:8a:56:7d:88:26:9a:3f:a5:2e:ae:7c:c8:4a:4a:46:e5:17:
e3:08:cd:f0:3b:b7:f5:dc:f0:06:22:22:f2:ba:52:2e:14:30:
94:bb:79:60:cb:50:37:96:ee:4f:f3:73:a8:ef:7f:28:58:9f:
61:f5:73:af:0f:66:78:0d:b9:d9:5d:cf:70:7e:75:20:50:93:
1b:97:86:8d:cf:97:67:8e:2c:7a:43:2d:38:56:9b:c3:48:bd:
85:8f:42:cf:b1:6e:d6:14:cd:c8:f0:3b:d9:2b:34:24:bb:93:
b8:a7:67:d2:62:95:3f:c1:bc:94:33:47:25:9e:8c:4c:4c:ba:
79:e8:bb:9b:13:3a:f4:3c:24:8f:e0:0b:11:01:26:11:05:07:
f0:a2:d1:03:33:a1:5f:ad:31:b3:01:5e:e1:ff:0d:78:0a:0d:
33:76:a4:64:aa:82:c3:95:3b:a6:e0:d5:0e:2c:b3:c6:d4:97:
13:66:a2:88:93:98:bc:7b:3c:f4:17:3c:6d:0a:de:dd:e7:f5:
52:c4:75:cf:7a:28:68:e2:fa:f5:d2:09:86:d9:65:b3:e7:35:
7f:02:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:51 2026 by rpki-client