
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa
File: 456ba9f7-e72c-305d-b3cd-691ae04fe061.roa (raw, json)
Hash identifier: Ca//gB1vftsmjoHuK5cbLctQjOA9wDI06b8lnkw/ikg=
Subject key identifier: 54:A7:C9:AC:33:9E:FA:BA:31:6A:3A:2E:40:18:49:FE:F5:F4:18:AE
Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Certificate serial: 010D0C9F4328584DF4DB5CF09274FE9296CB45F0
Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 55134
IP address blocks: 70.34.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:5c:f0:92:74:fe:92:96:cb:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=7f6ae682-72df-4b32-a010-745b3820fdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:61:45:30:e5:3a:e9:c3:5a:7f:d2:15:f6:
af:68:cd:29:20:34:25:34:4a:2f:1f:9c:46:32:f1:
09:ee:34:c3:10:14:00:7e:34:ae:6a:7d:c8:b2:86:
88:cb:ca:70:1e:b4:f6:be:5a:04:ab:68:ca:52:d6:
4a:1c:84:be:c3:de:f0:0c:14:53:8c:4c:e5:3f:d4:
99:d9:d2:8c:8b:e6:f2:c6:37:2e:3a:9c:cc:bf:cd:
05:e3:3d:ab:07:36:ea:dd:82:41:d1:f7:e2:8d:cd:
40:80:6d:72:41:b9:5c:9e:c1:c4:1a:f2:7d:6c:9a:
80:37:ba:19:2d:5f:1d:16:26:ae:57:db:0d:cc:cb:
ba:d0:f5:41:8b:82:20:e1:ad:5a:05:93:48:0e:96:
07:ad:7e:d2:b7:de:c9:23:91:0a:a5:d1:ac:ba:83:
73:de:71:65:bf:1a:3a:3f:44:9f:4b:1c:92:1e:23:
09:65:13:0b:e7:5f:30:24:90:d4:95:0a:6b:ce:04:
75:ec:6a:98:91:3a:d2:75:13:5c:ae:7a:b3:7e:2c:
1f:8c:2b:92:74:16:11:5e:07:22:40:dc:e5:ec:06:
1e:c8:82:ec:18:91:cb:b1:99:c2:f8:8c:1c:28:66:
08:83:73:33:f4:39:15:00:8e:ed:9e:36:23:b3:fc:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:C9:AC:33:9E:FA:BA:31:6A:3A:2E:40:18:49:FE:F5:F4:18:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
X509v3 Authority Key Identifier:
keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
sbgp-ipAddrBlock: critical
IPv4:
70.34.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:70:03:92:e4:5c:a1:0b:aa:94:3f:06:b4:23:51:a0:7e:f1:
67:df:14:10:6a:80:7e:a1:b9:01:d3:f6:c3:8d:59:5b:da:fb:
c1:c3:02:59:6d:c1:c1:d0:1c:1b:b3:6a:08:ac:b9:fa:01:cb:
da:24:fd:6c:be:56:e2:9b:c2:2b:1e:66:a3:f2:80:c9:c8:4c:
23:b3:35:67:44:d3:ef:b2:82:ab:c5:2c:bd:59:9b:a6:65:ef:
88:a8:72:e8:01:47:7e:84:a1:c4:3d:e8:1c:52:57:eb:88:85:
e2:d9:f0:7c:95:a7:81:92:f0:78:c2:d7:a3:4b:be:28:28:ac:
1b:2d:88:b6:28:19:74:43:a0:44:54:95:45:47:9e:8b:fe:66:
fe:1b:6f:12:cb:76:a7:25:39:ff:c6:3e:6f:f8:a8:fd:ec:e4:
cc:a5:df:21:fb:bb:d0:bb:9c:3f:8b:27:01:25:60:bb:0e:93:
8c:ee:6f:06:11:b1:d3:e9:73:ac:56:0a:58:7e:5c:25:54:86:
1b:c1:b4:8a:07:32:e9:40:f6:44:5d:fa:e8:29:63:a6:1c:97:
c2:42:2f:76:1b:56:4c:d2:df:56:a0:36:4c:f6:9f:06:92:bd:
ed:28:aa:79:00:a0:2b:d7:0d:36:d0:08:ca:b6:9a:06:12:76:
ad:89:85:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021zwknT+kpbLRfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy
YjdkMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
N2Y2YWU2ODItNzJkZi00YjMyLWEwMTAtNzQ1YjM4MjBmZGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufthRTDlOunDWn/SFfavaM0pIDQlNEovH5xG
MvEJ7jTDEBQAfjSuan3IsoaIy8pwHrT2vloEq2jKUtZKHIS+w97wDBRTjEzlP9SZ
2dKMi+byxjcuOpzMv80F4z2rBzbq3YJB0ffijc1AgG1yQblcnsHEGvJ9bJqAN7oZ
LV8dFiauV9sNzMu60PVBi4Ig4a1aBZNIDpYHrX7St97JI5EKpdGsuoNz3nFlvxo6
P0SfSxySHiMJZRML518wJJDUlQprzgR17GqYkTrSdRNcrnqzfiwfjCuSdBYRXgci
QNzl7AYeyILsGJHLsZnC+IwcKGYIg3Mz9DkVAI7tnjYjs/x4SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSnyawznvq6MWo6LkAYSf719BiuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3
YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvNDU2YmE5ZjctZTcyYy0z
MDVkLWIzY2QtNjkxYWUwNGZlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz
ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0
MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5
YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5wA5LkXKELqpQ/BrQjUaB+8WffFBBqgH6huQHT9sONWVva+8HDAllt
wcHQHBuzagisufoBy9ok/Wy+VuKbwiseZqPygMnITCOzNWdE0++ygqvFLL1Zm6Zl
74iocugBR36EocQ96BxSV+uIheLZ8HyVp4GS8HjC16NLvigorBstiLYoGXRDoERU
lUVHnov+Zv4bbxLLdqclOf/GPm/4qP3s5Myl3yH7u9C7nD+LJwElYLsOk4zubwYR
sdPpc6xWClh+XCVUhhvBtIoHMulA9kRd+ugpY6Ycl8JCL3YbVkzS31agNkz2nwaS
ve0oqnkAoCvXDTbQCMq2mgYSdq2JhXU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:00 2026 by rpki-client