
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5c7613f2-3f22-31b8-85d3-cfa3227f4a6e.roa
File: 5c7613f2-3f22-31b8-85d3-cfa3227f4a6e.roa (raw, json)
Hash identifier: YjmQdsQoksQBdeN2qtIcRgCl2cAanGpfHLYxlAX4Mms=
Subject key identifier: 53:1B:E5:28:78:A4:9F:F9:46:2D:4A:7B:AE:E6:07:2C:3C:A0:BA:1B
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584F497398CEA5AFA7CD610C7F60
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5c7613f2-3f22-31b8-85d3-cfa3227f4a6e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 4922
IP address blocks: 70.32.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:98:ce:a5:af:a7:cd:61:0c:7f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a18dbad5-b9c4-445c-8af4-ee25097c9207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:bd:e8:73:eb:12:4d:32:02:09:7f:d9:e7:
3c:c2:4c:a2:bd:19:3f:0d:14:8a:3c:89:57:48:6a:
f3:82:95:1b:1b:06:ab:4b:aa:f9:d6:12:dd:56:a1:
cd:f9:f1:4d:0d:20:25:79:cf:86:35:e0:ca:6d:8f:
38:a2:b5:af:aa:50:67:eb:dd:e5:a8:06:5b:0a:97:
12:62:34:a9:42:6d:e9:d9:e2:1a:ab:3f:07:8b:ae:
ea:84:cc:3e:c4:40:dd:52:62:57:ca:de:fb:57:95:
77:cd:96:07:35:87:b8:dc:63:cc:52:87:41:fc:a8:
9c:15:94:d9:6d:0a:ec:5c:7b:14:40:1e:60:24:19:
fa:3f:9c:8e:b7:ae:73:96:85:33:94:c2:6b:bd:ee:
8e:44:5c:22:ca:4b:ef:f8:27:92:24:82:8e:3a:ec:
af:5a:0b:3d:9a:e6:cf:8e:fa:6a:ad:06:f4:23:be:
82:14:89:94:94:17:4e:65:e3:aa:75:f6:2d:88:28:
d2:13:95:f9:54:07:8b:d1:54:16:fe:cb:90:37:e6:
bd:22:ac:91:38:b7:eb:b6:3e:dc:f4:43:7e:aa:28:
ed:e4:08:a2:99:0b:48:47:5f:70:7d:06:cb:83:6e:
3b:22:28:67:d9:d2:e2:83:b1:d1:fe:3b:58:f9:59:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:E5:28:78:A4:9F:F9:46:2D:4A:7B:AE:E6:07:2C:3C:A0:BA:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5c7613f2-3f22-31b8-85d3-cfa3227f4a6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:31:0d:f0:a3:01:22:a8:97:bb:80:65:94:f5:6b:69:d1:c9:
7e:77:66:e3:4b:16:1b:bf:d1:20:14:be:7b:39:82:4d:d4:fb:
1e:d6:70:53:cb:4f:fa:6f:5c:f8:0a:1e:2b:79:56:a6:b0:5c:
34:d5:2b:7a:67:58:c4:c3:b4:20:10:13:55:02:dd:f4:ce:a3:
85:25:51:c5:16:da:5d:99:c8:1f:3c:7f:2c:36:e3:7d:53:47:
52:ef:08:30:c4:84:4c:cf:81:df:b1:f0:b8:76:07:c7:40:10:
ef:cc:e1:a3:be:c8:06:cc:38:b3:06:f4:f6:ca:c2:42:e4:3b:
08:5c:db:cc:f4:39:be:5e:b6:23:87:84:76:66:33:1a:fe:8a:
23:5a:e7:48:39:33:be:d3:18:bd:9f:8b:2f:03:55:0d:96:03:
51:e8:29:3c:c5:ab:3e:5a:22:58:11:ec:db:cf:c5:3e:74:21:
e5:cc:67:f5:62:41:73:d5:ac:30:25:2a:b5:e3:48:f1:52:5c:
81:4a:73:d5:b0:06:bd:b0:44:a0:71:f7:19:c4:3d:c1:51:28:
97:40:35:db:c4:83:82:81:16:20:eb:16:a6:2e:b1:a6:2c:5e:
fb:c0:06:3a:5b:47:2d:8e:f7:4c:42:80:2e:cb:bd:13:e6:ce:
98:1f:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:45:23 2026 by rpki-client