
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/fa698891-fb4e-3c90-bf91-47e29634a727.roa
File: fa698891-fb4e-3c90-bf91-47e29634a727.roa (raw, json)
Hash identifier: HIkYhWr2DPGZHvgHQPx/3AGo5Ht/gC4yKbOZh12ju0o=
Subject key identifier: 61:4A:09:5E:D0:25:68:30:54:8C:7F:A8:6B:EC:E6:40:52:62:DD:BC
Certificate issuer: /CN=70b6e0fc-473f-4353-8e08-838958632217
Certificate serial: 010D0C9F4328584EAFE6EB48074433452F172790
Authority key identifier: B3:D0:54:6F:C3:4C:1B:0D:70:C1:36:64:68:4C:94:FD:B0:3F:0C:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/fa698891-fb4e-3c90-bf91-47e29634a727.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 32744
IP address blocks: 192.245.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/70b6e0fc-473f-4353-8e08-838958632217.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/70b6e0fc-473f-4353-8e08-838958632217.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:eb:48:07:44:33:45:2f:17:27:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b6e0fc-473f-4353-8e08-838958632217
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=b3ffa0be-56c0-4c7c-9217-f776f3578689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:69:0e:20:c0:8a:b3:c5:92:f5:99:57:dc:
8b:f0:5d:70:44:db:ba:b7:29:7d:c4:ab:46:86:84:
f4:15:6f:7f:92:00:64:b1:4f:eb:1d:00:5a:c4:c4:
a4:4e:d9:ee:0e:b1:c4:44:f5:ac:3a:bb:3b:60:9d:
67:5d:6b:87:2b:11:5b:43:da:fc:b9:e8:64:20:16:
8c:3e:aa:b8:1b:81:c1:f7:73:95:25:3a:70:70:57:
c2:f7:52:ce:7d:88:54:b9:a9:ba:03:bd:e3:ee:3c:
08:5b:c7:0d:17:e8:51:78:03:1a:4a:d2:dd:01:b2:
84:cf:7f:f5:12:a0:ae:09:33:8b:12:e6:f6:7a:76:
55:90:0c:98:36:7c:14:70:54:fa:ed:c9:b6:e2:62:
2a:eb:b8:88:45:28:4c:f7:62:26:6c:2a:cd:76:4c:
f6:ec:10:b3:84:19:26:49:39:49:b8:76:1e:a6:dd:
b6:10:53:63:2c:1a:bc:84:db:f5:ce:e6:40:6c:7a:
ec:a8:bf:a1:cf:98:aa:1e:92:64:2d:a4:f4:00:03:
66:9c:3a:b2:69:56:90:9d:af:6e:e1:e3:35:81:e8:
d9:48:58:18:38:12:0a:40:87:5f:eb:86:34:44:77:
8c:9a:d4:3b:1f:33:4b:69:49:62:6a:c3:c6:ef:15:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4A:09:5E:D0:25:68:30:54:8C:7F:A8:6B:EC:E6:40:52:62:DD:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/fa698891-fb4e-3c90-bf91-47e29634a727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/70b6e0fc-473f-4353-8e08-838958632217.crl
X509v3 Authority Key Identifier:
keyid:B3:D0:54:6F:C3:4C:1B:0D:70:C1:36:64:68:4C:94:FD:B0:3F:0C:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217.cer
sbgp-ipAddrBlock: critical
IPv4:
192.245.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:72:3c:d3:9c:ae:9d:ca:fa:a2:5c:d4:75:ab:56:02:e6:cc:
bf:76:4b:f0:fc:18:e3:40:57:0f:f8:ea:eb:79:3a:18:90:99:
b2:ea:6d:9a:13:ef:16:4b:a9:7b:e7:67:81:2e:21:71:22:59:
f1:16:82:d0:4a:7d:c8:d7:63:67:e3:f8:2a:95:ed:80:53:e5:
03:b5:b3:8c:22:72:51:c5:27:78:57:ff:8c:12:d4:6b:ee:38:
1c:90:24:d0:6f:2f:ba:50:30:3b:d3:44:94:78:ec:f3:41:cc:
65:63:06:33:a3:3a:a3:8a:29:13:92:bd:45:cd:09:65:82:71:
77:6f:95:dc:bc:ef:dd:bc:52:95:22:61:54:ce:38:26:91:46:
ad:75:d5:d5:d1:27:9e:a8:23:fe:fe:d6:07:ba:92:a3:45:3e:
3b:17:a7:60:cf:50:60:f3:1f:29:f3:b0:35:a8:78:bc:86:44:
0a:00:03:70:86:61:22:fe:fb:4f:da:ac:f1:d0:1d:89:c7:61:
1b:92:2d:5b:db:e4:5d:1b:51:e8:85:ca:cd:95:3b:38:5b:97:
a4:fc:5f:62:bd:0e:f5:a6:1b:bc:39:0b:a2:da:ec:f0:3a:ed:
80:31:43:4a:2c:52:7b:3e:33:f9:8a:93:ce:d4:0d:cc:61:af:
f7:2f:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:18:31 2026 by rpki-client