
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa
File: a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa (raw, json)
Hash identifier: kcxhQ/AVYdppG3Z8mKkaVLbJEOHqL1nsW/dYYMBN15Y=
Subject key identifier: B5:DB:75:B3:B8:8E:50:BC:59:FD:D3:97:AF:95:0A:B0:C3:FF:4F:BA
Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial: 010D0C9F4328584F5CFD5B74EAD661696C004B00
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa
Signing time: Fri 02 Oct 2026 01:00:12 +0000
ROA not before: Fri 02 Oct 2026 01:00:12 +0000
ROA not after: Thu 31 Dec 2026 02:00:12 +0000
asID: 40933
IP address blocks: 70.33.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5c:fd:5b:74:ea:d6:61:69:6c:00:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Validity
Not Before: Oct 2 01:00:12 2026 GMT
Not After : Dec 31 02:00:12 2026 GMT
Subject: CN=6ee6e992-fd23-48b3-8866-1894102b5e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c6:ca:13:30:4f:20:dc:8e:47:7b:01:4f:5a:
df:76:97:09:45:85:04:1d:83:de:e0:74:cb:13:7e:
98:25:8a:4f:bd:14:ba:9b:f4:c2:e9:fa:69:6c:2b:
55:90:3b:10:36:bc:2b:3b:5b:e6:9d:95:87:e5:ab:
69:aa:cb:c3:06:11:5e:bb:c2:fe:98:4e:73:fc:11:
9c:b5:42:02:ce:57:97:2b:6f:3b:fe:32:5b:01:95:
14:7f:5b:5c:04:d2:6b:56:bc:d5:c8:50:5c:e5:18:
e0:61:44:b7:ff:a0:99:c6:d5:43:00:b4:90:e7:68:
f3:8e:5c:8b:91:da:18:a9:69:11:46:27:02:a4:8e:
32:c8:ab:0f:e3:de:05:36:a6:e4:d9:57:ed:92:be:
27:16:5d:5a:fc:9b:ea:21:b6:6c:c6:e8:f5:6b:68:
41:7f:b3:91:76:54:f1:27:41:14:ee:1d:fe:35:59:
ac:92:8e:fd:98:f3:8d:41:71:59:5d:5a:e1:fa:af:
fa:43:86:84:a6:4a:58:ac:9b:f3:0a:b4:e0:9c:92:
33:36:92:22:22:0b:1a:7f:e6:86:0f:ca:3a:ba:ba:
9f:38:70:96:9a:92:d4:f4:14:aa:44:c0:62:f9:ee:
c2:82:80:1d:70:2b:50:cd:f4:52:2f:ab:57:81:9c:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:75:B3:B8:8E:50:BC:59:FD:D3:97:AF:95:0A:B0:C3:FF:4F:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
X509v3 Authority Key Identifier:
keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
sbgp-ipAddrBlock: critical
IPv4:
70.33.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:b9:25:e0:21:84:23:d2:93:df:c5:f3:4d:4a:b5:eb:5c:71:
4a:cb:74:cc:47:49:4a:d6:e7:68:21:28:8d:7a:16:e1:0b:24:
b8:6f:27:6e:0e:c3:ac:a1:a8:53:61:6c:89:69:2c:eb:6f:0e:
4b:c0:e1:5e:bd:c3:b2:a2:d1:bf:93:92:f9:80:76:f7:c8:2f:
3e:1f:56:8f:85:0a:72:e8:35:a2:55:63:7b:42:d9:e6:1b:16:
72:3b:da:5d:a4:65:7c:9f:fb:54:28:47:71:97:9d:69:41:55:
a8:42:e4:a9:32:d9:e8:36:07:79:e7:96:34:ca:42:b4:78:db:
97:64:c5:3f:f2:6d:00:25:19:d7:a0:88:e7:18:83:d0:c7:fb:
f3:3c:ab:56:2e:1b:51:7a:7e:8e:b2:28:32:06:75:ae:59:ee:
85:e4:a0:3b:a0:01:c2:b7:59:77:3b:0c:85:20:7c:9f:79:2d:
1a:93:8c:88:ef:0e:4b:41:2a:b4:2e:59:59:ff:d2:f1:d7:18:
69:03:b6:5a:86:14:86:0e:07:57:20:02:6c:88:33:f1:0a:f1:
57:3f:d6:53:75:24:d4:4b:5b:fd:9f:3f:4d:94:30:89:7a:b9:
51:7c:e4:f3:45:f8:f6:3e:e7:c3:34:a1:ad:9e:d4:df:c1:84:
91:92:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:17:59 2026 by rpki-client