
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/b814a9a9-8f20-35a9-9084-6e4106329ffd.roa
File: b814a9a9-8f20-35a9-9084-6e4106329ffd.roa (raw, json)
Hash identifier: x2UhTctgZyM1GR8DF+l2O81GWvXRWxcTigPntBHf/lE=
Subject key identifier: E0:14:AB:FE:81:A0:53:56:D6:42:56:E8:29:65:53:A8:5B:F1:23:43
Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial: 010D0C9F4328584EBA86FE07D3E64A3F036BD1A0
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/b814a9a9-8f20-35a9-9084-6e4106329ffd.roa
Signing time: Tue 04 Aug 2026 20:20:51 +0000
ROA not before: Tue 04 Aug 2026 20:20:51 +0000
ROA not after: Mon 02 Nov 2026 21:20:51 +0000
asID: 40933
IP address blocks: 70.33.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ba:86:fe:07:d3:e6:4a:3f:03:6b:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Validity
Not Before: Aug 4 20:20:51 2026 GMT
Not After : Nov 2 21:20:51 2026 GMT
Subject: CN=dd34c6ef-debe-4886-8677-fd07df762c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:0e:bb:25:96:f6:66:2c:8b:62:17:93:18:
ce:26:2a:a2:ec:d0:01:0f:93:f2:ac:a8:25:97:01:
5f:fe:e5:a4:37:b1:b5:be:3d:d2:a9:6a:83:d5:2d:
96:1d:4a:e0:e5:ee:4a:38:2e:cb:15:69:77:66:82:
bc:94:34:2a:ce:e5:b2:8b:26:f1:ac:f3:55:4c:d3:
09:c3:b9:82:7d:ae:87:96:5e:b6:93:d1:42:67:a7:
ed:17:24:c4:e0:e7:ea:c1:18:d1:7f:ed:cd:8d:74:
75:fd:bf:12:9a:a2:10:5d:26:b8:96:0b:98:03:98:
2d:4a:40:e3:94:d2:d0:29:ba:4f:92:c7:21:a5:6e:
97:b0:de:36:17:23:1b:82:29:60:e9:f6:e6:5f:b6:
15:0c:4f:a9:43:e8:ad:0f:89:54:c0:b2:2b:dd:40:
41:00:2e:c6:2e:5b:5b:21:ef:36:10:10:47:13:a8:
d4:98:49:60:5d:45:de:dc:43:35:d9:90:87:fa:7a:
2d:dd:0d:ac:80:25:80:a5:07:b8:7d:79:05:b6:22:
72:6f:ea:77:6f:09:7d:3d:f4:49:29:d8:9d:2e:52:
ac:52:25:6e:b8:9a:a7:b8:d8:a1:aa:44:ae:0d:06:
2d:2a:16:93:f6:61:c7:7c:f9:d5:26:ca:26:94:85:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:14:AB:FE:81:A0:53:56:D6:42:56:E8:29:65:53:A8:5B:F1:23:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/b814a9a9-8f20-35a9-9084-6e4106329ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
X509v3 Authority Key Identifier:
keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
sbgp-ipAddrBlock: critical
IPv4:
70.33.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:c7:31:64:19:fc:d6:0a:b2:d4:9c:64:9f:03:4b:55:90:99:
ed:b7:80:33:6b:b9:dd:36:59:85:07:28:3b:ce:1f:7b:66:a7:
52:0e:44:e6:17:da:02:2b:d8:3d:84:74:d6:83:26:31:59:f0:
32:55:43:b2:54:1b:3e:3e:cc:ef:2d:ed:b0:3b:8c:74:16:5d:
41:3e:12:3e:95:67:6f:58:32:a6:d0:5f:09:21:ed:e1:93:6a:
34:03:c8:02:69:82:0e:40:71:0f:06:0c:03:6b:04:81:4f:3d:
73:11:67:7e:83:9f:16:b5:5f:5d:c8:bb:a0:5c:c8:c2:67:a0:
9a:dd:9e:9a:a2:63:46:2a:a1:e3:85:e3:2c:01:ce:25:84:2b:
1a:29:cd:ab:8f:eb:60:52:7e:73:d7:00:34:d0:48:32:c8:6f:
96:7d:1d:80:79:e8:f3:6d:d2:9f:3e:ce:df:5e:69:80:64:5e:
fd:bd:98:cb:82:03:c8:34:e5:51:5e:56:75:3e:51:a7:09:84:
c5:57:0d:7f:1e:65:92:56:aa:b7:a0:95:9c:70:b2:3c:c1:e8:
a6:ad:b9:ea:a9:aa:d6:8f:67:ba:7c:67:2d:4f:af:30:20:dd:
26:a0:34:c6:cc:4b:3e:c6:55:f2:43:ce:fd:70:ca:d7:aa:77:
40:88:4c:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66hv4H0+ZKPwNr0aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh
ZWNkMB4XDTI2MDgwNDIwMjA1MVoXDTI2MTEwMjIxMjA1MVowLzEtMCsGA1UEAxMk
ZGQzNGM2ZWYtZGViZS00ODg2LTg2NzctZmQwN2RmNzYyYzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFsOuyWW9mYsi2IXkxjOJiqi7NABD5PyrKgl
lwFf/uWkN7G1vj3SqWqD1S2WHUrg5e5KOC7LFWl3ZoK8lDQqzuWyiybxrPNVTNMJ
w7mCfa6Hll62k9FCZ6ftFyTE4OfqwRjRf+3NjXR1/b8SmqIQXSa4lguYA5gtSkDj
lNLQKbpPkschpW6XsN42FyMbgilg6fbmX7YVDE+pQ+itD4lUwLIr3UBBAC7GLltb
Ie82EBBHE6jUmElgXUXe3EM12ZCH+not3Q2sgCWApQe4fXkFtiJyb+p3bwl9PfRJ
KdidLlKsUiVuuJqnuNihqkSuDQYtKhaT9mHHfPnVJsomlIUdlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOAUq/6BoFNW1kJW6CllU6hb8SNDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5
ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvYjgxNGE5YTktOGYyMC0z
NWE5LTkwODQtNmU0MTA2MzI5ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli
MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1
YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew
NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiEUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnHMWQZ/NYKstScZJ8DS1WQme23gDNrud02WYUHKDvOH3tmp1IOROYX
2gIr2D2EdNaDJjFZ8DJVQ7JUGz4+zO8t7bA7jHQWXUE+Ej6VZ29YMqbQXwkh7eGT
ajQDyAJpgg5AcQ8GDANrBIFPPXMRZ36Dnxa1X13Iu6BcyMJnoJrdnpqiY0YqoeOF
4ywBziWEKxopzauP62BSfnPXADTQSDLIb5Z9HYB56PNt0p8+zt9eaYBkXv29mMuC
A8g05VFeVnU+UacJhMVXDX8eZZJWqreglZxwsjzB6KatueqpqtaPZ7p8Zy1PrzAg
3SagNMbMSz7GVfJDzv1wyteqd0CITDM=
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:30:19 2026 by rpki-client