
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa
File: e3dc55cb-0879-31e8-a693-dfd120efdccb.roa (raw, json)
Hash identifier: TmylhJqq+7NNYNhmDyFgThx4/QW1NUPvJvlNpkYDimU=
Subject key identifier: 85:48:51:A6:92:71:27:2B:9F:22:FF:AF:7C:50:D8:C0:00:BE:B9:4A
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584EA7874DFC4DAAD8A0C8E95580
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 4922
IP address blocks: 70.32.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:4d:fc:4d:aa:d8:a0:c8:e9:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=2f0ea961-9fc9-42f7-88c9-70280aafff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:91:3f:39:60:dc:e7:d7:a2:83:fd:86:47:
50:15:76:c3:6e:bc:3d:d9:b9:fb:93:e5:0a:ed:f4:
83:ea:9f:25:cc:4c:82:c3:89:11:31:ec:e5:f0:ea:
cd:59:0f:7c:7d:a4:f5:52:a5:cb:25:34:16:63:ba:
10:97:d0:91:c0:7e:7f:66:d2:72:c2:48:96:66:3c:
66:02:73:a7:01:e8:fd:8b:fc:7b:87:05:81:15:35:
76:97:23:47:8f:8e:8d:af:0e:91:92:04:5f:33:6c:
8c:cc:4d:66:da:ef:60:f4:1c:ee:d5:15:98:bd:cb:
a2:bb:2a:8d:0e:e6:a0:b2:af:a0:0c:b9:f8:77:c5:
7f:4f:89:4d:f3:bf:4b:b7:e9:a1:f0:d1:9d:f0:81:
bf:15:74:46:a5:25:e5:16:b9:f7:c3:5d:b2:21:35:
d1:37:15:04:30:68:f3:02:0a:6b:49:13:1f:77:c6:
70:c1:51:ee:47:d1:22:3b:f5:24:83:f1:72:52:70:
43:4b:eb:de:39:d8:d1:81:2e:03:46:73:97:93:52:
ab:91:0a:66:81:63:6f:e6:12:d4:06:d1:85:b2:24:
59:1e:ab:f9:98:6e:db:5c:d6:8a:5f:e3:ea:0c:4c:
3c:1a:61:70:13:70:c1:dc:e7:f9:8d:3b:ba:71:d1:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:48:51:A6:92:71:27:2B:9F:22:FF:AF:7C:50:D8:C0:00:BE:B9:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:2d:73:98:4d:80:ae:e6:1c:14:e1:e7:43:96:4a:38:1a:20:
de:48:90:a1:cf:17:d6:75:af:e2:7c:6e:4c:ae:3c:36:32:54:
6d:e9:97:ad:15:23:8b:99:de:9e:c9:22:39:b6:66:a7:8a:14:
93:b0:c7:c1:87:66:22:9d:eb:03:d6:25:4d:f8:57:95:54:77:
14:45:1e:7f:63:db:90:70:24:2d:16:47:3a:fd:aa:03:5b:e4:
b3:a1:7c:bb:f5:56:38:bb:30:3c:64:9f:3d:ac:3a:a9:c7:9e:
ce:0f:be:5e:81:13:84:d6:3b:5a:0e:cb:55:f7:a3:38:86:51:
0e:02:62:2d:7f:0a:0d:8b:b8:b3:ad:ce:dd:db:04:cc:e3:ee:
94:8b:02:18:42:33:46:e2:82:77:04:36:82:67:e9:20:21:5d:
9b:3b:69:e2:56:5e:28:b9:94:ce:9e:3a:af:67:be:ea:69:4e:
04:1c:f9:f9:fc:16:2c:5a:91:0f:98:74:54:97:c4:ec:29:8b:
de:a9:a5:f7:96:32:21:86:5c:e4:f1:4a:0e:b2:1c:42:9c:88:
f5:06:ae:0a:e7:54:02:c5:5c:62:73:4e:e2:c4:e7:4a:5a:97:
62:fe:bc:94:93:e8:1a:96:c2:d3:63:e7:c7:c2:42:08:bc:b6:
3c:6f:29:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh038TarYoMjpVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmYwZWE5NjEtOWZjOS00MmY3LTg4YzktNzAyODBhYWZmZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvqRPzlg3OfXooP9hkdQFXbDbrw92bn7k+UK
7fSD6p8lzEyCw4kRMezl8OrNWQ98faT1UqXLJTQWY7oQl9CRwH5/ZtJywkiWZjxm
AnOnAej9i/x7hwWBFTV2lyNHj46Nrw6RkgRfM2yMzE1m2u9g9Bzu1RWYvcuiuyqN
Duagsq+gDLn4d8V/T4lN879Lt+mh8NGd8IG/FXRGpSXlFrn3w12yITXRNxUEMGjz
AgprSRMfd8ZwwVHuR9EiO/Ukg/FyUnBDS+veOdjRgS4DRnOXk1KrkQpmgWNv5hLU
BtGFsiRZHqv5mG7bXNaKX+PqDEw8GmFwE3DB3Of5jTu6cdGzYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVIUaaScScrnyL/r3xQ2MAAvrlKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZTNkYzU1Y2ItMDg3OS0z
MWU4LWE2OTMtZGZkMTIwZWZkY2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiDIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUtc5hNgK7mHBTh50OWSjgaIN5IkKHPF9Z1r+J8bkyuPDYyVG3pl60V
I4uZ3p7JIjm2ZqeKFJOwx8GHZiKd6wPWJU34V5VUdxRFHn9j25BwJC0WRzr9qgNb
5LOhfLv1Vji7MDxknz2sOqnHns4Pvl6BE4TWO1oOy1X3oziGUQ4CYi1/Cg2LuLOt
zt3bBMzj7pSLAhhCM0bigncENoJn6SAhXZs7aeJWXii5lM6eOq9nvuppTgQc+fn8
FixakQ+YdFSXxOwpi96ppfeWMiGGXOTxSg6yHEKciPUGrgrnVALFXGJzTuLE50pa
l2L+vJST6BqWwtNj58fCQgi8tjxvKWc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:23 2026 by rpki-client