
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa
File: aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa (raw, json)
Hash identifier: fYnk1oQQasChP7rq29enmKkdqPNHQKwrEGG0+byQKc4=
Subject key identifier: 7B:5C:63:7B:C8:3B:D7:E7:B2:08:29:09:8C:7A:2E:B2:53:0D:9E:2D
Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Certificate serial: 010D0C9F4328584D143D2D089AB5CD597FAD00C0
Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 394470
IP address blocks: 216.10.70.0/23 maxlen: 23
216.10.70.0/24 maxlen: 24
216.10.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:2d:08:9a:b5:cd:59:7f:ad:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=e93ccdc1-5997-4616-985b-1c9a94c8462e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:9c:e4:b2:ba:4a:e2:3a:9f:a3:2f:9d:f9:
dd:89:b3:94:50:dd:dd:a7:a5:0a:ad:37:99:46:0c:
c3:d6:8b:47:f6:c1:a1:22:82:18:ef:a3:18:6f:bb:
49:17:f8:ee:b2:fa:14:d4:2d:84:24:e0:ef:89:a8:
6e:20:3e:8e:45:b6:20:ce:16:7e:4d:56:95:bf:2f:
ad:80:10:f8:16:28:99:37:3c:03:9a:5e:63:66:30:
13:e6:8c:28:35:fd:86:41:0a:2b:c4:97:ad:f3:d4:
49:23:26:1b:20:1e:6f:ec:a9:50:7d:10:14:9f:ed:
cc:14:84:4c:0b:cd:c2:46:64:1a:30:8c:f0:ce:7d:
c3:b5:61:61:af:a7:d4:b0:91:82:e0:85:1a:d1:93:
33:6f:c2:a6:ab:58:dc:51:5e:07:da:d6:4c:0d:a4:
b2:d3:a2:0a:ee:a6:1d:42:d7:8c:2f:e7:f3:d7:be:
2c:e5:2e:b8:48:f7:e2:c5:d3:af:63:65:2d:93:ba:
98:41:1a:24:ae:c0:22:d4:80:f1:c2:f2:a4:2d:e6:
c8:1b:d2:93:96:d5:34:a9:16:15:27:16:2f:2d:60:
48:c7:02:de:46:8d:60:73:cc:af:dc:db:39:4f:c6:
8c:f4:31:11:0c:f3:7b:e3:4a:c0:17:6c:03:77:72:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5C:63:7B:C8:3B:D7:E7:B2:08:29:09:8C:7A:2E:B2:53:0D:9E:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl
X509v3 Authority Key Identifier:
keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.10.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:6b:04:59:13:a4:22:54:5d:89:69:e8:fe:e1:20:0b:59:4e:
29:9f:82:9e:10:0e:8f:44:7e:26:00:ae:16:44:b4:b4:0c:af:
6e:8c:bd:c9:af:ff:78:9b:06:d1:56:a2:0e:a7:c0:52:29:46:
07:8d:95:c6:43:f2:c9:3e:7d:dd:b5:a3:2e:19:b1:c6:a1:dc:
63:6c:d6:df:7e:18:80:45:4b:31:b7:ea:77:3c:4d:c0:12:51:
27:f0:fa:95:cd:76:c8:e0:67:4b:bf:29:f2:fe:9d:c7:8f:2a:
9d:de:ce:4d:23:20:39:2e:6f:f4:8f:66:d1:f1:c1:c4:0c:e8:
b9:e4:d6:7e:74:71:20:e3:c8:0b:ee:8e:30:39:24:48:1a:d6:
f8:d6:5b:fe:48:71:d2:2a:21:23:49:0a:77:26:74:f7:d6:dd:
fe:9b:f4:b5:9e:a4:85:af:ae:fd:40:10:32:27:a5:16:ed:88:
99:a3:89:fb:ad:47:eb:62:10:ba:1d:79:c8:4b:ff:4b:da:28:
d4:46:cc:10:eb:a0:3e:4a:43:cf:3d:24:ae:c4:3c:cc:9a:70:
c8:0a:3d:8d:7c:8e:a7:b2:1f:19:67:7a:db:05:b8:e2:10:79:
bc:13:8a:dd:93:9a:9e:00:a0:7c:7e:9f:a5:2a:51:b8:54:fd:
52:42:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:28:34 2026 by rpki-client