
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa
File: a38526c3-764b-3a1b-8738-d253135a31d1.roa (raw, json)
Hash identifier: R2qkX2ltLpD69zvj2bbyubX/ywgoszxholC083QACCw=
Subject key identifier: 95:FC:49:4F:A1:03:04:F8:E0:56:0F:75:C6:AC:19:82:16:B9:9F:01
Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial: 010D0C9F4328584ED9C7649D94828EC3CF4E7800
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 1299
IP address blocks: 70.35.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:64:9d:94:82:8e:c3:cf:4e:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=296fe51e-09ee-460d-8400-17d151452e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:2b:a5:4d:8a:19:9e:3a:c9:86:9b:9e:58:
1c:2f:9d:64:7a:68:e3:0f:9e:7b:54:eb:50:7f:ce:
51:b8:82:e6:99:4e:4d:dd:3c:73:b7:4c:8a:e8:52:
33:34:02:13:d4:48:07:e3:21:d6:5b:c7:63:6b:d9:
5c:31:38:f1:9b:3a:81:fa:44:98:24:94:aa:d2:34:
17:a4:d4:d0:12:ee:02:83:2d:de:22:11:b8:b1:46:
1f:ee:a9:3d:0d:8d:4e:4a:10:f5:95:60:63:f0:1e:
02:92:73:90:1d:0a:43:5e:ff:8d:c9:1d:ae:30:a1:
82:1b:c6:3c:d6:25:20:df:2d:81:bd:88:8c:00:1d:
91:b7:6d:9d:c4:51:b6:30:2f:f0:af:db:de:a6:a5:
30:e3:df:f2:ae:dd:4d:1b:fd:ea:d1:6b:16:d3:b6:
89:39:7a:0f:da:0d:6f:bd:d2:0e:12:84:cf:ba:e8:
82:68:7c:3a:62:31:41:d2:b8:0b:20:65:3b:60:0b:
f3:3a:4e:b7:6e:7d:3c:f7:84:a3:52:40:78:0d:56:
52:18:be:10:06:ff:ff:84:95:54:b5:ec:da:c5:2a:
5a:ff:67:7a:ca:b7:75:7f:6a:2e:7a:d0:0f:72:02:
09:2d:da:b2:c3:b3:15:73:68:16:39:f4:3e:96:3c:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:49:4F:A1:03:04:F8:E0:56:0F:75:C6:AC:19:82:16:B9:9F:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
X509v3 Authority Key Identifier:
keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
sbgp-ipAddrBlock: critical
IPv4:
70.35.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:1e:90:63:c9:ef:82:f6:79:21:0d:c9:1f:0e:42:8d:11:10:
c1:af:c1:94:93:f1:00:ab:2b:a0:5d:31:c0:24:02:77:dd:14:
77:b3:1c:25:88:80:71:c0:68:c2:73:22:6d:98:c5:9f:20:fb:
4f:fa:2d:ef:75:56:32:8b:bd:53:45:5b:3f:3d:2f:0b:e9:62:
21:95:c7:4f:56:5b:f4:66:cf:6c:d8:e8:b6:81:6a:49:8f:b1:
8f:f3:30:1f:07:a9:1a:cf:a8:0d:e3:b2:f0:13:30:f1:92:80:
8f:6d:33:5d:1c:82:bd:8e:1f:19:c0:1b:95:74:b5:18:1b:f2:
1a:4e:f0:ba:0e:25:1a:1e:1c:d4:a7:54:c1:38:48:9f:d0:d3:
7e:1e:19:e5:18:48:c5:1c:4b:21:89:e3:89:04:ff:a7:6a:1f:
1c:6b:88:7a:09:26:05:cc:f8:9b:9c:83:6e:86:0e:f3:7f:8a:
c2:91:b4:ca:a0:8a:5f:9f:a1:5a:34:82:08:a9:44:03:7a:e9:
b0:db:df:1f:2f:1d:85:89:02:cf:09:8a:77:56:ca:a4:6e:52:
3a:05:c7:96:b9:8a:7c:67:e1:89:6d:78:b4:df:e7:64:e7:2b:
d1:48:d4:6f:9a:8d:6e:13:9e:f3:6f:f0:31:a1:38:c1:63:73:
b1:a5:ef:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2SdlIKOw89OeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm
NTZmMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
Mjk2ZmU1MWUtMDllZS00NjBkLTg0MDAtMTdkMTUxNDUyZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhorpU2KGZ46yYabnlgcL51kemjjD557VOtQ
f85RuILmmU5N3Txzt0yK6FIzNAIT1EgH4yHWW8dja9lcMTjxmzqB+kSYJJSq0jQX
pNTQEu4Cgy3eIhG4sUYf7qk9DY1OShD1lWBj8B4CknOQHQpDXv+NyR2uMKGCG8Y8
1iUg3y2BvYiMAB2Rt22dxFG2MC/wr9vepqUw49/yrt1NG/3q0WsW07aJOXoP2g1v
vdIOEoTPuuiCaHw6YjFB0rgLIGU7YAvzOk63bn0894SjUkB4DVZSGL4QBv//hJVU
tezaxSpa/2d6yrd1f2ouetAPcgIJLdqyw7MVc2gWOfQ+ljz9cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJX8SU+hAwT44FYPdcasGYIWuZ8BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj
NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvYTM4NTI2YzMtNzY0Yi0z
YTFiLTg3MzgtZDI1MzEzNWEzMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1
NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0
ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5
YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcekGPJ74L2eSENyR8OQo0REMGvwZST8QCrK6BdMcAkAnfdFHezHCWI
gHHAaMJzIm2YxZ8g+0/6Le91VjKLvVNFWz89LwvpYiGVx09WW/Rmz2zY6LaBakmP
sY/zMB8HqRrPqA3jsvATMPGSgI9tM10cgr2OHxnAG5V0tRgb8hpO8LoOJRoeHNSn
VME4SJ/Q034eGeUYSMUcSyGJ44kE/6dqHxxriHoJJgXM+Jucg26GDvN/isKRtMqg
il+foVo0ggipRAN66bDb3x8vHYWJAs8JindWyqRuUjoFx5a5inxn4YlteLTf52Tn
K9FI1G+ajW4TnvNv8DGhOMFjc7Gl754=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:43:31 2026 by rpki-client