
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01656a04-c922-3959-9fac-34b93953f4c0.roa
File: 01656a04-c922-3959-9fac-34b93953f4c0.roa (raw, json)
Hash identifier: EgLAQmqRTgw+uVXDHtzMDBQ1rvHHmOyTtmjXk9oxKQ8=
Subject key identifier: 47:B5:61:1C:91:82:71:EA:58:B8:61:E6:A1:61:B3:F3:95:05:52:13
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D3C40FBC5F308509C0AC08F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01656a04-c922-3959-9fac-34b93953f4c0.roa
Signing time: Fri 20 Mar 2026 22:01:01 +0000
ROA not before: Fri 20 Mar 2026 22:01:01 +0000
ROA not after: Thu 18 Jun 2026 22:01:01 +0000
asID: 401152
IP address blocks: 199.58.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3c:40:fb:c5:f3:08:50:9c:0a:c0:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 20 22:01:01 2026 GMT
Not After : Jun 18 22:01:01 2026 GMT
Subject: CN=794ff7b8-f1ec-4de2-ba6d-6fb8e99ad0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:5b:d1:24:c4:b7:d9:27:57:7a:76:2f:4a:
1c:58:d4:fd:f5:aa:92:83:aa:15:e5:3a:c7:9a:fc:
8f:11:56:b6:3b:af:ad:55:a6:fc:59:18:5e:00:d5:
91:ab:b8:a2:be:8c:8c:ee:0d:1c:70:99:1c:3c:72:
46:bf:f0:63:63:41:b9:7b:fc:05:d5:c6:19:03:3d:
02:e4:75:6b:23:2c:e2:0f:44:cd:d5:f4:56:24:6a:
a3:b8:0b:a5:03:a3:94:be:99:8a:49:d3:bc:97:58:
c2:25:15:45:41:4c:4e:96:f8:be:46:70:e2:a5:8a:
4b:61:3e:3f:96:72:d7:fc:89:d3:2e:26:1c:b5:72:
75:60:f5:7b:d9:6b:4f:4c:b6:38:52:57:3d:9d:9f:
5d:a5:0e:75:bb:11:a1:a1:f3:35:59:37:b5:ea:69:
79:d1:ee:c2:25:65:66:ad:03:39:46:a4:87:06:b5:
57:d4:25:77:1f:85:62:88:28:3d:a8:80:74:5a:27:
94:bd:2d:7a:d7:33:49:74:a2:54:96:c5:fc:37:86:
50:8f:ca:e1:a1:4e:e2:e0:78:99:1c:34:c0:4d:40:
ef:f5:d7:d8:27:5f:f2:82:60:c0:33:8c:ae:e4:bc:
f1:08:ef:5a:3a:85:6e:fc:8d:b6:7c:3f:01:98:7d:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:61:1C:91:82:71:EA:58:B8:61:E6:A1:61:B3:F3:95:05:52:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01656a04-c922-3959-9fac-34b93953f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f9:cf:c5:87:dd:cb:ad:10:63:ac:e3:b2:f6:7f:a0:eb:88:
a0:1b:be:e1:a4:9c:cc:fd:22:6a:a5:40:fc:6d:75:a7:b9:78:
c9:e2:33:89:71:b6:4c:d7:6c:aa:dc:e3:e5:39:4e:25:25:17:
2b:1b:38:08:0a:d8:2e:68:98:ac:ae:c9:00:09:4f:6d:fd:9f:
86:0c:94:07:ed:21:62:89:2a:d9:bb:14:a1:e6:0f:1a:5a:cc:
58:ee:e2:78:72:e4:df:e8:50:2e:7b:9a:bf:4b:74:71:e9:b1:
f0:bd:42:cb:2b:70:3e:34:34:c9:9b:fe:fc:e0:1e:b3:df:dc:
ae:10:38:d3:57:93:29:6d:b2:8a:f4:1d:9a:65:0d:ad:12:bf:
bf:e2:e3:4b:97:87:ed:f9:b2:ba:f7:00:17:fe:e8:37:d6:c2:
07:30:39:c7:00:58:de:64:b5:bd:c8:30:7d:4a:5d:3a:05:6b:
02:c7:7e:fb:9b:37:98:c7:6e:a5:e0:05:1a:86:5a:fc:9e:d6:
f7:ed:80:00:3d:50:ec:b5:12:84:2a:88:87:49:7f:3e:25:b1:
96:bf:0e:7a:bf:81:bf:7f:05:09:3a:d2:98:ed:ca:d6:2a:b8:
04:d7:1f:9b:7a:31:5a:c2:5e:83:da:f5:8a:25:2b:8e:6d:08:
99:25:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 03:51:17 2026 by rpki-client