
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa
File: 0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa (raw, json)
Hash identifier: 8JkNTPTVk1rUTvNY5KlWAbVTNDW0jgqp2PT70GXwSow=
Subject key identifier: 3A:63:9F:8A:31:34:49:6B:A9:96:57:5A:EB:B0:78:82:35:DC:2E:A3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D0A0F3C7B09B117DF99A3C000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa
Signing time: Mon 02 Mar 2026 22:30:21 +0000
ROA not before: Mon 02 Mar 2026 22:30:21 +0000
ROA not after: Sun 31 May 2026 21:30:21 +0000
asID: 399646
IP address blocks: 108.165.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0a:0f:3c:7b:09:b1:17:df:99:a3:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 2 22:30:21 2026 GMT
Not After : May 31 21:30:21 2026 GMT
Subject: CN=696f3cc4-b8ec-4927-8183-b69b0fea24c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:38:36:8f:5d:32:68:05:3d:f1:9b:04:eb:
12:82:13:fc:dd:64:d0:aa:af:93:53:d7:30:7f:ea:
d6:a2:43:43:ef:94:b1:d9:6a:ce:b2:13:5a:53:1f:
64:df:57:66:c2:56:01:06:27:16:d7:c7:6a:b3:ff:
e7:ac:ec:d0:54:94:7e:26:2c:1d:5b:60:0a:6f:df:
4e:5a:2f:2f:00:fb:53:59:ce:0b:4d:ad:c7:71:27:
11:dc:4a:dd:a6:28:75:d5:67:6b:d8:eb:01:ec:15:
d4:b2:37:57:29:eb:89:cf:fa:d9:ef:ef:1d:96:90:
44:77:68:21:9d:ad:82:78:f4:4e:bb:81:57:ff:73:
17:eb:02:9b:a2:69:d9:db:3e:a4:e0:19:c2:e6:41:
c8:46:7d:24:f5:9c:9e:d7:88:1f:78:74:d2:92:be:
d3:2b:ca:cf:3b:bf:74:87:3e:a4:ec:31:d0:6a:9a:
d2:d7:2a:7e:8c:a3:ed:18:36:74:5e:23:25:7c:7d:
7f:fc:f9:a3:f3:98:03:af:34:9c:52:a3:8a:25:42:
09:ed:51:68:6d:89:d7:18:36:08:ea:11:d2:39:99:
76:0d:f0:9a:56:5c:f8:9a:07:46:d7:f8:32:ed:b8:
3d:4a:0f:d7:88:8a:59:00:03:32:2c:f2:ce:8b:e7:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:63:9F:8A:31:34:49:6B:A9:96:57:5A:EB:B0:78:82:35:DC:2E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:55:0b:4a:88:ff:62:28:00:01:49:93:89:8e:c9:81:9d:81:
50:5a:d0:98:00:20:05:4c:e8:8e:c3:b9:9a:96:f4:5f:49:79:
e3:c1:b8:8a:ba:d3:4d:26:12:0b:b7:87:df:ae:fa:4d:9d:60:
42:c6:26:84:3a:a7:0d:fc:a9:42:cb:77:90:74:b3:f6:97:55:
d4:c6:da:11:f1:8d:71:5c:78:39:a6:7e:e5:33:dd:28:61:c1:
48:e8:f8:57:d0:6b:6b:0d:6d:37:93:4e:3e:71:71:f1:e9:9a:
58:9b:f0:38:db:54:da:26:b1:29:67:5e:7c:2f:3e:82:db:f9:
6f:d1:83:d6:df:14:76:54:d7:80:aa:ab:f3:f2:ce:00:fa:ad:
4c:a1:64:98:be:ce:eb:bb:98:3c:1a:a7:a7:1d:15:34:0f:7e:
85:d0:dd:e1:8a:6f:11:23:76:17:03:aa:26:af:d3:46:38:9e:
cb:04:14:11:3d:f5:2d:09:15:90:dc:bd:00:1e:a9:03:84:1e:
d3:60:26:3f:9d:a7:58:56:9f:69:32:03:7f:71:e0:75:7a:f1:
fa:04:a3:03:1c:c0:d4:da:b4:8b:1d:2a:d0:fb:79:30:4f:10:
2c:22:0d:08:df:b6:e1:79:0d:82:bd:c9:ca:18:1d:5a:01:07:
8f:ef:a8:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0KDzx7CbEX35mjwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMwMjIyMzAyMVoXDTI2MDUzMTIxMzAyMVowLzEtMCsGA1UEAxMk
Njk2ZjNjYzQtYjhlYy00OTI3LTgxODMtYjY5YjBmZWEyNGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w84No9dMmgFPfGbBOsSghP83WTQqq+TU9cw
f+rWokND75Sx2WrOshNaUx9k31dmwlYBBicW18dqs//nrOzQVJR+JiwdW2AKb99O
Wi8vAPtTWc4LTa3HcScR3Erdpih11Wdr2OsB7BXUsjdXKeuJz/rZ7+8dlpBEd2gh
na2CePROu4FX/3MX6wKbomnZ2z6k4BnC5kHIRn0k9Zye14gfeHTSkr7TK8rPO790
hz6k7DHQaprS1yp+jKPtGDZ0XiMlfH1//Pmj85gDrzScUqOKJUIJ7VFobYnXGDYI
6hHSOZl2DfCaVlz4mgdG1/gy7bg9Sg/XiIpZAAMyLPLOi+crVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpjn4oxNElrqZZXWuuweII13C6jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGZmNThkNmQtYjI3NS0z
YTYwLWI3NDItMDFkNmE1Y2FlNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBVC0qI/2IoAAFJk4mOyYGdgVBa0JgAIAVM6I7DuZqW9F9JeePBuIq6
000mEgu3h9+u+k2dYELGJoQ6pw38qULLd5B0s/aXVdTG2hHxjXFceDmmfuUz3Shh
wUjo+FfQa2sNbTeTTj5xcfHpmlib8DjbVNomsSlnXnwvPoLb+W/Rg9bfFHZU14Cq
q/PyzgD6rUyhZJi+zuu7mDwap6cdFTQPfoXQ3eGKbxEjdhcDqiav00Y4nssEFBE9
9S0JFZDcvQAeqQOEHtNgJj+dp1hWn2kyA39x4HV68foEowMcwNTatIsdKtD7eTBP
ECwiDQjftuF5DYK9ycoYHVoBB4/vqDo=
-----END CERTIFICATE-----
Generated at Thu Mar 5 10:42:46 2026 by rpki-client