
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ffde626-1da3-35a5-ae30-088fe7f45a33.roa
File: 1ffde626-1da3-35a5-ae30-088fe7f45a33.roa (raw, json)
Hash identifier: c/1p0jQwFz8TdnKaI1YlOfh0L3LHu0qW+KFWjwdj6S4=
Subject key identifier: 63:46:0B:AA:AA:B0:BA:7C:B0:AA:05:11:CE:E6:AE:7B:F1:82:FE:09
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D366F5B02FBB69E0AE0370440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ffde626-1da3-35a5-ae30-088fe7f45a33.roa
Signing time: Wed 18 Mar 2026 19:59:36 +0000
ROA not before: Wed 18 Mar 2026 19:59:36 +0000
ROA not after: Tue 16 Jun 2026 19:59:36 +0000
asID: 401152
IP address blocks: 108.165.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:36:6f:5b:02:fb:b6:9e:0a:e0:37:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 18 19:59:36 2026 GMT
Not After : Jun 16 19:59:36 2026 GMT
Subject: CN=a1afbedd-91ce-46bf-98ac-e4cb25a7f254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:56:c0:a3:fd:9e:9f:f1:7d:5f:5f:43:0c:
cd:1e:f0:b4:9a:a9:ab:0b:32:d0:cb:fc:8b:a1:2a:
5e:4b:8f:0a:72:91:bb:59:68:89:45:14:e3:1c:24:
6c:0d:4f:16:06:af:98:5e:59:0b:83:ae:48:a3:cf:
c5:6d:fe:a0:bb:0b:5e:d3:1e:65:d2:00:64:6c:58:
18:d9:9e:26:9e:f7:01:19:ad:37:72:a0:0b:8e:04:
d9:63:d5:5a:62:38:ef:8e:00:21:ad:0e:47:80:44:
36:14:6d:49:70:32:19:10:40:b8:bc:fb:98:9b:3e:
f7:1c:cf:f9:b1:e3:59:04:b9:3a:b8:38:c9:be:69:
17:53:97:8e:4d:d5:4c:f4:d3:6c:43:4f:86:fa:64:
59:5a:20:9b:6b:ea:77:f0:90:ed:7a:e8:2b:58:b9:
2e:dd:2b:f8:4b:8d:18:e7:4b:ef:85:63:74:17:21:
a1:07:77:3f:1d:60:dc:69:02:30:1e:95:f2:cd:0e:
54:75:07:b4:b0:56:b8:1b:68:27:e7:b1:81:30:a3:
18:9d:27:c8:36:6a:35:8f:40:eb:75:a7:f0:c8:f6:
f4:c9:7e:b2:f9:1e:d0:18:72:5a:2a:10:a3:65:84:
bb:8f:7f:32:3c:60:10:1a:8e:5c:28:14:4e:0f:fe:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:46:0B:AA:AA:B0:BA:7C:B0:AA:05:11:CE:E6:AE:7B:F1:82:FE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ffde626-1da3-35a5-ae30-088fe7f45a33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:26:09:55:c3:d2:a7:a8:5e:0d:44:22:e9:71:13:f9:c8:7a:
2a:78:f3:25:f6:18:07:39:5a:72:80:99:a6:87:3b:0e:d4:24:
cb:b1:80:59:af:02:af:a4:5c:91:2a:37:0e:93:f5:24:33:3f:
39:ac:dc:62:3d:4d:b8:36:47:e3:65:04:4f:0b:ff:47:d0:7e:
42:fa:92:98:7a:cd:28:1d:d5:ef:9c:9b:f0:e4:f5:a9:92:e0:
e9:4a:e8:a2:d7:e7:10:3a:06:1a:83:4d:d5:a7:ab:19:cb:85:
a8:71:47:32:71:3c:28:6a:f9:dc:60:92:80:1f:35:52:fa:df:
54:9b:c0:fe:68:64:82:74:65:4d:13:98:1f:d9:8c:47:8e:da:
03:94:17:ad:6c:a1:e1:16:a1:71:fd:96:e9:11:7a:95:7d:44:
93:43:bd:cf:8e:8f:3f:f0:ea:34:71:7f:09:66:5d:83:d3:b4:
e5:a0:68:b6:3f:8b:00:02:1e:e4:b5:73:63:5e:37:82:5d:15:
b5:b5:d9:37:63:56:b6:5b:71:fc:46:eb:27:ca:70:1c:ad:68:
ff:3f:48:2c:13:e3:d8:ca:5f:8e:41:c3:b6:fe:51:30:ae:32:
76:36:38:ef:f7:87:3d:be:08:39:70:c5:19:c0:87:09:2c:7e:
2a:0c:d7:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1sC+7aeCuA3BEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxODE5NTkzNloXDTI2MDYxNjE5NTkzNlowLzEtMCsGA1UEAxMk
YTFhZmJlZGQtOTFjZS00NmJmLTk4YWMtZTRjYjI1YTdmMjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFVWwKP9np/xfV9fQwzNHvC0mqmrCzLQy/yL
oSpeS48KcpG7WWiJRRTjHCRsDU8WBq+YXlkLg65Io8/Fbf6guwte0x5l0gBkbFgY
2Z4mnvcBGa03cqALjgTZY9VaYjjvjgAhrQ5HgEQ2FG1JcDIZEEC4vPuYmz73HM/5
seNZBLk6uDjJvmkXU5eOTdVM9NNsQ0+G+mRZWiCba+p38JDteugrWLku3Sv4S40Y
50vvhWN0FyGhB3c/HWDcaQIwHpXyzQ5UdQe0sFa4G2gn57GBMKMYnSfINmo1j0Dr
dafwyPb0yX6y+R7QGHJaKhCjZYS7j38yPGAQGo5cKBROD/7uzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGNGC6qqsLp8sKoFEc7mrnvxgv4JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWZmZGU2MjYtMWRhMy0z
NWE1LWFlMzAtMDg4ZmU3ZjQ1YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgmCVXD0qeoXg1EIulxE/nIeip48yX2GAc5WnKAmaaHOw7UJMuxgFmv
Aq+kXJEqNw6T9SQzPzms3GI9Tbg2R+NlBE8L/0fQfkL6kph6zSgd1e+cm/Dk9amS
4OlK6KLX5xA6BhqDTdWnqxnLhahxRzJxPChq+dxgkoAfNVL631SbwP5oZIJ0ZU0T
mB/ZjEeO2gOUF61soeEWoXH9lukRepV9RJNDvc+Ojz/w6jRxfwlmXYPTtOWgaLY/
iwACHuS1c2NeN4JdFbW12TdjVrZbcfxG6yfKcBytaP8/SCwT49jKX45Bw7b+UTCu
MnY2OO/3hz2+CDlwxRnAhwksfioM17o=
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:48:25 2026 by rpki-client