
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/387210a4-fb56-3c89-a704-e7b20b239697.roa
File: 387210a4-fb56-3c89-a704-e7b20b239697.roa (raw, json)
Hash identifier: 2KB+RH1RvIEr3xY9JfPmQnzDUY7OlPmUObWRBQITCQ4=
Subject key identifier: F0:4D:70:21:79:28:71:A0:0A:A1:5B:4D:2C:83:49:B0:BB:7E:B8:B2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D4461D95C30C79987BDC904C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/387210a4-fb56-3c89-a704-e7b20b239697.roa
Signing time: Mon 23 Mar 2026 19:53:42 +0000
ROA not before: Mon 23 Mar 2026 19:53:42 +0000
ROA not after: Sun 21 Jun 2026 19:53:42 +0000
asID: 11798
IP address blocks: 108.165.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:61:d9:5c:30:c7:99:87:bd:c9:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 23 19:53:42 2026 GMT
Not After : Jun 21 19:53:42 2026 GMT
Subject: CN=7f668651-c66e-42d9-8caf-d964bf1be8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:26:c9:c9:3b:5c:0f:da:ad:31:3d:1f:c6:
3f:50:75:7b:97:3f:a8:7d:49:87:a4:bf:be:5b:ce:
ac:04:cb:86:47:d7:eb:2a:37:54:16:65:e2:55:c7:
4b:9c:5e:fe:3b:fc:e9:47:5f:e9:2f:ea:a3:18:d4:
97:fb:48:e7:e4:ac:6b:7e:27:8e:08:24:41:c6:f7:
67:57:11:3a:95:42:dd:d3:0a:04:3f:e6:0a:dc:01:
69:71:20:0f:a6:f2:41:1b:f7:7c:cf:71:c3:9f:c4:
33:07:97:7b:45:9f:c7:f0:86:50:88:bb:f6:aa:65:
31:90:8a:39:8c:d4:ba:4e:85:4a:ef:6b:d6:11:f9:
ae:d7:f1:39:c6:61:0c:4e:a7:21:9a:66:65:98:b0:
07:63:f8:9e:53:f4:d1:19:63:ea:48:01:25:66:22:
c1:0b:24:76:8d:05:fd:e9:db:46:91:bd:72:18:51:
26:f1:ef:9b:f4:dd:1d:6a:41:62:01:70:25:6c:ff:
09:fd:65:e0:57:0f:51:cb:73:37:bd:1f:41:d9:bd:
d2:cb:0a:ce:3b:8a:c7:37:2e:02:f9:70:88:8f:e2:
e0:8a:08:9e:83:ac:b1:98:8f:35:02:96:2f:95:27:
8c:aa:c7:93:ca:08:f6:bc:fc:c4:0c:25:c0:99:4e:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4D:70:21:79:28:71:A0:0A:A1:5B:4D:2C:83:49:B0:BB:7E:B8:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/387210a4-fb56-3c89-a704-e7b20b239697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:7f:d3:cf:f4:8b:0d:15:05:a6:d5:9e:73:46:b7:50:ea:28:
b1:43:fb:7f:73:32:9b:ad:a8:1b:ea:c0:81:92:86:ab:29:18:
4e:85:15:57:3c:18:a5:aa:bc:77:bf:22:77:a8:ab:d2:64:47:
89:02:91:c8:13:9c:39:8a:20:69:7e:2f:03:e5:92:34:2a:c8:
14:d0:b3:dc:9f:b4:f2:3a:45:74:33:0d:f1:1d:c7:82:45:b8:
1e:39:9d:ab:87:b7:9e:54:cb:69:00:0d:40:0e:08:8e:a4:5e:
32:52:35:16:00:81:49:49:11:38:16:5e:b4:f8:02:a7:14:39:
56:73:6a:e2:06:c3:50:46:08:91:0d:cc:67:12:6b:31:b5:c4:
d7:52:3b:31:98:93:77:7f:ad:96:93:09:92:e4:4b:f1:6c:8c:
b3:01:6a:2e:ca:f7:c3:06:b3:1f:46:15:66:59:82:4d:d7:85:
54:4e:09:81:a2:5c:9a:23:d6:5f:1c:30:8b:2d:71:57:44:fa:
d7:90:73:55:35:70:f9:6f:01:2c:b6:3f:a6:7e:56:c6:aa:76:
e2:8a:8a:b4:db:96:62:a5:78:c3:9e:4e:39:c7:a9:5e:7f:90:
b4:9f:aa:4e:a0:07:57:f4:db:02:06:93:63:b5:a5:9d:08:f3:
84:68:a3:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdlcMMeZh73JBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMyMzE5NTM0MloXDTI2MDYyMTE5NTM0MlowLzEtMCsGA1UEAxMk
N2Y2Njg2NTEtYzY2ZS00MmQ5LThjYWYtZDk2NGJmMWJlOGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf8myck7XA/arTE9H8Y/UHV7lz+ofUmHpL++
W86sBMuGR9frKjdUFmXiVcdLnF7+O/zpR1/pL+qjGNSX+0jn5KxrfieOCCRBxvdn
VxE6lULd0woEP+YK3AFpcSAPpvJBG/d8z3HDn8QzB5d7RZ/H8IZQiLv2qmUxkIo5
jNS6ToVK72vWEfmu1/E5xmEMTqchmmZlmLAHY/ieU/TRGWPqSAElZiLBCyR2jQX9
6dtGkb1yGFEm8e+b9N0dakFiAXAlbP8J/WXgVw9Ry3M3vR9B2b3SywrOO4rHNy4C
+XCIj+Lgigieg6yxmI81ApYvlSeMqseTygj2vPzEDCXAmU6CfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBNcCF5KHGgCqFbTSyDSbC7friyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzg3MjEwYTQtZmI1Ni0z
Yzg5LWE3MDQtZTdiMjBiMjM5Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKU2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9/08/0iw0VBabVnnNGt1DqKLFD+39zMputqBvqwIGShqspGE6FFVc8
GKWqvHe/Ineoq9JkR4kCkcgTnDmKIGl+LwPlkjQqyBTQs9yftPI6RXQzDfEdx4JF
uB45nauHt55Uy2kADUAOCI6kXjJSNRYAgUlJETgWXrT4AqcUOVZzauIGw1BGCJEN
zGcSazG1xNdSOzGYk3d/rZaTCZLkS/FsjLMBai7K98MGsx9GFWZZgk3XhVROCYGi
XJoj1l8cMIstcVdE+teQc1U1cPlvASy2P6Z+VsaqduKKirTblmKleMOeTjnHqV5/
kLSfqk6gB1f02wIGk2O1pZ0I84Roo+Y=
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:32:01 2026 by rpki-client