
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/414bd657-d141-3cbc-826b-0133cfdfe864.roa
File: 414bd657-d141-3cbc-826b-0133cfdfe864.roa (raw, json)
Hash identifier: g0dWuPuYBQ29Us367+ORsoyfZ69Y1rNHvNKs8qXCi2E=
Subject key identifier: C5:D1:2A:C1:8F:EA:B6:F7:76:50:A5:C3:5F:49:C0:AB:A4:69:56:DB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584DE5807F75C23508B55C196200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/414bd657-d141-3cbc-826b-0133cfdfe864.roa
Signing time: Wed 20 May 2026 13:00:31 +0000
ROA not before: Wed 20 May 2026 13:00:31 +0000
ROA not after: Tue 18 Aug 2026 13:00:31 +0000
asID: 149440
IP address blocks: 108.165.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e5:80:7f:75:c2:35:08:b5:5c:19:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 20 13:00:31 2026 GMT
Not After : Aug 18 13:00:31 2026 GMT
Subject: CN=43fcbc37-3b9e-4501-823c-6436d49f04bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:3f:45:92:76:46:46:8a:6b:77:11:3a:cb:
fa:82:23:ef:6c:8d:dc:6b:52:8d:bf:a2:64:65:da:
70:f5:13:31:17:a9:17:e4:d6:4c:f2:72:50:b4:a1:
75:08:e9:3d:34:83:28:a9:c3:4e:d4:4c:a6:c4:68:
c4:a6:52:ca:80:f5:e1:09:3f:cd:e5:a0:8b:90:2d:
63:97:fa:31:33:34:84:71:48:5e:72:17:a3:87:18:
76:1c:89:e2:69:9f:28:99:cb:de:a9:38:e7:92:b7:
63:4b:7e:59:d3:4b:93:97:46:d9:cd:b6:bb:33:9a:
51:d4:32:3f:17:aa:9f:99:e2:f8:58:b9:11:53:bd:
5a:c4:c0:da:07:22:cd:2f:79:0c:f0:b5:f5:5c:d9:
24:97:73:44:66:58:60:92:b6:41:bf:70:fd:73:aa:
a0:16:cb:aa:b0:0d:bb:be:72:85:8e:4b:3a:61:ab:
a0:7a:9d:58:b2:8a:bf:3b:dc:1d:52:c4:1a:4e:43:
89:24:ec:95:ea:ea:fd:70:a9:9a:ec:be:9b:1c:01:
5f:d1:7e:1b:78:83:da:c3:c2:dd:cb:25:d9:2f:dc:
41:4f:da:f9:d4:c2:a9:71:27:58:40:67:07:32:79:
d2:a3:b4:27:4f:80:87:82:35:c2:10:31:75:8e:a6:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D1:2A:C1:8F:EA:B6:F7:76:50:A5:C3:5F:49:C0:AB:A4:69:56:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/414bd657-d141-3cbc-826b-0133cfdfe864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:55:b2:5f:7c:99:bd:0d:a1:c1:e4:56:f7:b0:9f:5e:f7:97:
b7:5c:06:a9:63:d1:ee:a9:5d:ad:99:06:57:ff:f2:30:ee:55:
48:8d:31:3c:f3:d5:af:bf:8f:48:6b:1b:61:27:c2:b8:1c:56:
0b:ee:75:05:83:83:5c:70:3a:83:47:3d:54:69:0d:e6:ba:d7:
a8:90:16:60:94:d3:9e:8f:e8:b1:41:d1:3c:92:d6:28:77:dc:
c9:03:6e:e8:51:8e:fa:2d:81:17:48:d8:cc:0a:46:5a:0d:d8:
9d:a1:10:69:64:a4:bf:f1:0e:ed:cc:87:50:ec:20:7c:17:09:
d7:da:50:44:0b:c5:e9:03:91:cc:7c:c6:d1:f4:81:1b:16:17:
3c:bd:2f:79:b5:57:7f:27:fe:30:1c:fa:f1:80:e6:c1:13:96:
d4:4a:99:60:ce:21:16:91:6f:1b:e5:0d:e0:22:35:f6:1f:a6:
d4:c6:d8:6c:5c:31:4e:5f:ef:16:cd:fd:59:9d:74:3e:3f:4e:
57:15:32:7c:cd:79:6e:73:19:36:d3:b6:31:bb:e3:fe:3e:12:
30:b6:0d:de:69:95:ed:42:3f:82:1f:67:7d:34:83:b1:0c:85:
20:5a:1c:c6:1e:92:8f:09:b4:c8:8d:f1:d9:0f:3c:4a:6a:1b:
1d:51:f2:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lgH91wjUItVwZYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk
NDNmY2JjMzctM2I5ZS00NTAxLTgyM2MtNjQzNmQ0OWYwNGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEo/RZJ2RkaKa3cROsv6giPvbI3ca1KNv6Jk
Zdpw9RMxF6kX5NZM8nJQtKF1COk9NIMoqcNO1EymxGjEplLKgPXhCT/N5aCLkC1j
l/oxMzSEcUhechejhxh2HIniaZ8omcveqTjnkrdjS35Z00uTl0bZzba7M5pR1DI/
F6qfmeL4WLkRU71axMDaByLNL3kM8LX1XNkkl3NEZlhgkrZBv3D9c6qgFsuqsA27
vnKFjks6Yaugep1Ysoq/O9wdUsQaTkOJJOyV6ur9cKma7L6bHAFf0X4beIPaw8Ld
yyXZL9xBT9r51MKpcSdYQGcHMnnSo7QnT4CHgjXCEDF1jqZeCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXRKsGP6rb3dlClw19JwKukaVbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDE0YmQ2NTctZDE0MS0z
Y2JjLTgyNmItMDEzM2NmZGZlODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJVsl98mb0NocHkVvewn173l7dcBqlj0e6pXa2ZBlf/8jDuVUiNMTzz
1a+/j0hrG2EnwrgcVgvudQWDg1xwOoNHPVRpDea616iQFmCU056P6LFB0TyS1ih3
3MkDbuhRjvotgRdI2MwKRloN2J2hEGlkpL/xDu3Mh1DsIHwXCdfaUEQLxekDkcx8
xtH0gRsWFzy9L3m1V38n/jAc+vGA5sETltRKmWDOIRaRbxvlDeAiNfYfptTG2Gxc
MU5f7xbN/VmddD4/TlcVMnzNeW5zGTbTtjG74/4+EjC2Dd5ple1CP4IfZ300g7EM
hSBaHMYeko8JtMiN8dkPPEpqGx1R8mA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:58:15 2026 by rpki-client