
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41a1195b-7c73-3906-8cab-48804a50d378.roa
File: 41a1195b-7c73-3906-8cab-48804a50d378.roa (raw, json)
Hash identifier: EFK+Kx0PRJ2fePJ2wgEIkupom1Ku35sYMPKz50ujqpk=
Subject key identifier: 81:B9:BC:A8:6D:92:F9:39:3F:2D:30:28:67:C8:FC:3E:92:84:E3:F8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D3C40DFEEE75D8317C3ED2C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41a1195b-7c73-3906-8cab-48804a50d378.roa
Signing time: Fri 20 Mar 2026 22:00:47 +0000
ROA not before: Fri 20 Mar 2026 22:00:47 +0000
ROA not after: Thu 18 Jun 2026 22:00:47 +0000
asID: 11798
IP address blocks: 199.58.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3c:40:df:ee:e7:5d:83:17:c3:ed:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 20 22:00:47 2026 GMT
Not After : Jun 18 22:00:47 2026 GMT
Subject: CN=127e1d00-98d0-47e1-bd9d-e1b814db118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:90:9d:a2:a6:a4:3c:90:6f:c1:70:0d:df:
5f:69:49:51:45:aa:73:0e:3b:8d:d5:7b:87:4f:3c:
5c:a8:f2:26:a1:1b:60:c9:79:31:fa:79:24:10:ef:
f0:58:de:4c:d7:d0:8d:46:a5:14:29:90:6d:91:83:
a7:8d:15:00:17:8e:19:83:dc:91:0e:94:98:10:b2:
de:ba:66:3a:f3:fb:aa:de:de:e5:b4:ca:6c:89:13:
64:fd:98:1c:b5:67:c0:d6:d5:c7:d3:d9:20:87:41:
32:3d:cf:b7:59:f6:58:0c:ed:d2:e8:5e:8d:34:20:
20:38:a5:81:aa:c9:a7:8d:88:2f:da:11:07:0b:67:
3a:9a:a3:8e:3d:e0:28:d5:1f:41:25:0b:fe:30:72:
89:6b:9c:8a:cf:33:46:98:7f:e9:bd:0e:c2:54:c4:
27:cb:39:53:2c:5c:fe:89:b7:80:85:1c:73:41:c3:
57:81:17:34:52:a2:a5:5d:64:b1:a3:6a:9b:a3:c8:
c6:70:90:5f:2b:8e:c3:99:de:37:28:46:e9:6b:85:
69:e9:5e:7c:87:7a:96:12:8e:35:27:95:86:97:41:
4e:92:ea:dd:43:7f:e7:42:75:ee:1e:fe:7b:c0:be:
14:57:6b:56:c9:62:22:a1:aa:07:23:b5:4b:ec:23:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:BC:A8:6D:92:F9:39:3F:2D:30:28:67:C8:FC:3E:92:84:E3:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41a1195b-7c73-3906-8cab-48804a50d378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:56:aa:ee:67:7e:e6:ae:f3:e2:88:96:55:26:5f:db:73:43:
85:c8:ac:b5:44:07:93:68:f8:d2:2d:90:7b:7e:c4:76:11:97:
0b:52:68:cf:e0:26:18:91:7f:55:a5:b4:cd:cb:ea:b0:9b:e1:
99:9c:65:5b:c3:af:ee:ed:9c:14:14:61:85:f7:82:70:5f:42:
bb:7e:29:21:74:ea:36:42:e2:e8:59:0a:e8:cb:ec:8c:9e:72:
1a:08:43:27:55:29:d5:2b:60:29:5d:9e:0d:50:0a:2a:b5:a7:
2c:42:92:b6:c6:02:f8:07:99:e5:a4:34:b4:97:30:59:55:c3:
2f:f4:23:b7:93:29:fd:bc:ec:49:62:14:c2:56:e6:03:d9:ea:
b3:c3:06:1f:64:32:8d:7a:4d:10:28:b2:b8:df:32:2e:ac:91:
91:d0:43:9b:07:03:ad:8b:9a:f2:37:8b:c3:c6:71:1e:5e:77:
21:ba:a3:53:6b:84:38:36:bc:c0:39:16:c5:35:cf:e3:72:b0:
95:02:d4:08:b8:5c:ef:38:6c:34:59:11:ef:36:61:fb:20:ef:
a8:fd:88:64:4b:d0:22:7e:8f:bb:b6:db:11:63:16:07:ac:1e:
4c:15:20:a0:65:ef:ec:0d:9e:b7:bf:0d:2d:19:20:91:e9:86:
cc:a9:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 03:52:03 2026 by rpki-client