
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55489a75-0cdd-361e-84ac-b6e93c30a257.roa
File: 55489a75-0cdd-361e-84ac-b6e93c30a257.roa (raw, json)
Hash identifier: a2FVmwU8bEksopcbGACHRhLs1fPaRo44HHN+MIqz1tc=
Subject key identifier: 50:E4:7B:6B:38:DB:C6:75:35:A9:C1:86:30:AE:36:A4:04:5F:6C:DE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D44850716218472B8052F68C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55489a75-0cdd-361e-84ac-b6e93c30a257.roa
Signing time: Mon 23 Mar 2026 21:04:35 +0000
ROA not before: Mon 23 Mar 2026 21:04:35 +0000
ROA not after: Sun 21 Jun 2026 21:04:35 +0000
asID: 33124
IP address blocks: 166.0.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:85:07:16:21:84:72:b8:05:2f:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 23 21:04:35 2026 GMT
Not After : Jun 21 21:04:35 2026 GMT
Subject: CN=7d8237ea-65ae-48db-b7f3-9b63fbba45f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:d1:b2:14:1f:a7:b7:95:e7:d6:84:37:db:
54:9f:c5:f5:c3:28:1e:ed:4d:49:ee:88:58:7e:50:
69:2b:81:5e:30:c9:b3:a0:76:49:7a:b1:92:ad:bc:
36:55:ce:6c:14:78:1e:e1:04:bc:f8:86:fa:a3:8c:
89:7c:6f:50:11:cf:39:be:36:90:99:ff:a7:28:82:
40:9c:6a:68:88:0a:a4:d8:7d:d4:40:f5:e1:7c:47:
46:01:68:93:52:76:5f:13:e5:de:19:50:d1:54:29:
99:50:39:af:95:d6:c4:b9:1c:f7:c3:7c:4b:45:3c:
8e:a2:6d:b7:ad:20:9f:9e:d8:bb:33:e5:ce:9e:ee:
6b:80:4c:84:86:76:80:86:40:f5:54:3d:fe:51:8f:
11:ad:37:ac:3c:5d:c8:f7:1b:e8:a4:73:8c:a8:b3:
a5:e2:2f:21:71:b2:b0:3e:40:b1:04:f1:48:09:4a:
66:ff:cc:f9:9e:70:14:b1:45:9b:b6:7b:d4:a3:4a:
6b:54:0c:ae:30:b9:bb:20:92:47:07:a2:3c:f3:0a:
69:6d:2c:7c:d7:d3:1e:67:fb:1b:6b:5b:8f:5d:86:
80:ff:ce:2c:76:18:61:ba:32:15:f2:f9:d3:e6:c9:
de:1a:75:7f:41:bc:08:d2:55:4a:57:12:39:b5:4b:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E4:7B:6B:38:DB:C6:75:35:A9:C1:86:30:AE:36:A4:04:5F:6C:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55489a75-0cdd-361e-84ac-b6e93c30a257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:91:0a:dd:38:52:3e:a6:1c:e9:c6:49:51:58:38:26:7d:8c:
df:e9:1f:0c:79:74:cd:be:8d:55:22:8b:96:24:a8:a5:49:71:
e6:09:80:b6:a2:f4:c3:77:85:8c:b8:18:9a:70:a1:cc:09:3c:
c4:b1:8a:d9:4d:07:eb:b2:73:82:a1:7c:65:da:75:fa:0d:fc:
f4:44:b1:fc:41:c1:54:76:6e:61:1b:e7:9c:ff:63:b7:9c:e6:
88:ea:da:04:a6:55:86:45:d2:e6:93:d3:9b:72:28:03:e8:c0:
ad:f1:58:55:09:11:39:c8:2a:9e:92:cf:41:b7:3a:a3:d0:6c:
8a:44:57:c4:6a:d5:61:39:bd:98:31:95:67:cb:01:47:ce:e4:
70:27:2c:e9:5d:25:dc:30:20:fc:91:86:e9:d7:e0:f1:e7:8d:
06:4e:7c:12:64:e5:72:f1:5c:d0:6e:f7:a2:2e:3b:a3:13:53:
88:f4:76:5b:ed:6e:2e:44:29:7e:1b:ac:63:37:6d:a3:40:e6:
ba:3a:a5:ab:8a:e6:f9:6e:72:18:ce:99:0d:a1:8b:61:45:d5:
84:af:1f:8c:39:4c:dc:47:73:9e:d0:8e:36:bf:6a:6c:26:f2:
4b:f3:c6:bd:f8:85:9d:e1:69:07:00:9b:fb:d2:80:be:ba:79:
47:4a:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:32:51 2026 by rpki-client