
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3c7d11e-a847-3cb4-b366-caba0d998eae.roa
File: a3c7d11e-a847-3cb4-b366-caba0d998eae.roa (raw, json)
Hash identifier: R5OtpFNgYnXjGoFpEEOZksxiK6Q05mYkKVI8OWRhB64=
Subject key identifier: 30:6B:E4:AF:0D:C2:72:AB:AF:D4:D3:71:98:16:1A:15:90:F5:90:71
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D448506C89F046D179046CB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3c7d11e-a847-3cb4-b366-caba0d998eae.roa
Signing time: Mon 23 Mar 2026 21:04:34 +0000
ROA not before: Mon 23 Mar 2026 21:04:34 +0000
ROA not after: Sun 21 Jun 2026 21:04:34 +0000
asID: 26519
IP address blocks: 166.0.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:85:06:c8:9f:04:6d:17:90:46:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 23 21:04:34 2026 GMT
Not After : Jun 21 21:04:34 2026 GMT
Subject: CN=9c1f6ae3-adcc-4e7f-84e9-5231165f050f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:76:26:0a:40:d6:89:98:2b:83:17:89:58:
9e:5e:3f:d9:b2:51:3b:2e:c0:ac:dc:7a:fa:21:fe:
2e:59:b9:c8:5a:e1:74:e9:9a:e4:38:01:57:29:6c:
64:50:37:3f:88:86:dc:36:41:62:51:4a:d2:04:50:
01:0a:45:e2:f3:02:ec:52:7a:bc:3e:1a:97:30:d6:
99:54:52:8d:c9:56:43:d6:68:d8:c8:c8:51:5e:5f:
ba:b1:22:e0:4e:c0:31:68:ce:db:ab:82:5d:95:be:
f3:51:86:2e:63:ec:9a:7b:bf:55:39:57:25:bd:e9:
61:18:5a:6d:6e:7d:e5:cf:89:1b:c9:7c:0a:48:f0:
10:57:c8:f6:e0:d5:53:c9:c2:b9:c6:76:16:de:9b:
53:fc:6d:a7:05:dc:11:17:3b:c7:1e:e7:b6:4c:fb:
bf:d9:ab:f2:6b:a0:42:95:53:ba:93:04:7f:ee:7c:
dc:0c:8e:79:2d:a5:40:94:11:51:be:45:1b:70:f5:
ad:73:65:2d:b4:28:cb:b5:77:00:4d:42:d9:5d:04:
40:bb:90:fb:57:39:01:47:64:45:84:1c:17:5b:a8:
08:62:c5:41:42:5e:21:09:67:4a:96:d8:d9:c7:93:
5e:75:ff:2d:7f:eb:6d:ce:22:49:14:b2:7c:8a:08:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:E4:AF:0D:C2:72:AB:AF:D4:D3:71:98:16:1A:15:90:F5:90:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3c7d11e-a847-3cb4-b366-caba0d998eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:20:7a:4e:8b:cf:52:7c:c0:c6:0c:19:28:38:31:61:51:ca:
3d:ce:dc:f1:dd:56:26:b9:dd:0f:0f:77:ab:14:3a:95:30:12:
50:ce:7e:d7:0e:32:6b:4a:ba:d9:cf:6b:c8:7a:fc:0a:8d:24:
48:61:39:6a:39:65:b8:5f:2a:7c:35:90:e2:3d:2f:e1:26:93:
26:bd:2e:01:b3:8d:02:ad:70:ea:60:da:5a:8e:43:fc:63:cd:
21:80:db:c8:ea:f2:b6:eb:4e:f8:fd:9f:d9:72:e6:e1:38:4f:
bb:2a:26:7e:a9:f5:37:34:75:f6:d2:83:ae:39:13:a8:df:6d:
61:21:07:ac:1f:92:f7:83:96:60:11:64:f7:c3:8d:18:be:a8:
df:d7:30:57:4b:a8:df:a7:ea:b9:ce:74:bb:3c:41:a3:88:2e:
55:bc:3f:3f:18:6e:83:54:85:85:64:c9:c0:22:e3:9b:59:ea:
c5:07:6e:4a:8f:f8:7c:49:44:4e:da:c8:07:15:36:c0:6f:b1:
e9:0d:62:06:ef:ed:0a:e7:88:f9:ca:21:34:bb:39:29:75:0d:
8b:90:4d:40:c9:a4:ff:50:66:6d:b9:3d:fd:c9:b6:94:00:e7:
4a:87:3d:64:a6:4b:8e:1b:dc:0e:e6:4f:7c:0a:fc:db:15:12:
40:4b:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:30:09 2026 by rpki-client