
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab3b87e6-ee21-382e-b628-764b3fe75246.roa
File: ab3b87e6-ee21-382e-b628-764b3fe75246.roa (raw, json)
Hash identifier: wjTWxvx+c9NRFdH4yXNhMDyoV0Vx2gdguRUerb+43Wk=
Subject key identifier: 15:16:A3:C9:C1:81:B2:71:5E:0C:46:4B:C4:F6:99:12:8A:B5:38:DA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584DB3402DD47AA6C6146A818C20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab3b87e6-ee21-382e-b628-764b3fe75246.roa
Signing time: Sat 02 May 2026 13:00:31 +0000
ROA not before: Sat 02 May 2026 13:00:31 +0000
ROA not after: Fri 31 Jul 2026 13:00:31 +0000
asID: 21859
IP address blocks: 108.165.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 05 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b3:40:2d:d4:7a:a6:c6:14:6a:81:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 2 13:00:31 2026 GMT
Not After : Jul 31 13:00:31 2026 GMT
Subject: CN=d1c157ed-1a0f-4718-a0e7-84412f823820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:39:af:8a:cd:57:19:2c:94:95:59:d0:6e:08:
50:1d:ed:33:2c:e1:03:b0:15:ea:4d:29:ad:d8:d3:
a1:4f:e2:16:d5:bc:7e:d1:28:5d:bd:3b:5f:d1:ae:
4c:e0:97:3b:ea:87:a5:00:16:52:dd:4d:81:d0:73:
9f:00:ca:5d:6d:2c:83:77:8a:1c:e3:34:7c:d8:c8:
c5:8c:01:ad:f1:0b:07:03:30:20:6f:3e:97:b1:3f:
b5:4c:0a:de:c4:62:13:7b:4d:ff:da:b3:66:e1:54:
b9:18:31:7e:34:67:c7:28:f1:11:04:3f:e3:37:bc:
bb:61:25:2b:85:67:fc:03:86:92:0a:6f:62:ef:b2:
f8:ba:85:0c:11:41:c4:04:2f:de:21:21:8e:51:9c:
5a:6d:4b:a8:20:23:6b:58:12:ce:07:37:14:4e:9d:
5b:80:8d:83:d8:15:dc:50:4c:71:9b:09:81:2b:d6:
76:19:83:db:6f:d9:4a:0f:df:0f:0f:6d:8b:22:5e:
59:c6:f3:0f:bb:1c:4f:dd:25:5e:4b:6a:5e:09:79:
0c:da:44:5d:27:42:9a:5e:95:c4:d3:a8:5f:05:28:
10:97:8d:1b:3c:26:0a:d2:f4:c3:ad:7a:75:62:ca:
0e:25:1b:98:32:4e:dc:74:97:15:19:99:50:d7:61:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:A3:C9:C1:81:B2:71:5E:0C:46:4B:C4:F6:99:12:8A:B5:38:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab3b87e6-ee21-382e-b628-764b3fe75246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:b4:e7:72:01:eb:0d:5f:fc:b7:ea:9e:11:a8:48:97:d1:a6:
20:a9:eb:70:63:1b:9e:51:73:b6:7b:7a:f0:73:be:ac:e3:03:
34:9d:0d:5c:b5:21:ad:54:ea:7e:98:66:55:cf:78:19:65:07:
9d:f9:12:b5:b3:e5:b4:17:9c:57:f4:dd:f9:36:6f:9f:27:de:
91:6f:14:c7:db:2c:6c:9c:88:85:57:31:11:dd:0a:ff:60:a2:
ae:4d:d1:0c:51:d6:e5:fb:0d:55:cc:46:15:75:24:f3:af:5f:
63:26:8c:34:84:3c:d2:b1:b5:09:23:51:91:03:43:7c:1c:98:
f0:57:89:b2:40:2d:e3:ec:e6:00:c1:4f:8f:de:c7:ab:7b:fa:
0d:c0:98:87:90:90:77:94:0c:09:39:9f:7a:2f:2e:49:39:2e:
0d:c6:f7:76:0d:e7:50:39:50:88:a9:1b:21:e5:e6:13:08:a2:
fd:51:a3:b6:eb:97:5e:1d:81:4e:fb:34:d4:b9:e7:1b:5d:3e:
0e:c4:11:8e:10:19:13:40:a1:35:d2:1f:31:de:aa:d4:d3:b4:
fe:bc:c7:7c:06:1c:9b:d4:39:0c:c0:5c:07:b2:c8:ef:f4:e0:
d6:3c:cb:93:1d:ad:66:1d:b2:5c:9f:3c:2a:c2:b9:f5:48:43:
4a:4e:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:56:23 2026 by rpki-client