
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bef3b628-c354-3b23-8c13-7341fdb3234d.roa
File: bef3b628-c354-3b23-8c13-7341fdb3234d.roa (raw, json)
Hash identifier: vOOzBnnr+sxA1iYGOgB2hJqUIioWAmRQtdVcOke3uxc=
Subject key identifier: C1:27:88:6B:AC:24:E7:6C:36:AB:33:7E:1D:9B:D7:ED:BA:EC:85:AC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D143DA6D1EF147B4D3DF77680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bef3b628-c354-3b23-8c13-7341fdb3234d.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 401152
IP address blocks: 23.26.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:a6:d1:ef:14:7b:4d:3d:f7:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=e1e8d86c-5eae-4914-ae0a-3009fbf819b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:66:3f:06:5c:0b:e0:5e:97:e5:68:12:2c:
09:96:c5:b3:a3:5c:9b:85:d9:9b:83:c9:ac:d8:5f:
3e:16:11:fe:cc:dd:64:f3:a8:58:34:3b:74:8c:6f:
c5:61:c2:2c:af:4a:57:20:ae:81:f3:16:fa:2d:68:
a0:7c:da:27:a9:d0:34:a0:c3:d3:20:99:a0:78:02:
c7:0a:ea:97:52:ec:2b:51:08:52:85:01:ae:d0:90:
d4:95:79:eb:05:80:d1:c8:17:93:c9:a5:1d:82:a5:
33:bd:97:c4:04:02:58:1f:3b:d4:d6:f3:7c:26:7c:
6b:8d:b5:50:4f:da:48:0b:c7:c6:e0:79:ee:54:fb:
2a:9f:64:46:dd:ca:22:08:a5:5a:18:31:a9:91:34:
b8:c3:57:ba:f1:f5:27:f7:60:40:4d:5b:e4:4f:fc:
51:68:dc:cf:a5:c8:62:76:39:04:62:30:86:07:2d:
be:57:21:38:6a:e4:64:29:47:16:f7:c8:6a:26:9d:
21:bb:f2:48:86:0a:55:f7:c2:03:a9:e6:46:18:ca:
d1:df:dd:75:e9:ca:64:8d:dc:ec:07:e3:05:92:da:
57:4a:aa:9b:84:93:fc:af:fd:a8:0b:e7:b8:d5:c4:
64:b4:da:12:c9:cc:f7:89:b8:49:fb:0c:25:65:6a:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:88:6B:AC:24:E7:6C:36:AB:33:7E:1D:9B:D7:ED:BA:EC:85:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bef3b628-c354-3b23-8c13-7341fdb3234d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:f4:98:96:4f:1c:ba:9b:fa:e6:36:77:19:a2:d7:57:19:bc:
8c:67:f7:cb:7f:6d:a0:de:86:6c:32:25:91:63:0d:51:72:64:
67:31:7e:a0:6c:ae:92:9c:f0:7f:6b:93:00:2e:bd:e3:c8:b2:
5a:d4:e3:cd:d9:85:ad:09:4f:e2:09:2d:d5:d1:35:41:c9:07:
b4:cf:35:0b:2a:3d:29:8a:47:71:57:80:cc:30:02:70:b0:5b:
d3:6e:05:66:12:57:1e:68:54:26:29:db:e5:e7:a6:03:b5:f6:
8e:03:b2:cc:a6:fa:fc:da:70:92:ba:a5:41:e8:c2:bb:f3:f0:
9e:60:e6:6e:8d:9a:62:62:0b:10:a3:3d:37:c2:45:86:2f:5a:
1e:3f:78:cd:dd:c4:87:96:4d:fd:3e:48:bd:74:32:a0:57:b0:
11:86:6d:d4:a5:26:47:d9:43:3c:5b:91:9c:15:54:65:63:16:
6a:fb:0f:fc:f7:3d:9a:20:7d:b6:b0:ab:86:45:ea:ae:2f:7d:
67:a8:8e:34:66:7f:26:fa:49:77:7a:e9:46:49:2e:c5:a4:2e:
cc:98:cc:10:0c:20:b9:d2:8d:50:52:0b:7b:25:45:a9:d5:f0:
2b:e7:57:74:bf:18:22:ab:5a:06:b7:8e:78:27:c5:3c:be:3a:
a9:cc:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:15:17 2026 by rpki-client