
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf65b147-79b4-3114-b780-195e59af1424.roa
File: cf65b147-79b4-3114-b780-195e59af1424.roa (raw, json)
Hash identifier: DXr7vwITM/qkmHPSjPpulcLSUvpXFBcErSjDVcf8SB8=
Subject key identifier: 8E:B3:FB:30:89:5A:D5:0C:7A:61:22:93:72:09:1A:BC:90:48:A3:4B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584E6ECED7C7C31FBCFCE0FBB380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf65b147-79b4-3114-b780-195e59af1424.roa
Signing time: Wed 08 Jul 2026 17:24:12 +0000
ROA not before: Wed 08 Jul 2026 17:24:12 +0000
ROA not after: Tue 06 Oct 2026 17:24:12 +0000
asID: 401152
IP address blocks: 166.1.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6e:ce:d7:c7:c3:1f:bc:fc:e0:fb:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 8 17:24:12 2026 GMT
Not After : Oct 6 17:24:12 2026 GMT
Subject: CN=0185d56a-b926-44fc-8983-0c348d01c02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:3f:cd:9a:40:65:7e:24:44:c5:00:fc:e7:
28:88:09:d2:33:6c:99:b8:cb:af:2d:93:6d:9c:e2:
09:ed:fb:53:60:51:8c:c7:49:c7:28:cb:df:fc:1f:
8a:4f:46:d2:77:5b:9d:e7:a9:56:ef:24:f0:db:47:
06:39:30:30:27:63:cd:ae:6e:49:c7:82:1f:12:4a:
8a:b2:13:0a:9f:7c:b5:f9:d6:dc:c1:74:69:7d:1f:
fa:f2:fd:71:cd:92:c3:af:92:49:4c:ab:1a:fd:b4:
a2:c4:c4:36:b1:55:29:89:1b:40:3a:4b:41:5e:f4:
5a:1a:a0:e4:ce:e4:69:43:d8:61:41:86:99:bf:d6:
a0:0f:ae:6f:88:c9:a3:4c:db:b6:bc:90:03:89:53:
9e:2e:85:20:58:c1:ee:01:a8:c6:02:66:fa:6f:4b:
38:2a:d3:9f:06:e1:04:6f:aa:75:90:8a:eb:1b:f9:
1e:11:be:98:a4:af:66:df:9c:1f:7c:1f:9f:3c:81:
25:5e:5a:38:65:5b:ba:42:f1:ff:5f:9f:27:32:df:
86:28:74:62:f6:2f:95:6e:65:36:ba:55:59:44:e9:
b5:0c:ab:cb:f9:63:30:db:90:65:d1:81:11:7c:95:
2e:95:eb:73:d8:69:7f:49:8a:f1:1c:7f:2c:0e:b0:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B3:FB:30:89:5A:D5:0C:7A:61:22:93:72:09:1A:BC:90:48:A3:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf65b147-79b4-3114-b780-195e59af1424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:44:ce:f4:4e:43:2b:08:70:42:59:5d:32:14:ef:55:42:0d:
cb:42:42:88:7b:88:80:9b:ce:b0:a6:cf:ab:65:a0:3f:26:b3:
31:73:91:7e:b1:c2:2f:26:9d:8f:74:df:01:b1:e2:69:3f:d4:
0c:a6:42:3a:16:ee:9f:93:2a:6d:66:59:56:a0:bf:c5:21:62:
82:36:45:b3:0d:ac:3f:8b:1a:65:7a:c6:46:bb:7a:1e:b8:b1:
32:fc:9a:8d:51:81:d4:71:5f:eb:75:bb:89:0c:9f:34:78:f1:
6a:b8:39:0c:d6:17:30:32:7c:30:39:ec:3a:24:3d:45:a5:c6:
ac:48:0e:8b:a2:ae:75:35:ee:f5:65:b1:2e:c3:ce:bb:6d:47:
9c:d7:da:3e:d4:97:84:6e:6d:96:d6:9f:49:c0:1f:50:ec:88:
68:54:0b:1d:be:e1:34:5a:cd:30:08:6a:23:ce:f4:c4:8e:da:
66:11:68:52:89:d7:46:7d:e3:d6:6f:cd:c4:19:95:d6:cd:40:
52:d7:10:98:21:de:40:47:ac:97:c8:fa:89:c4:15:9a:5c:55:
8a:ef:3d:13:a1:42:ec:4c:eb:6d:21:fe:05:0f:57:05:e1:90:
aa:00:5d:41:6c:7c:b2:57:32:30:8c:9c:db:26:57:19:1f:12:
f4:16:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:59:31 2026 by rpki-client