
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa
File: d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa (raw, json)
Hash identifier: OWlaR9n5E/UXKWbexTSUabHviiXcGKkHv6beuaH01Vs=
Subject key identifier: B6:5E:C1:17:57:81:9F:28:A1:EE:B5:29:7B:C6:48:A1:01:87:8F:AE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D366F5AE30693EF79DD211700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa
Signing time: Wed 18 Mar 2026 19:59:36 +0000
ROA not before: Wed 18 Mar 2026 19:59:36 +0000
ROA not after: Tue 16 Jun 2026 19:59:36 +0000
asID: 401152
IP address blocks: 108.165.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:36:6f:5a:e3:06:93:ef:79:dd:21:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 18 19:59:36 2026 GMT
Not After : Jun 16 19:59:36 2026 GMT
Subject: CN=e839ba7b-25f2-4a75-bd01-7739cf7173b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:c2:65:4c:f6:e0:7b:d5:85:01:ef:8f:e6:
23:2b:5d:89:95:42:95:87:ab:ab:3b:e8:d7:50:16:
88:ee:09:11:b7:6f:17:ff:eb:fe:a9:b3:59:d9:79:
ce:0d:fa:5a:8c:3d:56:b2:8c:19:78:38:06:d5:aa:
b5:44:4d:42:55:25:c7:cb:9a:41:27:69:5d:fb:44:
16:ab:54:4c:41:c4:5a:b9:3b:56:fa:e2:3b:96:92:
6a:3f:62:62:7e:a4:2d:64:35:68:b3:7f:41:c6:4a:
2d:79:b9:4b:c5:54:30:07:47:65:5a:20:33:10:e9:
ab:83:d3:e3:7e:3e:01:ec:e4:64:2e:e3:44:37:5d:
26:96:3d:90:19:25:bb:66:17:97:f8:54:72:b0:0d:
30:fe:23:76:bb:ec:af:32:68:87:69:33:41:95:de:
b2:03:26:7b:5b:47:f9:ed:0d:fc:85:ac:66:09:b1:
9a:6a:cc:56:b7:a3:20:7a:81:f9:21:c6:37:8e:00:
e7:7a:cd:32:77:9f:08:fe:f7:a6:43:a9:79:05:a7:
73:17:58:83:d6:65:72:6a:d0:96:53:5a:f1:0d:b2:
a3:ea:14:86:6b:c4:34:3a:dd:c6:fd:b6:a7:9c:47:
f1:e5:30:ee:37:2d:27:3a:ce:1f:3d:98:c2:1b:21:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:C1:17:57:81:9F:28:A1:EE:B5:29:7B:C6:48:A1:01:87:8F:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:8b:aa:9c:0a:25:b2:de:b9:3c:8e:7e:b0:2b:11:74:73:bb:
9e:82:79:ff:2b:f9:09:cc:3e:b5:c4:aa:bf:56:e1:14:6c:26:
a5:7c:b5:ea:1e:6c:da:4f:e7:91:aa:10:05:ea:8c:08:8e:a7:
6b:06:f4:33:e1:70:e3:37:db:9a:77:f1:55:6f:19:ac:30:10:
b4:a5:09:8f:57:ab:92:ba:5a:75:7c:30:30:35:03:47:2f:1d:
b4:97:fe:06:b4:6f:56:d7:43:40:f9:ee:ab:ce:3b:69:7b:da:
1c:26:fb:16:f0:42:67:a8:57:c0:94:a1:01:51:b1:bb:71:02:
be:47:83:76:3e:5c:06:bb:55:14:ee:a3:30:dc:c0:9a:5a:8e:
51:bb:31:7a:2d:e8:af:de:2b:12:01:a4:3c:cf:6e:a7:64:b2:
f0:b4:f3:b9:96:5d:39:49:38:00:81:93:01:3f:24:63:3f:15:
c2:bd:41:92:b2:cc:00:d7:8e:6f:f9:79:4c:9f:99:68:7d:67:
20:48:3a:c7:a9:74:61:28:cd:c2:30:53:52:47:a7:a4:a5:d8:
57:87:8a:8c:54:bc:8e:45:3e:d5:77:b0:35:5e:30:9f:f7:97:
cf:e3:d7:ad:52:31:d6:76:3d:56:92:7b:8d:99:35:54:1e:a8:
42:2e:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:49:07 2026 by rpki-client