
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dff8b376-cdc2-3b29-868f-6afae381acc9.roa
File: dff8b376-cdc2-3b29-868f-6afae381acc9.roa (raw, json)
Hash identifier: eYL6b/uEXxH2na7TiPa29rr854KrObUYLAuLlrZHMXA=
Subject key identifier: 27:C5:72:65:EB:9E:59:F7:A0:81:6B:9E:59:95:57:52:BC:0C:26:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D0F2067B2DBD291E6065C2AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dff8b376-cdc2-3b29-868f-6afae381acc9.roa
Signing time: Wed 04 Mar 2026 18:04:00 +0000
ROA not before: Wed 04 Mar 2026 18:04:00 +0000
ROA not after: Tue 02 Jun 2026 17:04:00 +0000
asID: 14618
IP address blocks: 108.165.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0f:20:67:b2:db:d2:91:e6:06:5c:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 4 18:04:00 2026 GMT
Not After : Jun 2 17:04:00 2026 GMT
Subject: CN=f60d3f47-8cab-4796-a733-bff135da0916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:6e:ca:86:50:91:63:cf:be:b3:3f:8f:e0:
5d:6c:f2:14:3c:56:14:b1:a4:f3:46:b0:6e:a1:e3:
65:aa:55:13:b9:9c:b9:67:02:78:df:cc:c5:d3:fe:
a5:ef:89:9d:e1:67:49:72:cf:70:cd:53:ee:72:bd:
7e:a9:39:55:c2:b9:b6:61:c0:02:e2:44:19:1b:79:
f4:a3:08:91:0f:6d:68:bf:c9:d9:71:7e:6f:6f:cd:
4d:0b:30:00:b1:4f:f7:74:2f:02:20:e2:bb:ca:23:
4b:40:84:07:0c:55:dd:c1:db:5c:87:19:83:ae:9c:
3e:4b:2d:2a:a8:57:b9:89:a3:37:83:dd:31:3b:9e:
81:11:1e:b2:7c:aa:cc:34:40:c2:1c:ba:4e:ed:dd:
4f:e8:05:d8:da:20:ee:48:ff:34:4c:8a:1d:be:a6:
bb:98:b3:00:28:d5:0e:f9:a0:5d:c4:c9:62:f8:df:
c4:c2:e4:3b:e2:83:f1:cd:bd:4b:37:c6:94:7c:29:
21:65:b1:10:1d:bf:3d:c6:f8:07:1b:4f:b7:5b:9d:
71:19:4e:4e:3f:e4:4f:2b:f3:40:c0:eb:98:d6:84:
ef:19:79:b5:68:80:84:12:fb:98:94:41:12:a5:8c:
04:56:84:28:cc:2f:f9:ad:44:64:73:d2:cd:51:cf:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:72:65:EB:9E:59:F7:A0:81:6B:9E:59:95:57:52:BC:0C:26:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dff8b376-cdc2-3b29-868f-6afae381acc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:1d:8e:a2:39:b9:c2:4c:e7:94:b7:7c:55:be:0e:d0:eb:7c:
66:3d:4f:1c:bd:41:28:d8:71:3c:8d:2c:97:c9:46:f6:c2:32:
ef:b2:29:8a:a1:f6:9f:35:62:dc:0e:8a:83:6b:e7:6e:94:b8:
ae:89:93:25:84:bb:c2:a8:0d:c6:27:ee:59:2a:1d:a8:1a:af:
8e:8b:ca:2e:47:91:c7:f5:97:2f:91:fe:7e:21:4d:98:d2:e6:
d6:be:c0:13:85:8a:7f:f5:8b:3c:03:45:d2:d5:57:ba:c6:2f:
ff:c2:ee:54:ba:a4:dd:82:c7:d9:a5:61:92:37:0d:bc:12:5d:
8c:3e:78:bc:dc:90:35:95:99:ef:c1:02:21:81:34:4d:34:6c:
14:84:e0:9d:0e:71:aa:75:e6:40:44:b1:38:18:d2:32:61:65:
79:de:ac:43:64:df:50:c3:dc:73:e4:5a:39:ab:79:9f:8e:e9:
4a:7c:13:85:2e:82:94:da:1d:b1:e8:a4:63:5e:55:c4:b1:9c:
a8:f3:e5:8e:69:f7:55:b9:87:7b:f6:1c:49:a8:4b:0a:85:40:
78:94:69:e1:d3:50:67:ad:b5:de:a5:7e:b7:83:a3:59:fa:a1:
37:3a:aa:ab:c4:8d:76:d3:70:26:65:98:75:2a:ef:9f:59:16:
59:0a:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 10:42:48 2026 by rpki-client