
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1fc38bb-4b4d-3701-8b95-40410da3a69c.roa
File: f1fc38bb-4b4d-3701-8b95-40410da3a69c.roa (raw, json)
Hash identifier: OcEDPtU+Fmtp45yPuaXoM36f0e2cb2Ysc0GrdwXoJ6A=
Subject key identifier: 80:4E:42:5D:10:31:10:60:D6:CE:BA:24:DE:AD:68:F3:54:50:9F:F0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D4461D9DFF2D88088E23F3400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1fc38bb-4b4d-3701-8b95-40410da3a69c.roa
Signing time: Mon 23 Mar 2026 19:53:42 +0000
ROA not before: Mon 23 Mar 2026 19:53:42 +0000
ROA not after: Sun 21 Jun 2026 19:53:42 +0000
asID: 11798
IP address blocks: 108.165.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:61:d9:df:f2:d8:80:88:e2:3f:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 23 19:53:42 2026 GMT
Not After : Jun 21 19:53:42 2026 GMT
Subject: CN=1117ffb3-70ef-4bd5-9b39-1f484b672cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:74:94:78:d0:f3:dd:33:24:13:65:89:a7:
67:0f:e2:d1:05:a4:49:a3:b5:1c:92:da:2c:c5:49:
20:1d:77:85:c1:49:c5:22:ab:f5:ca:cf:f9:f3:70:
d2:05:47:36:ba:11:df:4e:35:a8:1d:3b:f1:6c:d0:
c0:bc:d6:ee:8f:0f:9d:11:20:07:c8:9a:dd:3f:e3:
64:92:30:6a:10:98:43:5e:28:6d:8b:89:fe:97:90:
93:9b:20:47:ed:2f:67:1d:a7:34:ca:77:74:6f:38:
3d:17:7f:da:f7:46:ff:cb:b4:01:67:77:29:c3:a6:
55:32:d2:c3:90:d8:45:e7:e7:7e:6f:20:28:d3:d1:
6c:7d:2e:17:92:df:44:2c:9d:26:03:1e:95:0c:50:
eb:c5:03:d9:b4:6d:fc:5d:bb:45:4d:bc:eb:86:c1:
5c:ba:34:45:2b:91:fe:f8:53:6c:01:a2:1d:48:58:
ab:31:39:87:93:4d:9b:24:d5:5a:4d:56:e9:0b:fe:
fe:b8:9a:b8:fb:b3:47:1a:d0:4d:33:1e:14:d4:af:
5c:10:7c:d9:0c:ad:93:a0:25:38:68:0d:27:7e:75:
dd:47:0d:b3:12:61:fa:79:71:f3:90:06:70:5b:21:
be:6b:77:8c:d1:3a:8a:dd:ce:03:dc:c5:b5:8d:45:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:42:5D:10:31:10:60:D6:CE:BA:24:DE:AD:68:F3:54:50:9F:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1fc38bb-4b4d-3701-8b95-40410da3a69c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:8a:e9:bf:18:5f:01:73:09:ef:55:2c:fd:b8:30:7f:38:6d:
e0:a0:b0:53:80:87:51:dc:ea:ff:3d:24:22:44:67:00:47:95:
97:b3:07:f3:2c:f6:c8:f6:f0:13:89:95:62:82:4b:82:be:26:
83:d5:d9:4e:29:b9:51:5d:fc:fd:7b:fd:ba:fb:70:54:67:85:
fd:65:9d:c4:a2:35:61:f6:54:57:70:9a:c6:b7:03:e3:c4:42:
49:34:8e:23:a8:85:f0:19:c6:8a:b3:32:c5:cd:b7:03:e8:d6:
cb:bf:fc:79:6e:40:dd:9d:1e:b0:4f:a3:de:d1:e5:7c:5c:64:
14:72:e1:a0:82:a7:6b:82:a7:23:30:7b:7d:bf:9a:95:f8:1c:
07:62:94:01:be:79:54:fe:e2:6e:0f:38:8e:2b:c0:5f:d9:19:
99:77:7b:7b:c0:ed:df:16:01:5a:18:07:40:8c:c2:85:2f:e2:
31:68:d0:ae:8d:b3:93:9f:d3:15:24:33:73:a4:c0:ec:75:26:
85:04:d4:d2:0c:a5:65:41:27:9d:a3:68:76:ba:51:e0:b7:47:
8c:ff:7c:16:8f:99:8b:e0:62:e4:df:76:b2:e5:7a:7f:a8:61:
b2:e2:6b:26:75:54:b7:c2:96:6d:2b:f3:fd:42:5c:85:a9:c0:
bf:52:75:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdnf8tiAiOI/NAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMyMzE5NTM0MloXDTI2MDYyMTE5NTM0MlowLzEtMCsGA1UEAxMk
MTExN2ZmYjMtNzBlZi00YmQ1LTliMzktMWY0ODRiNjcyY2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O50lHjQ890zJBNliadnD+LRBaRJo7Ucktos
xUkgHXeFwUnFIqv1ys/583DSBUc2uhHfTjWoHTvxbNDAvNbujw+dESAHyJrdP+Nk
kjBqEJhDXihti4n+l5CTmyBH7S9nHac0ynd0bzg9F3/a90b/y7QBZ3cpw6ZVMtLD
kNhF5+d+byAo09FsfS4Xkt9ELJ0mAx6VDFDrxQPZtG38XbtFTbzrhsFcujRFK5H+
+FNsAaIdSFirMTmHk02bJNVaTVbpC/7+uJq4+7NHGtBNMx4U1K9cEHzZDK2ToCU4
aA0nfnXdRw2zEmH6eXHzkAZwWyG+a3eM0TqK3c4D3MW1jUUPIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBOQl0QMRBg1s66JN6taPNUUJ/wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjFmYzM4YmItNGI0ZC0z
NzAxLThiOTUtNDA0MTBkYTNhNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6K6b8YXwFzCe9VLP24MH84beCgsFOAh1Hc6v89JCJEZwBHlZezB/Ms
9sj28BOJlWKCS4K+JoPV2U4puVFd/P17/br7cFRnhf1lncSiNWH2VFdwmsa3A+PE
Qkk0jiOohfAZxoqzMsXNtwPo1su//HluQN2dHrBPo97R5XxcZBRy4aCCp2uCpyMw
e32/mpX4HAdilAG+eVT+4m4POI4rwF/ZGZl3e3vA7d8WAVoYB0CMwoUv4jFo0K6N
s5Of0xUkM3OkwOx1JoUE1NIMpWVBJ52jaHa6UeC3R4z/fBaPmYvgYuTfdrLlen+o
YbLiayZ1VLfClm0r8/1CXIWpwL9SdVg=
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:35:04 2026 by rpki-client