
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa
File: ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa (raw, json)
Hash identifier: v1OTdXbMALiKaSiKKI+OJnMu4qXKuIcrFuV+RRN6+go=
Subject key identifier: 43:93:69:AE:52:42:9E:33:37:0C:E6:C1:65:C6:E7:9A:0F:2D:D5:D6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D9A91A714E4170BC8168B7D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa
Signing time: Thu 23 Apr 2026 16:49:32 +0000
ROA not before: Thu 23 Apr 2026 16:49:32 +0000
ROA not after: Wed 22 Jul 2026 16:49:32 +0000
asID: 2914
IP address blocks: 23.26.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:91:a7:14:e4:17:0b:c8:16:8b:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 23 16:49:32 2026 GMT
Not After : Jul 22 16:49:32 2026 GMT
Subject: CN=4f9b5247-c169-49ea-981c-e4d0ee2d4db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:cb:7b:20:32:64:a7:c1:c5:00:c8:a4:94:
84:f8:2a:fe:57:d6:ce:89:1a:fc:1b:8b:da:88:7d:
3a:ac:77:20:60:2c:50:f1:e4:00:70:ae:15:c7:f0:
49:78:0d:69:86:b4:5a:9e:f2:df:b0:ac:00:63:80:
80:75:45:c8:e9:47:45:ed:ac:f0:94:b9:c2:02:64:
64:d2:dd:0c:55:c4:95:e9:2b:81:a3:fa:0e:bc:5f:
55:bb:3a:45:36:c9:84:14:2c:9b:cd:45:7e:23:c1:
ad:d5:c0:d9:64:20:2b:c6:26:de:44:fc:a6:f6:b3:
ef:6a:32:9c:b5:78:75:15:62:7b:b2:41:21:1c:1a:
0e:b4:92:0f:55:3d:87:b4:c6:ca:da:e6:1c:6c:20:
d4:8d:e1:c4:85:43:15:af:e5:6e:01:b5:c4:86:69:
fe:cf:11:78:e1:58:fd:30:41:21:eb:f4:2a:16:22:
df:02:38:2d:ef:30:80:d6:e3:92:57:6c:dd:57:89:
0e:a2:41:e4:b1:42:e7:55:93:50:6a:41:78:5a:73:
b4:29:5f:a6:0c:27:be:b3:11:25:90:78:84:00:a7:
a9:3f:0d:02:b5:f9:da:05:40:aa:00:a5:f9:6c:83:
94:e9:dc:e2:d1:7d:5d:25:14:85:ab:78:e8:f8:d0:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:69:AE:52:42:9E:33:37:0C:E6:C1:65:C6:E7:9A:0F:2D:D5:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:77:90:c7:9f:03:b8:b0:7a:0b:ef:2a:fc:ac:ca:2e:41:16:
5d:45:2b:2a:38:4c:3f:21:bf:ad:14:ed:5a:16:4e:a3:78:f8:
07:e6:c2:f2:64:b6:8a:26:26:cd:25:b3:5e:c7:da:07:cf:6f:
d1:77:28:8d:84:a0:c1:2b:07:c7:76:6a:27:3e:b5:7d:ec:58:
b4:3e:78:16:1d:be:2c:0f:3a:11:aa:5e:ba:a5:6c:17:80:5e:
a3:c4:32:15:97:62:ad:d0:b8:39:b9:eb:8a:d5:76:c2:c4:f2:
65:5b:1a:e2:f4:2b:09:aa:02:25:8a:74:80:83:3f:38:f0:77:
2f:f0:61:8b:fc:48:ca:be:3e:00:3a:9e:f8:d4:fb:a9:40:82:
68:0e:ea:2f:80:f1:9a:d9:e6:c6:14:b4:a7:ee:9b:f9:d4:94:
bd:3f:e4:da:f7:36:a5:c7:3f:37:13:97:f5:60:f4:56:f0:2b:
0d:a4:36:6b:be:32:e7:f4:4a:5e:85:a5:1e:82:bf:e2:09:a2:
b1:47:b6:be:a2:34:e4:8c:31:cd:a6:03:d4:67:21:a5:d6:f6:
3a:a7:d6:44:a8:23:be:0a:36:15:4d:a4:6b:79:e1:6b:9e:94:
8d:82:86:75:f7:33:bb:56:fb:8f:9d:a4:67:28:b2:ce:7d:37:
de:34:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 21:38:20 2026 by rpki-client