
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/4226229c-cd25-37f8-a092-69ad4ee88f24.roa
File: 4226229c-cd25-37f8-a092-69ad4ee88f24.roa (raw, json)
Hash identifier: QiLtQX3aZebYPa/5Pwebl8XHN1LVwQOjgbyNcBp9Ay4=
Subject key identifier: 1B:77:AD:29:53:6E:11:7B:34:86:17:89:D8:D5:9C:FC:A9:84:DA:D6
Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial: 010D0C9F4328584E779A36B13AA9B54BF6CC01D8
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/4226229c-cd25-37f8-a092-69ad4ee88f24.roa
Signing time: Sat 11 Jul 2026 21:00:11 +0000
ROA not before: Sat 11 Jul 2026 21:00:11 +0000
ROA not after: Fri 09 Oct 2026 21:00:11 +0000
asID: 13536
IP address blocks: 216.107.224.0/21 maxlen: 24
216.107.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:77:9a:36:b1:3a:a9:b5:4b:f6:cc:01:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
Validity
Not Before: Jul 11 21:00:11 2026 GMT
Not After : Oct 9 21:00:11 2026 GMT
Subject: CN=255e926e-63ad-4eda-b993-349cbf98830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:76:5d:cf:c0:d9:f8:4b:22:d2:2b:17:59:
cb:fb:50:da:ec:2a:d5:15:71:b9:58:60:58:28:6c:
77:b7:cb:a3:b5:94:b7:f2:fa:20:e3:22:e2:e6:f7:
6b:7a:4f:90:3d:35:fd:61:67:1d:ed:82:1f:58:82:
03:d9:10:e2:ab:9f:d7:6e:1f:0d:63:37:4a:c4:27:
5d:0a:0b:cd:4f:62:bd:ed:01:d4:bd:0f:94:80:54:
80:49:fb:d4:69:65:bd:b0:a3:06:b8:73:d2:b9:8d:
4b:18:2a:b1:ca:a2:15:77:a6:1e:8c:0a:7b:27:5c:
5f:8d:fa:40:ed:13:cc:89:3b:3e:41:17:15:f6:e6:
16:41:06:08:9e:ed:65:88:ba:c0:ba:4c:27:c1:88:
fa:48:4d:41:c3:f3:78:77:24:72:06:7b:30:41:f8:
2f:a6:17:51:b6:db:6c:8d:49:8e:58:73:2e:58:45:
c8:5d:2f:10:35:30:14:ba:4c:99:61:24:54:eb:6f:
60:f1:d6:ed:f3:8c:76:e8:d1:37:fd:d9:85:27:6c:
55:35:3d:82:ce:d3:1b:2d:82:f3:de:42:8d:c7:d5:
8e:44:d5:e2:70:1f:cb:b1:d0:3d:61:58:ce:57:3d:
1c:69:d9:84:c1:e6:77:2e:72:43:3b:85:bb:41:f2:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:AD:29:53:6E:11:7B:34:86:17:89:D8:D5:9C:FC:A9:84:DA:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/4226229c-cd25-37f8-a092-69ad4ee88f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
X509v3 Authority Key Identifier:
keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.107.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:e8:91:df:e2:b8:f0:fc:0a:80:0e:82:cc:53:55:ea:75:89:
aa:85:45:6f:97:8a:ac:d2:5c:c8:47:d7:6f:53:b8:47:b7:07:
1d:d3:a1:b6:64:d8:94:4e:41:50:68:07:0c:4f:c4:52:15:06:
79:93:98:50:a2:eb:f8:e9:41:45:25:3b:c0:46:50:38:da:e7:
60:d1:60:64:ec:b2:01:e4:ce:d8:5d:0a:f5:31:be:fb:49:5b:
8d:f7:34:c2:2f:f8:e4:b0:cc:58:48:9f:22:c9:78:d9:ef:ed:
cd:83:f4:20:0e:bb:67:b4:8c:05:db:a4:fb:ce:be:b7:18:66:
e0:df:b9:9c:ce:ef:cf:69:29:4f:96:3e:fe:ec:f9:9c:30:fb:
0f:20:2c:59:13:b9:49:94:41:95:04:a2:81:ad:6e:1d:f2:2c:
b1:8b:59:bf:0b:db:a4:a4:0e:3a:d9:a7:60:58:4f:eb:2d:87:
17:c2:5d:4e:8e:e0:ab:f0:50:61:ce:42:8a:60:ac:a4:4c:d4:
22:f7:b2:4c:3c:bc:b4:47:f3:67:c9:15:ac:fe:17:81:d2:63:
c5:fc:55:c6:98:6d:23:24:c1:25:03:ba:31:0a:70:5d:9e:53:
7c:85:e5:45:d5:9f:75:e1:75:45:6e:53:36:8b:26:ee:00:b7:
e8:62:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:56:31 2026 by rpki-client