
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
File: df833a82-7a66-3fb2-86c2-e24767894bdc.roa (raw, json)
Hash identifier: YK4qI8tO6EAU0pDiLE2jUaMEDhDIBBZVMbZh0kBt09k=
Subject key identifier: 50:77:CE:A9:40:D4:06:A2:86:2A:D8:2F:E5:5A:BF:83:C0:E1:EA:E2
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584D4D5A7846A344189C074FFC00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 16696
IP address blocks: 66.255.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 04 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:78:46:a3:44:18:9c:07:4f:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=b78f37e8-b62f-4fd5-b1c8-b69b2cb9b34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:db:b5:4b:67:ca:b9:be:a1:10:e3:08:3d:
ec:e0:c4:d0:3b:a9:8e:1d:d7:11:e8:df:bf:93:27:
78:ed:4c:8c:b7:78:81:52:04:e7:3e:96:14:db:f5:
f9:00:d8:0b:b8:e5:8c:f3:f8:2e:e5:8e:61:90:b8:
b2:f9:d9:b9:96:4e:3f:12:f4:8f:68:9b:93:b3:7a:
7c:87:e6:60:f6:f5:63:4f:69:0a:78:9a:8e:6f:ac:
91:93:50:43:b4:a8:99:52:95:91:90:33:85:43:77:
9b:9b:43:ae:e7:6f:d5:3d:29:ce:96:9c:02:84:86:
2a:82:57:d4:c4:c7:a2:b4:fa:13:8c:55:0f:bd:e8:
28:9f:05:72:ba:e6:60:e6:72:24:37:57:e1:40:ae:
44:2d:5f:75:52:13:00:17:98:58:76:42:18:e2:70:
b8:86:b7:31:8f:ae:28:5b:45:ba:9e:29:69:e9:dd:
a7:8b:d4:1e:c5:af:32:17:1a:6a:21:3a:a4:95:3e:
b9:ad:8f:9b:5c:66:48:bb:a3:01:8f:bf:ca:6a:4c:
14:af:e3:a4:96:3d:fd:06:b4:4f:ce:fb:a1:e6:cb:
dd:6d:69:4b:37:2c:8e:5b:f0:97:22:b0:3c:39:e3:
6d:a5:58:69:47:56:be:82:4e:dc:e9:2b:50:a1:9e:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:CE:A9:40:D4:06:A2:86:2A:D8:2F:E5:5A:BF:83:C0:E1:EA:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
66.255.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:15:9c:e8:d3:09:ef:d2:50:6d:e7:aa:83:67:c3:5a:ac:3a:
dc:c3:2f:1f:51:25:66:f1:ec:30:b0:75:51:71:cb:9f:40:a9:
9f:33:b6:b0:f6:85:c9:f9:dc:43:1d:22:9a:e6:18:38:cd:db:
91:6b:5d:1e:86:e7:39:7e:6f:87:1d:6f:0a:a4:07:65:2e:44:
f5:e2:1a:ad:f8:d2:12:25:71:86:26:a3:ac:d9:ea:9e:c8:9c:
db:fa:ed:46:e0:c6:61:0e:9c:9a:9a:cc:8f:99:41:3c:51:28:
b1:3d:f8:fc:35:79:0c:c5:9d:7f:41:45:36:16:9b:7f:62:b2:
c2:48:13:48:77:15:ab:56:13:80:5f:00:fd:aa:14:03:7a:ae:
2e:eb:de:03:9b:16:b3:02:2d:d6:4b:93:fb:c8:f9:8a:73:95:
ae:41:6d:5f:e3:0e:00:c8:6c:0e:9a:08:f8:30:56:f9:e3:65:
3a:60:00:3d:af:a4:85:e5:61:92:ff:c2:3b:9f:b8:35:0f:3f:
e6:01:63:81:84:22:42:e6:52:6f:ba:e7:5a:57:9a:47:13:21:
10:b8:55:78:22:b3:bd:f9:e7:cd:1d:80:ab:9d:5c:f9:10:f0:
2a:1c:d9:56:8e:41:31:7d:8c:0f:01:62:f1:2d:f0:1a:6e:9f:
f8:19:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:39:42 2026 by rpki-client