
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa
File: 2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa (raw, json)
Hash identifier: LtuPii69TA4pI+0EL0z7diCOOuzGSdaom8HkS4WZYno=
Subject key identifier: C4:1E:69:91:81:C9:49:3A:B8:53:F8:B2:4A:85:37:F3:0D:68:F6:7E
Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial: 010D0C9F4328584D19B4D6D089F10AB168FBA970
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 394321
IP address blocks: 66.97.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:d6:d0:89:f1:0a:b1:68:fb:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=63000e57-5427-4811-a684-5ac88471f10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:3c:5a:38:76:b5:84:b5:e1:08:1f:e4:91:
86:3d:d7:42:54:eb:58:18:4b:14:ef:7f:53:2c:9f:
73:49:0b:03:44:88:93:10:83:aa:c6:46:5c:9b:33:
02:a4:4f:a5:57:8d:f4:02:84:de:5d:3e:86:91:cc:
18:56:18:0c:38:00:96:e5:b3:5c:34:2e:5a:06:52:
f4:b5:36:93:7f:21:d3:57:5f:1a:6a:c5:81:30:ee:
d1:6c:d4:26:3a:b1:c1:6c:bb:39:65:04:41:43:28:
2c:69:5c:48:c8:7a:2b:14:21:69:c1:6a:29:cd:ba:
84:e2:16:bd:65:78:84:0c:50:74:7a:a3:ed:08:09:
fa:05:98:c7:67:c9:ca:0d:a9:ec:c9:4b:aa:53:66:
fc:49:36:8c:35:18:b3:2d:ac:de:db:1f:e5:4a:e3:
68:27:c7:ba:91:c5:38:0d:16:4f:c8:2b:32:48:f2:
73:79:43:91:35:b8:b3:72:1d:78:36:81:2a:5e:65:
c7:0b:5a:8f:51:db:98:e5:2e:a8:28:f3:24:4e:ae:
2d:61:ca:a4:f7:31:aa:41:a1:10:93:ac:8d:d5:bf:
af:8c:a2:56:ed:e3:50:a6:d8:69:85:c7:c7:1b:dd:
26:18:53:06:67:04:84:46:f4:e8:65:c0:da:8a:41:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:69:91:81:C9:49:3A:B8:53:F8:B2:4A:85:37:F3:0D:68:F6:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl
X509v3 Authority Key Identifier:
keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.97.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:14:cd:5f:30:6f:d2:dd:93:15:24:93:c3:a4:5a:8b:09:f6:
ad:69:08:b7:04:c4:92:f4:d0:33:88:b9:70:2e:40:cc:73:39:
87:79:3a:2c:84:05:56:d9:58:18:df:90:80:6e:2c:83:15:e8:
d7:d7:9f:a7:e5:fa:d0:69:d1:dd:3b:22:9a:d2:a0:be:44:ec:
ee:d2:f3:26:47:a2:02:e6:40:93:32:4f:7b:9f:69:39:73:f1:
cb:2c:5d:3c:e2:2b:41:6b:7b:e5:ec:87:07:05:3e:bc:fb:df:
5d:b4:f4:02:9a:3f:8b:bc:48:3a:27:74:b7:d9:28:42:22:f6:
52:74:74:7e:04:9b:ca:72:c7:97:5b:b9:e3:bc:d1:b5:76:e5:
05:63:01:1a:a4:d8:e9:d4:08:f1:7c:e3:f5:b3:26:fc:4c:cf:
ff:64:8b:6b:7f:35:47:1d:0a:b1:ab:c4:f3:51:24:38:a8:54:
41:64:0d:25:53:67:50:f2:63:b2:dc:06:30:8a:19:39:98:2b:
7b:eb:a2:30:11:0f:c6:4d:59:cf:a0:5f:51:43:f9:3c:8c:69:
ba:3f:d3:69:d2:3a:b8:5f:9f:6c:f2:b4:f2:43:be:14:cc:53:
09:9f:f9:d2:e5:17:af:b4:76:fd:bd:c1:a0:03:24:ae:90:4e:
fd:16:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:54 2026 by rpki-client