
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
File: 3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa (raw, json)
Hash identifier: qA74VRv4xkHrB4JGd9gDyyrm33Ld+HaVX2zwFU9m+sY=
Subject key identifier: B8:65:00:4A:9B:0A:3D:C5:B0:EE:B9:CE:49:74:DE:B7:0D:ED:FF:54
Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Certificate serial: 010D0C9F4328584EBB11BDCA2C6E3858A7A209E0
Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 33724
IP address blocks: 66.85.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:bd:ca:2c:6e:38:58:a7:a2:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=0b05aceb-6683-4a79-8611-6e60f41f980d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:e8:0d:ff:45:07:19:fc:74:9c:e0:10:d5:
b7:a4:0d:de:a9:2e:95:08:44:46:6e:a4:63:0d:7a:
9d:82:30:19:c1:5c:1e:ef:f2:99:ea:db:a2:17:f6:
81:58:de:4e:4c:57:11:05:14:a2:60:23:0e:2f:30:
ad:dc:08:78:9b:d0:7b:10:b1:cb:7e:db:8b:f4:3f:
7e:a6:b5:1c:db:50:dc:71:ae:1b:27:42:c2:82:05:
e9:80:49:73:9e:ac:c6:2f:26:bd:c0:96:a5:0e:9c:
a7:f5:0b:ec:6c:21:8e:24:1a:63:55:c1:8a:b8:fb:
a4:48:de:90:ca:23:5a:0b:7e:ea:58:99:18:70:65:
17:c3:89:3e:a9:fb:52:2b:12:c6:12:fd:52:96:a7:
d4:44:fe:0e:b3:c7:68:8e:83:71:e2:63:36:06:ab:
51:b7:6a:2d:0b:3e:d8:0b:79:e6:f4:9d:4b:a3:a0:
2b:81:ff:de:93:da:37:6a:58:ce:7b:d9:7c:83:4d:
ef:fc:8c:86:64:1d:5b:de:6c:fc:82:c6:b7:d2:7e:
fb:d5:88:53:12:63:aa:16:48:1f:a6:e9:58:b7:88:
d7:4f:27:1b:3a:e6:40:cc:51:a0:b4:37:16:66:15:
64:cd:95:86:96:db:63:79:15:25:06:b9:03:ef:82:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:65:00:4A:9B:0A:3D:C5:B0:EE:B9:CE:49:74:DE:B7:0D:ED:FF:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl
X509v3 Authority Key Identifier:
keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:86:7d:aa:82:a5:19:dc:ba:82:52:86:06:ca:13:92:e0:52:
95:df:17:31:f3:6a:df:36:bb:31:d3:3a:00:e6:56:10:8f:a0:
8e:96:2b:96:8a:c3:94:9e:77:c7:4a:15:d8:9e:da:8f:72:c6:
1b:0d:15:c8:c8:2e:17:86:76:8f:62:4a:60:b2:5b:49:19:61:
66:9c:ee:5e:de:a4:1a:3b:97:50:e3:d5:a1:92:e6:7a:4b:b1:
bb:11:20:89:34:82:f4:72:19:65:23:5a:4d:47:7f:4e:28:99:
15:b6:f0:a4:50:55:3d:94:ed:a9:63:0a:10:16:1e:ae:c3:3f:
a4:98:b4:de:3d:3b:9a:6f:68:14:79:19:4c:5a:76:a5:65:16:
c7:5f:67:41:41:0c:36:b1:1f:0d:18:b8:10:d2:22:54:c2:6c:
c5:91:f4:40:c6:62:e6:94:ef:aa:d4:41:f8:78:95:7e:9f:1b:
e1:39:67:f0:52:73:bb:50:7e:b6:d1:20:1c:31:c6:f2:0a:f7:
f5:07:94:06:49:a5:aa:66:a4:9c:00:c4:1d:e9:59:e2:78:aa:
e6:e0:87:7a:ef:26:f3:f5:98:dc:cf:96:fb:61:40:1d:e2:15:
fd:05:f9:a5:62:9c:d1:a5:35:b7:08:cc:3f:fd:d8:da:db:09:
d6:13:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:27:07 2026 by rpki-client