
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa
File: a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa (raw, json)
Hash identifier: XhPd/w82Mwsr9yvZRnFTZhHqjiSI6F2/P9S5+/DnT1Q=
Subject key identifier: 6C:20:36:6D:A9:D8:3B:A4:AC:83:B2:73:26:86:E2:97:42:BA:AF:04
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584D8AC538B75BEF81078F5CD180
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 21949
IP address blocks: 66.234.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Apr 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:38:b7:5b:ef:81:07:8f:5c:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=e3abcd15-3063-43d6-a5bf-c7a1a2f43505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:78:73:10:4c:94:96:87:f1:45:64:51:48:21:
5e:a1:c0:9f:8a:f4:ad:32:66:f5:92:70:24:7c:eb:
19:a2:1f:5e:85:a2:83:5e:c8:ec:e7:b9:a2:a5:e3:
f7:cc:00:28:65:eb:37:f7:36:d9:e4:cb:9e:a2:53:
21:ad:2f:3b:a5:57:33:71:2c:5b:6d:8e:84:1d:92:
60:c9:6f:47:b8:5a:79:56:94:e0:eb:c0:02:3c:cb:
c3:26:82:d8:0e:4f:11:18:28:f5:d5:4a:e9:17:5e:
a3:23:c3:f8:f6:81:f2:dd:46:09:28:00:8a:ca:f7:
51:53:4c:27:d1:64:00:ee:d1:9d:d5:2c:23:e0:13:
6c:6a:74:06:54:e1:4a:db:93:a3:ab:b1:58:4a:51:
fd:1f:7b:82:cb:5e:6a:9b:98:65:5d:d6:1e:39:0c:
7c:30:68:6a:26:9d:39:14:49:6a:54:09:4c:7d:33:
0f:69:98:f5:e8:66:1f:62:ba:56:99:08:54:e5:b8:
79:25:21:3a:b3:0e:fc:64:8f:10:cb:e7:4c:8c:33:
ca:3d:fc:4b:66:16:95:10:02:d0:77:4d:de:fc:46:
8e:fa:2f:17:b5:63:db:56:c0:15:04:ae:5f:eb:8b:
23:b5:f3:84:ea:c6:09:61:a1:e6:d6:b7:f0:1f:20:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:36:6D:A9:D8:3B:A4:AC:83:B2:73:26:86:E2:97:42:BA:AF:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a0e2ce9e-d699-3632-bc4e-720ca62f6314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.234.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:68:08:b5:c9:10:48:be:36:ff:28:74:85:9b:55:f7:2a:70:
78:e7:28:d2:35:0b:4b:b6:0f:4e:fe:54:8e:1b:d1:2f:03:44:
a0:3f:b7:e0:fc:dd:45:9c:da:57:c8:8c:e1:1b:2b:06:91:ed:
83:c8:d8:66:da:1e:f1:ee:ef:e2:df:2d:05:9d:9a:0b:d9:64:
ed:a6:bf:18:95:09:51:29:50:02:03:d0:12:75:38:0f:9c:90:
7c:9b:5f:71:cc:45:c2:1c:41:e5:65:05:90:20:a0:e0:56:f7:
bc:b7:4e:e1:82:8c:28:63:39:ec:40:ca:22:a1:83:90:08:c2:
95:b9:f4:68:2c:22:0e:80:78:4a:a0:53:c0:50:be:58:24:f1:
6a:cc:8e:75:1a:5e:63:eb:45:25:de:63:e1:8e:91:6d:e6:cc:
64:a7:dc:1e:3b:51:3c:72:27:8d:65:e5:e5:14:46:20:ba:30:
e7:b7:48:aa:c8:6a:d9:f7:17:39:2c:fb:a2:d6:f6:6e:1f:a9:
b3:08:9e:68:60:0b:ff:d7:a0:c8:cb:aa:ac:23:d0:36:81:42:
22:ef:fe:92:52:f3:25:8c:c2:7d:90:75:be:68:0f:cc:5a:55:
e1:cd:38:37:7e:df:59:fc:17:8b:fb:7e:50:3e:0e:f9:27:d4:
30:1d:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:40:39 2026 by rpki-client