
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa
File: 65022e59-779c-30b5-b75e-3f62e70eb609.roa (raw, json)
Hash identifier: yD8ddUwnNbeC+cnnN85h+8B2cND8nUjwwbFfFmzkXqI=
Subject key identifier: 1A:1D:DC:95:45:CC:A7:FE:57:38:09:7C:FD:23:AB:EE:42:F6:1B:D1
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584E7204D36A410D4D2219AE0E80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 394457
IP address blocks: 66.45.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:d3:6a:41:0d:4d:22:19:ae:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=878d35c5-e876-4087-a39c-f7d721b93305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:ae:9b:fe:cc:f8:62:f0:fe:9a:18:5e:f0:
87:75:6e:a7:f7:ad:d5:5f:c9:f6:f7:64:23:c4:35:
8b:e1:fd:46:63:4b:12:61:48:fe:a5:a8:e1:de:65:
06:b5:a4:5c:87:3d:ce:64:55:fe:df:7d:5a:ea:ca:
cf:95:f3:75:fb:89:1b:ab:43:8e:a0:a7:a1:57:01:
33:21:4a:ae:db:d6:83:d5:12:a7:37:e0:00:4b:21:
24:e8:99:43:5e:de:c8:2e:53:41:c3:54:de:2c:e0:
ee:aa:b1:f5:74:b7:61:6b:ef:f9:32:96:e5:f2:e8:
b3:3d:2d:90:b1:ad:eb:41:9f:0c:7e:8b:e2:1f:08:
32:65:79:a0:80:73:5c:e1:9e:67:0b:66:9f:84:62:
58:8e:72:3c:92:58:3a:27:3d:c4:b3:49:56:59:d2:
1c:b7:df:6d:b9:c5:1a:64:a6:05:47:af:2a:cd:5d:
8f:29:80:ea:2a:81:23:4e:44:9c:d0:f7:f2:cf:f7:
cb:f9:cd:07:e7:98:d6:43:c5:d8:ae:ca:7e:58:83:
09:b5:12:c8:cf:81:1a:34:e0:7b:b9:68:c4:97:2e:
c6:7a:bd:ba:88:dc:26:29:d0:64:26:1f:ca:96:c6:
3f:98:07:25:c1:f1:29:cf:64:42:cd:82:b3:cb:7f:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1D:DC:95:45:CC:A7:FE:57:38:09:7C:FD:23:AB:EE:42:F6:1B:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
66.45.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:29:39:bd:c8:56:fd:20:d9:26:b3:6c:4a:66:c2:e5:24:b3:
77:37:e6:e4:0a:f4:67:6f:1d:bd:19:07:c9:0c:37:08:a7:eb:
b5:03:3a:aa:cb:c0:5a:54:7e:e5:ed:f3:e7:f7:79:e9:3b:d3:
45:e6:da:fa:c4:31:8a:63:d7:93:f3:32:89:5d:1a:e6:62:03:
ed:d1:18:d7:0d:7f:6c:a4:75:10:7d:54:b7:46:2f:fd:11:73:
7e:af:97:79:43:f6:41:24:01:90:9a:be:00:da:35:2a:ef:61:
a5:b5:db:aa:31:a7:e4:6a:42:26:fa:c5:3e:2e:04:0f:51:5a:
f1:df:8b:69:79:77:24:d3:af:fe:08:ed:6d:69:2d:05:e6:02:
42:4d:5a:57:00:8b:b2:9e:b7:1e:eb:3d:19:f5:4a:93:1f:0e:
31:3b:da:33:fd:2b:ab:1a:bf:99:b1:6c:c1:dc:44:ae:bd:f5:
16:ea:15:d6:08:c4:06:35:90:62:56:2b:8d:86:16:7d:75:5f:
7d:9d:7d:a8:5d:8c:3a:97:c5:54:bf:7d:26:a7:dd:ec:7c:b6:
46:dc:38:0f:55:b3:f3:d8:78:ac:1c:64:e1:76:ad:dc:7d:b9:
a0:ed:38:d1:cd:50:d3:12:d6:fc:7f:5c:97:90:92:bc:e1:16:
4a:5c:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:08:09 2026 by rpki-client