
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
File: 66a219b1-9a85-3816-b306-827ed97596c0.roa (raw, json)
Hash identifier: pswK3+STPoOWVtnKqWbRpHtrNqq0ubnTKChTFvS77Hg=
Subject key identifier: 22:84:04:EA:D7:01:7A:6F:1F:4C:3F:80:89:D6:50:66:55:66:E1:29
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584D1B1A14CA629E731129174C80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 11090
IP address blocks: 72.35.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:14:ca:62:9e:73:11:29:17:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=b651f92f-f39a-4abb-859f-8bcb6df074bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:02:47:22:ad:bc:ed:74:ac:44:ac:97:b0:
a1:d5:b0:61:b7:49:8c:df:60:92:66:93:c1:6f:ba:
ef:1f:a2:bb:b3:ac:4d:20:2e:30:4f:5e:84:e6:e8:
49:e5:8e:04:6e:b2:b9:3f:af:32:90:2d:09:57:c6:
30:a5:ef:d6:28:34:a2:3e:21:3a:ab:34:e1:4d:0c:
77:cc:95:a6:22:ff:f7:2b:72:71:e9:44:9e:22:44:
9b:62:50:1b:c1:43:b9:8c:9a:08:b7:24:3d:3b:66:
09:99:39:1d:35:5c:ae:dd:76:da:ea:09:2d:0d:3c:
97:0f:f3:5e:16:9f:d4:e4:ea:32:c8:50:30:27:a3:
b7:e1:e9:f3:26:c9:be:98:21:38:e9:da:c2:b6:b5:
21:0a:b5:b9:de:c9:16:94:51:13:91:f9:87:a1:4c:
df:aa:cd:1a:cc:0a:cc:29:dd:55:dc:6b:c0:fe:77:
f6:0b:32:ac:8f:a7:1d:41:a0:9e:0f:b9:e2:d3:8f:
51:71:50:a3:f8:b5:c9:54:77:e5:24:0d:d7:ab:bd:
9f:7e:32:cb:2e:77:5a:a6:b3:b0:b8:e2:34:1b:5e:
9e:a0:c4:cb:d9:f1:64:5e:8d:4f:ce:0f:a4:0c:06:
22:e9:2c:40:83:7b:bc:9e:b2:b1:78:a2:4c:b9:09:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:04:EA:D7:01:7A:6F:1F:4C:3F:80:89:D6:50:66:55:66:E1:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:1a:40:38:59:3e:44:40:32:fe:0a:47:91:61:b0:d9:5b:7d:
3b:3a:fe:cb:9c:ec:ba:fd:29:81:c1:95:e3:3a:14:3d:7f:27:
4d:04:ba:3f:1b:45:56:bd:52:c2:9b:64:ea:83:10:95:78:7c:
ca:ac:e2:2f:59:fc:d7:38:92:d6:44:e5:7c:6d:59:71:32:fb:
03:53:54:9d:c4:90:eb:d5:e4:ff:78:b8:f6:0b:6d:eb:cb:fe:
e3:fb:c7:53:3e:21:24:06:bb:cc:10:8c:bd:4f:ee:a0:9b:91:
c9:57:4c:53:aa:df:8a:5d:8a:65:0e:ab:92:44:c6:1a:b5:2b:
dc:26:a9:83:21:93:46:11:d2:f9:cb:7c:3b:d4:1a:cd:9a:39:
12:15:a4:a3:93:f5:7c:5e:45:a9:a0:47:22:cc:4e:56:8d:a7:
3d:d3:2a:2b:fd:9d:38:8b:01:62:eb:77:64:10:dc:5a:50:c6:
fc:28:04:3c:b7:6e:24:8b:87:70:05:78:87:56:4f:61:c3:30:
c6:94:3a:24:c9:97:15:7c:d8:a8:c6:85:0a:9d:35:97:7a:8a:
e1:b5:e9:be:58:e4:8a:3e:60:70:c5:70:4c:3a:f5:d1:30:83:
75:58:6f:b2:74:34:3d:50:88:8d:8b:4e:54:59:d0:a0:ee:47:
c2:39:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:38 2026 by rpki-client