
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa
File: 36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa (raw, json)
Hash identifier: yLOY2gc2VE+R6Kqcd924vPF+4d2vcKNwlmP4v3Hpcg8=
Subject key identifier: 78:C1:2F:0A:49:DD:32:71:18:4E:3F:EB:22:FB:29:E7:9C:C9:4E:FD
Certificate issuer: /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial: 010D0C9F4328584D9E500CA225057160081F2900
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 16509
IP address blocks: 66.37.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:0c:a2:25:05:71:60:08:1f:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=22f96f2f-b684-41e8-9ddb-954ad0f024bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:b8:89:df:90:47:ed:50:ee:3f:25:80:b0:
25:4d:88:1e:d3:3e:98:ce:7e:f3:06:ac:4b:14:d1:
de:61:2d:72:d4:d4:60:71:fc:23:08:df:f7:aa:a3:
3e:30:a7:4c:47:3a:af:df:c7:96:e4:8f:02:0f:05:
07:7a:74:92:f7:67:b7:de:d5:98:10:b9:3d:ae:16:
24:56:b7:f4:cb:25:68:d1:d9:e4:39:05:40:a4:8e:
79:da:da:7b:bd:bf:9f:f4:75:d8:90:48:37:2a:20:
ca:7e:e4:d9:03:65:1e:e4:40:eb:0c:4b:24:71:1b:
4e:1a:95:1c:de:c6:a9:a5:9e:a9:eb:27:f4:a6:83:
80:c2:f1:ea:b0:8e:e2:8d:58:16:42:f6:68:29:68:
ea:8e:4d:b8:04:e1:05:39:2c:ce:5c:a7:f7:b2:52:
4e:c8:8e:7e:82:75:08:7a:af:78:20:80:fe:29:27:
24:cc:81:0f:05:db:9b:9e:f8:19:ce:8d:99:1b:07:
d6:02:07:d4:76:58:d4:ca:41:b4:6c:49:c0:c3:d5:
c6:f6:2d:19:a8:58:2a:88:8b:45:08:08:97:26:42:
c5:b6:6d:12:fa:7e:b8:6b:7d:28:7c:63:d4:53:61:
81:93:80:17:b9:ed:d8:7e:b9:5b:9c:da:41:07:1c:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:2F:0A:49:DD:32:71:18:4E:3F:EB:22:FB:29:E7:9C:C9:4E:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
X509v3 Authority Key Identifier:
keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
sbgp-ipAddrBlock: critical
IPv4:
66.37.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:3d:2c:b3:29:ee:5c:54:3b:72:9d:f5:f1:74:fa:7e:7d:11:
11:2b:5e:60:ec:3e:0e:c9:53:d0:d1:6e:8a:50:b3:16:85:bf:
fe:85:5b:91:93:d9:07:bd:1b:ef:b1:17:5d:20:23:40:e0:89:
bd:ad:62:20:ae:1b:05:81:57:7c:68:8a:24:2f:fd:93:c3:28:
09:bd:cf:1a:ee:d3:92:82:b9:53:0a:57:7c:24:9c:f9:c5:d1:
3a:5a:e9:be:57:83:0d:9d:db:13:6d:78:ee:d7:d2:5d:d1:b5:
31:97:97:07:e3:ac:11:73:eb:a2:0d:be:d5:e3:56:3d:6d:fc:
2b:0c:38:d6:02:e2:cf:d2:f8:a2:c2:2c:30:3c:23:e3:72:66:
a1:d3:0a:f7:5c:10:42:30:b6:b6:f2:7b:40:cf:be:a3:69:64:
5c:1d:c9:39:e8:f2:e3:79:90:38:36:1a:89:53:3f:60:c2:8a:
4a:23:b7:a7:71:a2:d9:46:d2:ba:08:2d:a9:bd:ef:fb:3b:0d:
07:bc:57:56:2d:ef:c8:19:99:72:ae:39:f9:f2:80:a8:8f:e7:
84:18:01:8a:85:51:5b:8e:7c:3e:fa:58:93:c4:60:88:03:b9:
b3:cb:06:98:ef:1c:cc:3f:ef:42:25:52:c0:4b:ea:e2:6b:5c:
2a:3b:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:16:32 2026 by rpki-client