
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa
File: 45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa (raw, json)
Hash identifier: Ptccsb9a9cgHUq9tMqKI8KIS/2Yo63J/2xytqvz48W0=
Subject key identifier: 1D:11:26:FE:72:11:64:1C:03:68:F9:CE:79:0B:CB:54:70:B2:E1:91
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584DA28012C8761D8C8AA74FEF80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa
Signing time: Sun 26 Apr 2026 13:00:30 +0000
ROA not before: Sun 26 Apr 2026 13:00:30 +0000
ROA not after: Sat 25 Jul 2026 13:00:30 +0000
asID: 852
IP address blocks: 66.222.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a2:80:12:c8:76:1d:8c:8a:a7:4f:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Apr 26 13:00:30 2026 GMT
Not After : Jul 25 13:00:30 2026 GMT
Subject: CN=cf3d41b6-ecbe-4993-b5e3-c6fc6fba19db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:1c:6d:99:69:c8:c2:8b:62:9b:79:88:a5:
0f:38:f4:7a:0a:c3:b2:10:db:d4:4c:67:6e:36:f9:
19:26:da:ab:d6:45:09:02:20:86:22:dd:47:00:0f:
c2:74:7f:21:c3:4b:50:26:be:4d:9e:5c:7e:a4:94:
4d:26:5e:33:3a:be:8b:30:13:54:fe:1c:f9:25:2a:
8b:0b:0e:52:16:02:72:90:03:31:08:85:39:a1:dd:
f5:db:ba:02:82:e6:f1:2c:79:2c:4b:e4:ad:21:4c:
a6:24:25:d3:5b:21:cb:3c:a7:29:fd:77:98:c3:ff:
05:f2:02:2b:f0:90:d2:fa:81:12:8c:3e:ba:7b:09:
0a:e1:c5:d3:65:cf:e7:cc:f8:03:5c:86:22:92:3c:
04:4a:8f:6f:5a:fb:a4:a3:2e:ff:19:c0:b0:0e:6f:
38:16:cb:65:e4:8e:20:ba:54:40:b4:28:82:0b:81:
5c:4e:c6:9c:b1:17:59:bd:85:6a:71:33:55:6e:5e:
24:fd:8e:6c:8c:0a:5c:8b:ca:44:24:f0:1a:13:76:
29:bf:86:5f:16:fb:f6:d0:18:9f:aa:a5:05:2e:e0:
5b:89:a3:52:ad:07:1c:dd:0d:b9:4e:8c:6d:5b:17:
f5:b7:b8:1f:dc:29:78:d9:35:35:31:96:57:e5:b6:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:26:FE:72:11:64:1C:03:68:F9:CE:79:0B:CB:54:70:B2:E1:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
66.222.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:98:50:9c:a7:75:3e:b6:54:35:c5:e1:8d:ec:98:8f:bd:78:
e4:30:f8:47:8f:b6:75:fe:6f:ad:97:ab:75:dd:93:2f:b6:1b:
f1:00:c9:79:92:a6:11:0b:bb:b3:dd:e2:98:97:c3:cc:11:88:
d5:a0:cc:71:c2:84:a1:b3:8c:4f:d5:4e:93:b2:a9:00:25:b3:
19:bb:76:37:84:17:37:40:9d:9f:bf:a2:02:e2:b9:55:80:06:
27:b0:e3:8f:a7:40:bc:01:c4:79:c2:ef:20:26:cb:7a:ae:37:
02:29:29:d1:d9:7b:e8:fd:9c:df:30:3c:be:0e:3a:8d:75:ff:
17:e3:fd:67:49:18:e1:a0:ce:73:6f:14:30:55:ff:9d:2c:48:
bc:8d:76:07:ff:18:ad:57:b5:cb:8e:21:0d:6c:30:82:84:7e:
0f:6c:1c:2e:62:a2:64:08:73:be:5d:28:e6:b0:33:f3:4c:1c:
cc:a9:a9:2b:64:2b:a5:85:e0:d3:38:3c:84:36:82:30:7e:4d:
ce:0b:9d:d9:34:39:7e:f1:a1:b6:bb:01:5a:7f:ff:5a:26:d8:
b0:c2:9f:0a:f7:0e:7b:4d:81:e1:20:3e:06:13:e8:5d:39:44:
f0:a9:ea:e6:59:23:4d:1d:53:15:35:9d:27:58:2e:51:f6:09:
b8:83:0d:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBLIdh2MiqdP74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk
Y2YzZDQxYjYtZWNiZS00OTkzLWI1ZTMtYzZmYzZmYmExOWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsUcbZlpyMKLYpt5iKUPOPR6CsOyENvUTGdu
NvkZJtqr1kUJAiCGIt1HAA/CdH8hw0tQJr5Nnlx+pJRNJl4zOr6LMBNU/hz5JSqL
Cw5SFgJykAMxCIU5od3127oCgubxLHksS+StIUymJCXTWyHLPKcp/XeYw/8F8gIr
8JDS+oESjD66ewkK4cXTZc/nzPgDXIYikjwESo9vWvukoy7/GcCwDm84Fstl5I4g
ulRAtCiCC4FcTsacsRdZvYVqcTNVbl4k/Y5sjApci8pEJPAaE3Ypv4ZfFvv20Bif
qqUFLuBbiaNSrQcc3Q25ToxtWxf1t7gf3Cl42TU1MZZX5bZbawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0RJv5yEWQcA2j5znkLy1RwsuGRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDVjZGY4NTItNGE4NC0z
ZGJkLThhNzQtOWU5Zjk4NmUyNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQt6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCYUJyndT62VDXF4Y3smI+9eOQw+EePtnX+b62Xq3Xdky+2G/EAyXmS
phELu7Pd4piXw8wRiNWgzHHChKGzjE/VTpOyqQAlsxm7djeEFzdAnZ+/ogLiuVWA
Biew44+nQLwBxHnC7yAmy3quNwIpKdHZe+j9nN8wPL4OOo11/xfj/WdJGOGgznNv
FDBV/50sSLyNdgf/GK1XtcuOIQ1sMIKEfg9sHC5iomQIc75dKOawM/NMHMypqStk
K6WF4NM4PIQ2gjB+Tc4Lndk0OX7xoba7AVp//1om2LDCnwr3DntNgeEgPgYT6F05
RPCp6uZZI00dUxU1nSdYLlH2CbiDDSg=
-----END CERTIFICATE-----
Generated at Tue Apr 28 08:43:56 2026 by rpki-client