
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d589690e-4111-3a48-b7f1-f26342ba7387.roa
File: d589690e-4111-3a48-b7f1-f26342ba7387.roa (raw, json)
Hash identifier: lXaiVCQs+4sVrcqM8wOQ+Lsl4a84yExziuNkFg7DV+Y=
Subject key identifier: FD:14:AD:57:C5:2D:5F:01:A4:61:7B:B3:BA:2B:1C:C4:06:B4:5D:57
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584F5669EB7683903E2EE22F6280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d589690e-4111-3a48-b7f1-f26342ba7387.roa
Signing time: Tue 29 Sep 2026 16:28:23 +0000
ROA not before: Tue 29 Sep 2026 16:28:23 +0000
ROA not after: Mon 28 Dec 2026 17:28:23 +0000
asID: 20473
IP address blocks: 66.78.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:56:69:eb:76:83:90:3e:2e:e2:2f:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Sep 29 16:28:23 2026 GMT
Not After : Dec 28 17:28:23 2026 GMT
Subject: CN=7c87d8b4-8dc3-428d-b758-ccfc56c2fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:7e:7a:d4:19:36:fe:c4:a2:07:5f:b5:27:
c9:f4:aa:67:1f:b6:b5:4c:23:a8:ad:27:22:e9:c2:
db:d7:1f:53:a1:6d:24:30:36:c4:97:00:fe:66:a2:
98:74:d0:05:19:57:68:7c:a4:a2:65:f1:d2:b0:4d:
6b:5d:b8:f0:93:ef:bc:08:11:5d:ac:d1:50:c0:91:
f7:56:1b:71:2f:0d:e4:33:d8:9a:9f:06:56:68:f6:
54:52:5a:db:bf:27:2e:07:2f:3b:5d:a7:8a:d7:4b:
a3:a0:9a:f3:d9:14:2a:21:c7:40:3a:a7:c2:b6:6e:
95:f3:eb:2f:07:51:b9:d3:48:73:67:b3:41:59:d4:
06:59:8a:93:c8:05:c9:aa:d9:54:65:31:e4:db:f2:
90:7f:f5:7f:69:2f:3e:01:32:56:f9:d4:f5:f1:cf:
2b:eb:9c:8e:2c:10:93:2e:23:f1:c8:43:d6:e1:04:
2b:d9:98:da:f3:a8:d0:4e:00:b0:cb:c0:09:fb:73:
11:91:c2:70:03:f0:b4:8e:56:75:25:cf:53:d2:08:
45:45:c3:85:5d:5e:be:0a:22:f5:51:93:62:29:3e:
9c:d2:2e:07:a9:c3:cb:f2:48:69:43:62:db:9e:12:
e1:d0:7e:69:3e:ee:2f:c6:0e:e0:fd:8e:51:6e:0a:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:14:AD:57:C5:2D:5F:01:A4:61:7B:B3:BA:2B:1C:C4:06:B4:5D:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d589690e-4111-3a48-b7f1-f26342ba7387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
66.78.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:48:91:34:80:8c:22:59:15:9c:08:9a:dc:00:89:ec:a2:bd:
48:8e:e9:1b:58:e1:84:bb:39:44:30:bc:cc:e6:d6:91:69:eb:
9d:0e:bb:e1:40:a6:7a:87:3b:c0:7c:4f:48:e8:ae:e5:cd:3a:
4a:95:cb:af:a9:3c:39:5f:1c:53:65:59:a1:4e:4d:2b:2d:49:
ea:03:ba:a0:22:1c:05:c7:6f:04:04:29:ca:90:7c:46:b2:25:
26:40:1f:df:b6:76:ef:b6:81:59:5e:21:93:21:1c:c0:0c:a1:
e7:8d:e3:42:f0:19:8e:ad:ee:63:5b:93:d7:bc:c4:2c:99:e2:
ae:e4:dc:59:f3:94:58:10:64:2e:6c:c4:9e:07:a1:37:61:7e:
e7:ca:f8:67:b3:5c:23:48:1e:ad:08:fe:cf:f1:c6:3f:28:5a:
50:90:ed:2e:f5:26:11:8a:d6:92:ec:0d:f6:53:e0:0c:32:cc:
7c:36:4a:19:bb:33:2e:f1:39:71:54:61:4e:45:76:62:5c:11:
a3:73:11:32:95:b1:5c:a1:96:35:d7:82:11:c0:a0:92:83:90:
ea:30:25:4c:85:2e:87:a4:79:3a:67:e8:65:29:e5:e9:d6:6f:
85:c9:f0:c2:17:05:27:a9:f1:15:24:1a:77:25:d6:25:ae:05:
18:2a:4a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:20:50 2026 by rpki-client