
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2c19d1a3-0f0a-3f03-a0e3-e59c6c452076.roa
File: 2c19d1a3-0f0a-3f03-a0e3-e59c6c452076.roa (raw, json)
Hash identifier: +Bx7mXvLeasJSAXCrEEvQiyigET5kZ6u0H4mtf+7/Zc=
Subject key identifier: 98:FD:07:99:BD:41:7D:9D:5A:C3:20:DF:D3:21:76:EF:6A:6D:6C:17
Certificate issuer: /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
Certificate serial: 010D0C9F4328584F761F547A8A938F12CD0EA780
Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2c19d1a3-0f0a-3f03-a0e3-e59c6c452076.roa
Signing time: Sun 11 Oct 2026 01:03:58 +0000
ROA not before: Sun 11 Oct 2026 01:03:58 +0000
ROA not after: Sat 09 Jan 2027 02:03:58 +0000
asID: 834
IP address blocks: 66.117.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Oct 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:76:1f:54:7a:8a:93:8f:12:cd:0e:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
Validity
Not Before: Oct 11 01:03:58 2026 GMT
Not After : Jan 9 02:03:58 2027 GMT
Subject: CN=3220e9df-06bf-450e-a4fe-2e01f94020f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:30:2e:bf:48:ad:40:03:3d:9b:30:4e:60:
ab:91:4d:98:ec:ee:1c:34:27:44:81:e4:38:9b:22:
e0:59:d3:31:3b:35:2f:f9:28:f3:ae:d8:9f:12:47:
58:c9:8e:12:d0:67:26:7d:97:9a:90:c7:7e:e8:50:
8c:7c:34:5c:b0:20:8c:af:a0:be:7e:c5:0d:e4:44:
92:2a:28:5c:47:aa:dc:07:4e:f1:54:7e:dc:f4:f8:
f7:d7:6c:97:09:9a:a4:f2:08:7c:21:a9:d2:c6:42:
97:73:8e:82:f6:c3:cb:05:d9:dd:03:95:52:a6:de:
93:15:06:2b:b3:db:f3:59:a6:b3:e0:ab:79:1b:1f:
e7:f9:aa:93:90:04:91:8e:33:9b:08:2b:f6:55:7f:
7f:68:ba:8d:78:75:4f:0d:9b:78:a3:92:59:f4:b8:
9d:86:23:61:f6:38:2f:c6:c2:5b:ad:23:67:82:2c:
00:2a:b5:a3:54:8c:33:e6:87:44:58:b3:28:8e:8d:
08:8c:d6:3c:c9:70:b0:8e:c6:a2:a7:4f:0f:32:b8:
7f:c1:d4:4a:6d:00:cf:0a:17:1d:f6:0b:0f:0d:bf:
c7:c3:bc:65:a2:e9:81:60:fd:13:00:aa:6e:55:d2:
db:9f:4c:24:e3:84:ba:f9:22:fc:9e:a9:e8:97:d3:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:07:99:BD:41:7D:9D:5A:C3:20:DF:D3:21:76:EF:6A:6D:6C:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2c19d1a3-0f0a-3f03-a0e3-e59c6c452076.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl
X509v3 Authority Key Identifier:
keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
sbgp-ipAddrBlock: critical
IPv4:
66.117.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:39:ad:24:b9:40:70:2e:19:33:0f:bb:6b:7a:c8:47:c7:fd:
e0:b0:98:3c:58:2c:ac:f8:77:71:cf:1d:62:e3:c1:64:e7:1c:
41:af:ed:21:29:df:0c:f0:1b:3b:7a:5c:42:68:97:56:3b:83:
f6:ec:a2:b0:64:2d:fb:18:0c:47:53:34:2f:5c:c1:0d:7b:69:
0f:8d:ad:da:30:a4:91:3b:19:89:5f:78:2d:5c:4c:57:50:7d:
57:81:2e:50:5e:8e:45:ce:d0:aa:c4:92:a6:db:7a:70:ad:48:
c0:6a:b1:54:f9:80:5d:91:1b:8f:c2:9a:8c:bb:fc:b1:16:de:
81:5e:93:78:f2:77:92:f5:6a:13:f0:89:e6:dc:9c:d6:e0:e0:
30:c1:65:63:3d:30:33:13:3c:41:c1:d7:c3:60:86:6b:92:23:
e8:da:7d:bd:e4:81:74:3d:1c:84:11:5c:c2:a1:7c:0b:7f:cf:
00:16:00:a8:8e:8e:e6:af:82:03:72:91:d0:82:e4:a5:19:7c:
a8:c3:4d:bb:d8:7d:a9:25:88:2a:ab:bb:80:57:57:2f:a3:7a:
78:e7:dc:e9:84:67:ac:8e:95:15:12:97:b8:d7:a7:7a:22:51:
58:a6:2e:3d:16:1b:89:3a:bb:72:49:b4:56:57:1f:5c:07:59:
42:95:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:44:28 2026 by rpki-client