
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/09a34158-cbb7-3dd2-a369-3225f666e763.roa
File: 09a34158-cbb7-3dd2-a369-3225f666e763.roa (raw, json)
Hash identifier: TXGrJy42l6U3WSTtFSZ1GWED8dZelLVpdSSW2R6JdGA=
Subject key identifier: FE:D0:A3:93:89:31:CF:EF:5E:35:A6:09:A2:87:42:66:89:4F:F7:AE
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584D75E30F49CD1597919E5D4A00
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/09a34158-cbb7-3dd2-a369-3225f666e763.roa
Signing time: Fri 10 Apr 2026 13:28:39 +0000
ROA not before: Fri 10 Apr 2026 13:28:39 +0000
ROA not after: Thu 09 Jul 2026 13:28:39 +0000
asID: 1403
IP address blocks: 66.158.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 16 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:e3:0f:49:cd:15:97:91:9e:5d:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Apr 10 13:28:39 2026 GMT
Not After : Jul 9 13:28:39 2026 GMT
Subject: CN=cf77d7ad-cb3d-4e78-84f1-397368017a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:e5:94:94:d5:b6:b0:80:d8:fe:46:a4:22:
8d:55:c5:3e:a6:af:7f:54:d6:17:b7:bc:b4:e5:4f:
1b:26:6d:11:73:7e:d3:09:08:a7:2d:22:57:c6:15:
28:6f:ea:46:72:64:f0:85:74:ae:f8:11:75:b6:66:
f8:2a:7b:96:7e:99:22:61:d7:bf:c6:4b:7d:c8:d4:
cb:75:db:14:25:35:f6:ce:07:e6:8b:40:a3:27:92:
ae:02:be:82:a6:9e:f1:c6:f6:d6:91:fb:f0:1c:4d:
d7:87:2c:ef:ab:1e:d8:e4:91:aa:ad:cb:d2:55:0f:
d7:a6:e7:82:ed:c4:b4:1a:1a:48:f7:f7:22:3d:02:
18:e0:ab:ad:fa:f1:10:67:b6:ce:bc:99:ba:3f:bb:
99:49:01:a6:a2:f6:83:cb:42:aa:45:2d:39:6a:ae:
6f:63:22:bb:25:85:1c:70:47:de:cc:dd:5e:ce:87:
16:5d:14:30:28:54:88:ad:4f:38:a9:cb:99:82:ef:
74:7a:d8:70:31:dc:35:09:0d:26:da:c5:af:bc:57:
17:b2:c2:44:20:1d:78:dd:c2:0b:51:72:b3:df:5b:
de:64:ed:2d:bb:55:f6:29:83:7b:cc:67:fa:c8:cc:
4b:b1:43:78:d7:62:c2:23:09:ea:2a:e7:72:5c:0d:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:A3:93:89:31:CF:EF:5E:35:A6:09:A2:87:42:66:89:4F:F7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/09a34158-cbb7-3dd2-a369-3225f666e763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:70:e0:9c:56:0d:9f:d9:97:2f:44:d5:ee:b1:13:4e:10:ed:
2d:c7:12:dc:13:fd:5a:53:47:ac:6e:7e:93:1e:b9:f7:f8:87:
22:94:ee:d4:31:d3:84:b6:55:29:c4:d4:7f:9c:d4:8c:46:97:
82:7d:e2:b9:22:6e:66:1d:95:c9:20:78:1e:74:a6:33:1e:d7:
46:bd:28:19:e5:91:da:24:99:b0:42:64:66:aa:b8:17:62:5a:
8e:79:e7:83:21:cf:72:f1:aa:f7:2c:c8:12:56:8d:3b:ff:b0:
5c:37:d0:88:07:e8:16:86:2e:88:e1:a5:77:e6:cb:d5:d5:44:
8e:82:54:da:84:df:15:99:81:d0:e5:93:59:77:39:2c:14:77:
eb:56:47:20:97:9c:75:eb:5e:ed:d2:95:57:19:a3:fd:be:53:
fa:ee:cf:89:06:3a:cf:6a:b1:c1:ab:16:ff:d0:7e:7e:b1:7d:
a1:80:da:23:d4:30:51:38:99:ba:ef:7a:94:3c:2e:d1:14:90:
9b:ef:f3:5b:2f:61:86:5e:21:81:74:3c:72:ba:46:c8:f9:44:
14:b2:70:4b:33:c0:e4:22:72:cb:26:33:90:d6:bd:6d:bd:5d:
7f:d1:49:4b:88:cc:a7:19:7c:01:a9:5f:97:a9:ec:fa:14:84:
de:b0:69:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE114w9JzRWXkZ5dSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI2MDQxMDEzMjgzOVoXDTI2MDcwOTEzMjgzOVowLzEtMCsGA1UEAxMk
Y2Y3N2Q3YWQtY2IzZC00ZTc4LTg0ZjEtMzk3MzY4MDE3YTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSHllJTVtrCA2P5GpCKNVcU+pq9/VNYXt7y0
5U8bJm0Rc37TCQinLSJXxhUob+pGcmTwhXSu+BF1tmb4KnuWfpkiYde/xkt9yNTL
ddsUJTX2zgfmi0CjJ5KuAr6Cpp7xxvbWkfvwHE3Xhyzvqx7Y5JGqrcvSVQ/XpueC
7cS0GhpI9/ciPQIY4Kut+vEQZ7bOvJm6P7uZSQGmovaDy0KqRS05aq5vYyK7JYUc
cEfezN1ezocWXRQwKFSIrU84qcuZgu90ethwMdw1CQ0m2sWvvFcXssJEIB143cIL
UXKz31veZO0tu1X2KYN7zGf6yMxLsUN412LCIwnqKudyXA0uoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7Qo5OJMc/vXjWmCaKHQmaJT/euMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMDlhMzQxNTgtY2JiNy0z
ZGQyLWEzNjktMzIyNWY2NjZlNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp6TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNw4JxWDZ/Zly9E1e6xE04Q7S3HEtwT/VpTR6xufpMeuff4hyKU7tQx
04S2VSnE1H+c1IxGl4J94rkibmYdlckgeB50pjMe10a9KBnlkdokmbBCZGaquBdi
Wo5554Mhz3LxqvcsyBJWjTv/sFw30IgH6BaGLojhpXfmy9XVRI6CVNqE3xWZgdDl
k1l3OSwUd+tWRyCXnHXrXu3SlVcZo/2+U/ruz4kGOs9qscGrFv/Qfn6xfaGA2iPU
MFE4mbrvepQ8LtEUkJvv81svYYZeIYF0PHK6Rsj5RBSycEszwOQicssmM5DWvW29
XX/RSUuIzKcZfAGpX5ep7PoUhN6waas=
-----END CERTIFICATE-----
Generated at Wed Apr 15 10:23:42 2026 by rpki-client