
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
File: fbd0f42f-fbef-3f5d-b443-269369b555df.roa (raw, json)
Hash identifier: tTSujhTo6sA7tl9CwmupU/uuQQTfh+e3YKDKDIrOnqU=
Subject key identifier: 27:2E:B9:FE:7F:1C:47:71:9E:0A:DB:0E:D9:8D:35:D8:40:74:1E:32
Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial: 010D0C9F4328584D0D425AC11214D64D5707A0BC
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 397673
IP address blocks: 66.11.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:5a:c1:12:14:d6:4d:57:07:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=757d83c0-1848-4a91-988a-d4da57b66ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:df:21:14:e1:cd:13:62:48:82:6c:83:8e:
ca:a0:14:f4:c5:cd:46:cd:bc:e5:31:11:fe:81:e9:
b7:f5:a9:a4:92:4e:36:4a:5b:3f:37:bf:a1:87:39:
e5:8d:9d:a1:24:5f:9e:1e:c1:69:95:43:ce:e4:aa:
46:07:b8:40:b3:a6:a9:c2:a2:f3:67:9c:79:ab:58:
fa:fd:b3:90:b9:9f:0f:6d:21:f4:58:d3:70:09:50:
03:ec:bc:e3:7d:0d:cc:23:28:c5:3f:a0:18:f3:e1:
40:46:51:7b:e2:40:5b:48:8a:1f:eb:92:98:d8:6f:
2f:c9:b9:db:ff:18:9a:38:c8:33:30:19:94:be:e9:
39:b6:09:a2:49:ee:87:a1:9c:d5:93:a1:73:77:93:
d4:16:f1:52:ea:0e:29:37:47:e4:07:bb:b3:58:40:
5d:13:55:9f:95:43:30:2d:92:ea:a2:61:89:2f:1a:
df:e6:6c:27:bc:79:1b:da:76:0a:c3:a4:ac:8b:16:
9d:d0:e6:ef:ec:5f:2a:4e:bd:6b:52:f2:47:b4:2d:
e4:8f:8e:f3:38:4e:a3:4e:ca:7f:bc:44:cd:a8:e1:
cc:8e:11:67:43:71:d9:86:0b:82:c3:20:cd:6b:df:
9f:90:4a:88:3a:0b:37:cb:c5:7f:b2:37:6a:f9:33:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:B9:FE:7F:1C:47:71:9E:0A:DB:0E:D9:8D:35:D8:40:74:1E:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
X509v3 Authority Key Identifier:
keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
sbgp-ipAddrBlock: critical
IPv4:
66.11.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:51:99:b0:b4:48:53:37:99:32:aa:9c:da:e9:56:84:eb:7c:
96:a9:85:7f:bf:11:c5:e0:9e:a8:9e:36:28:70:eb:64:ba:46:
d9:21:b1:3e:d4:35:81:81:fa:5b:4f:91:fe:32:ed:e3:bf:03:
43:8b:66:35:9d:e8:fb:cb:41:71:89:00:d0:5a:8c:a3:0b:1b:
12:08:91:90:26:52:5a:1f:c6:4f:92:ea:f7:c2:85:8f:60:5b:
e6:e6:fe:45:73:77:36:36:81:4b:c8:2c:df:7e:71:3b:2c:11:
8c:62:b9:15:d2:cc:0a:20:7f:1b:8b:c7:54:70:c0:27:b3:0c:
a9:1e:9e:96:83:30:68:b3:69:48:75:b3:93:15:01:ee:ee:9f:
e7:90:37:14:56:a9:0f:f3:6e:dc:05:12:b9:e2:5c:c4:7a:37:
92:26:28:87:dd:b2:4a:89:0c:e0:95:c1:9f:ff:0d:47:7d:40:
c1:e2:b5:68:2f:66:94:94:c7:f5:0d:ea:32:f9:d6:1e:1b:c5:
b9:63:d2:f3:c0:95:33:4e:1e:f0:a7:fe:57:d1:0c:29:79:b5:
e1:5b:dd:0e:02:ff:c3:f3:7f:5d:b5:36:17:f0:0e:09:97:ec:
2d:25:93:49:44:f2:35:fe:00:c1:4d:0b:8e:1c:41:63:10:85:
bd:4a:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:16:42 2026 by rpki-client