
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3addc972-6b50-38da-8b30-0fe6afa5b8c1.roa
File: 3addc972-6b50-38da-8b30-0fe6afa5b8c1.roa (raw, json)
Hash identifier: y5R5LeBqIM15aq+BoRkZOZzwk73kQJHPwlpR9pVqS7U=
Subject key identifier: E7:F5:91:0C:62:94:4A:F4:84:AF:39:B1:2A:2F:DE:73:3B:99:AC:24
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E4181455039F1E765BA20B9C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3addc972-6b50-38da-8b30-0fe6afa5b8c1.roa
Signing time: Mon 22 Jun 2026 11:56:31 +0000
ROA not before: Mon 22 Jun 2026 11:56:31 +0000
ROA not after: Sun 20 Sep 2026 11:56:31 +0000
asID: 64267
IP address blocks: 66.253.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:81:45:50:39:f1:e7:65:ba:20:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jun 22 11:56:31 2026 GMT
Not After : Sep 20 11:56:31 2026 GMT
Subject: CN=65caa6a5-5fc5-4d81-99e6-83ce2fb1593d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:df:a8:31:75:65:e5:83:df:42:27:49:98:
ed:81:5f:c7:62:ce:61:42:57:ef:50:58:70:73:fc:
86:3a:27:da:01:cf:d7:21:fc:53:2e:e7:44:ef:5a:
2b:04:09:55:c7:a5:80:12:7f:72:28:1f:0b:8c:ff:
0d:0a:2b:18:c5:ea:17:f4:df:81:8e:8c:64:46:47:
2e:ec:55:a0:c4:ea:72:5b:e4:9c:52:f5:8a:d0:91:
89:43:2c:12:36:c3:4f:28:ef:ed:ec:51:c5:3e:a1:
22:4f:e7:21:f8:bf:a5:0e:f6:16:53:c4:23:30:d5:
e9:bf:83:11:f9:7f:50:e5:1e:f1:e7:7c:91:c1:01:
84:dc:18:d1:fd:d3:8d:a8:f8:43:4b:ff:08:d3:79:
14:11:2a:68:ac:6d:f7:3b:fc:50:92:82:77:9b:0c:
1e:4f:ca:9d:3a:0a:84:3a:1e:fb:5d:68:61:07:3d:
43:fa:ff:04:19:f0:55:e8:30:47:74:72:9a:63:58:
2e:c9:b0:60:93:7d:45:f3:28:70:02:fc:73:fe:7e:
b0:e5:1e:f2:a5:d5:fc:a1:ef:6d:9c:05:27:5e:3a:
1f:73:01:f3:51:d8:f4:23:01:f4:7d:93:e5:91:e6:
83:81:b0:36:7b:0b:ff:2f:cb:9a:21:84:7f:c8:9f:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:91:0C:62:94:4A:F4:84:AF:39:B1:2A:2F:DE:73:3B:99:AC:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3addc972-6b50-38da-8b30-0fe6afa5b8c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b5:b8:a5:fa:d1:77:d5:b9:dc:9a:6d:24:06:f6:34:68:c1:
2b:50:58:07:c1:42:fd:23:b2:c7:36:1d:0d:3a:8f:47:cb:ac:
6a:d4:07:3f:df:45:cc:9e:c4:84:b5:04:54:bc:54:77:64:00:
46:54:b7:c6:fb:c6:e6:6f:f4:89:50:13:a5:d5:23:09:63:7d:
fb:9e:b4:85:56:11:f9:75:20:d3:b0:c3:8b:6e:87:26:a8:17:
bb:91:18:33:ac:b3:8b:e0:91:c2:17:0d:fd:c6:e7:40:d2:e3:
1e:bf:64:1b:f2:b7:97:13:5d:1f:97:d8:7b:8b:88:47:e6:d1:
14:a7:13:bb:38:e2:05:0f:08:a2:37:dc:86:b0:fe:86:cb:3d:
44:50:d5:e3:fb:2c:02:1d:40:62:e9:00:c9:dd:de:86:65:08:
41:5a:9d:81:e1:1d:63:e6:61:7b:e6:13:62:dc:08:39:e8:a7:
6d:25:36:85:3b:0e:75:47:a0:f8:74:85:fe:25:a5:32:e4:88:
67:e7:18:05:79:d2:a7:56:11:d2:11:19:33:62:31:1a:7f:14:
b7:37:90:ef:90:f5:26:ed:ba:b9:cf:54:e8:70:96:c7:b1:64:
08:b8:5f:73:34:41:f5:11:ab:ff:68:d9:43:2a:f9:a0:94:31:
31:19:33:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BgUVQOfHnZbogucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYyMjExNTYzMVoXDTI2MDkyMDExNTYzMVowLzEtMCsGA1UEAxMk
NjVjYWE2YTUtNWZjNS00ZDgxLTk5ZTYtODNjZTJmYjE1OTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUjfqDF1ZeWD30InSZjtgV/HYs5hQlfvUFhw
c/yGOifaAc/XIfxTLudE71orBAlVx6WAEn9yKB8LjP8NCisYxeoX9N+BjoxkRkcu
7FWgxOpyW+ScUvWK0JGJQywSNsNPKO/t7FHFPqEiT+ch+L+lDvYWU8QjMNXpv4MR
+X9Q5R7x53yRwQGE3BjR/dONqPhDS/8I03kUESporG33O/xQkoJ3mwweT8qdOgqE
Oh77XWhhBz1D+v8EGfBV6DBHdHKaY1guybBgk31F8yhwAvxz/n6w5R7ypdX8oe9t
nAUnXjofcwHzUdj0IwH0fZPlkeaDgbA2ewv/L8uaIYR/yJ/sZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOf1kQxilEr0hK85sSov3nM7mawkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2FkZGM5NzItNmI1MC0z
OGRhLThiMzAtMGZlNmFmYTViOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC1uKX60XfVudyabSQG9jRowStQWAfBQv0jssc2HQ06j0fLrGrUBz/f
RcyexIS1BFS8VHdkAEZUt8b7xuZv9IlQE6XVIwljffuetIVWEfl1INOww4tuhyao
F7uRGDOss4vgkcIXDf3G50DS4x6/ZBvyt5cTXR+X2HuLiEfm0RSnE7s44gUPCKI3
3Iaw/obLPURQ1eP7LAIdQGLpAMnd3oZlCEFanYHhHWPmYXvmE2LcCDnop20lNoU7
DnVHoPh0hf4lpTLkiGfnGAV50qdWEdIRGTNiMRp/FLc3kO+Q9SbturnPVOhwlsex
ZAi4X3M0QfURq/9o2UMq+aCUMTEZM8E=
-----END CERTIFICATE-----
Generated at Fri Jul 10 13:48:21 2026 by rpki-client