
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa
File: fb4848c2-e114-39bd-8562-08478f1b002d.roa (raw, json)
Hash identifier: 4xBPw4wrfYPqiMMT5nIz9dBLsCCEdW+fPPl6ta6dUPM=
Subject key identifier: E4:D4:90:18:88:76:A6:B0:C1:3F:AD:78:20:D1:97:71:D2:6A:9B:63
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F6C584E6C73BAD14E13D143E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa
Signing time: Wed 07 Oct 2026 13:00:13 +0000
ROA not before: Wed 07 Oct 2026 13:00:13 +0000
ROA not after: Tue 05 Jan 2027 14:00:13 +0000
asID: 199527
IP address blocks: 66.17.144.0/21 maxlen: 24
66.17.160.0/21 maxlen: 24
66.17.192.0/21 maxlen: 24
66.17.200.0/21 maxlen: 24
66.17.224.0/20 maxlen: 24
66.17.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:58:4e:6c:73:ba:d1:4e:13:d1:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 7 13:00:13 2026 GMT
Not After : Jan 5 14:00:13 2027 GMT
Subject: CN=d04d2ae1-73ed-42de-8f17-07e948d53bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:3e:7d:21:f4:ce:a3:05:f7:ef:74:c5:f4:
c2:f1:cb:06:a1:5d:fc:02:01:6d:01:73:2c:21:dc:
f8:c8:dc:c7:95:14:fd:94:19:16:fd:38:9a:cf:af:
b3:5f:6e:62:5b:00:9f:7d:84:fa:5f:b1:7f:10:3b:
8b:0e:ba:04:b4:a1:e6:31:4c:70:08:8c:d9:85:1c:
51:6f:0e:3a:ca:15:44:3c:96:d6:1c:97:7f:7f:d6:
12:58:8e:1d:96:f4:c1:66:b4:2f:a0:43:b3:ef:45:
5f:34:8c:e3:2d:a9:9d:a8:a3:92:08:3c:e4:c0:40:
f1:4f:99:2a:49:aa:74:49:26:d3:cc:8d:8e:56:26:
f7:f8:e4:1b:b1:9a:dd:01:48:a4:88:ab:d8:9d:31:
74:f6:e6:95:d7:63:35:ae:86:d5:a1:b5:df:1e:9b:
8a:ff:1a:62:a1:4e:6e:62:f7:e1:dd:87:49:62:58:
02:a4:81:24:59:08:d8:2c:05:eb:63:4a:cb:92:ac:
ea:5e:1e:3c:23:bb:bd:dd:26:98:f3:09:bc:7d:49:
fe:43:2a:88:d5:84:79:4f:86:9c:64:f1:d6:ca:f9:
92:6f:6f:24:f9:6c:75:f7:39:d6:b5:68:63:ec:9e:
8f:74:b6:f5:7f:8c:ca:54:06:03:41:f9:18:af:8a:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D4:90:18:88:76:A6:B0:C1:3F:AD:78:20:D1:97:71:D2:6A:9B:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.17.144.0/21
66.17.160.0/21
66.17.192.0/20
66.17.224.0-66.17.247.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:e6:9b:31:f2:1a:ad:67:a9:1f:51:85:f7:f3:21:94:81:b4:
6d:81:da:20:77:da:e3:6b:21:68:31:7e:c3:72:00:47:17:0d:
5c:78:31:9a:6d:45:d8:08:42:b7:85:85:77:c7:46:a7:d8:45:
f2:f3:ad:ec:67:ac:74:a1:2d:fd:94:6a:56:28:9a:b3:8f:64:
7c:b2:b5:47:55:07:d5:60:85:33:81:b0:3f:9e:42:43:b4:0a:
aa:92:74:91:91:85:be:8e:da:17:e9:24:32:41:d3:fe:79:15:
f7:8c:8c:89:20:e5:dd:85:71:97:5c:cf:1a:3a:d6:89:2e:80:
e6:05:2d:33:a0:65:17:45:4c:06:98:0b:9b:e0:37:10:62:b4:
8c:11:4e:82:3b:f8:02:7f:e4:68:9f:5f:d0:32:e0:70:e9:ce:
7e:d3:ab:fd:e5:1f:82:48:01:3e:1b:37:7a:f7:60:06:26:96:
3e:ad:35:32:cb:06:c7:96:86:f3:9a:2b:de:a6:28:48:cd:a4:
97:98:71:33:44:87:81:e6:de:85:f7:f8:8e:c3:2d:a5:f2:07:
58:3f:f9:6a:21:bc:a5:09:8c:40:f9:aa:de:97:20:3c:d1:39:
ab:c3:4d:dd:4b:bf:12:13:1e:69:54:a5:11:22:d5:ea:a3:31:
72:5f:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:04:15 2026 by rpki-client