
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa
File: 30f3f2b7-133f-3093-8bac-371e64c54f97.roa (raw, json)
Hash identifier: E4IgK5OhSIkfNo6vmDUOX74Ua3LdtPiuIkPI2cZY9Z8=
Subject key identifier: 14:50:8B:AF:71:2B:AC:C9:00:32:51:90:65:5A:35:9C:5D:27:58:25
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584F5B9801301AB9229252690D00
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa
Signing time: Thu 01 Oct 2026 13:00:12 +0000
ROA not before: Thu 01 Oct 2026 13:00:12 +0000
ROA not after: Wed 30 Dec 2026 14:00:12 +0000
asID: 16740
IP address blocks: 66.39.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:98:01:30:1a:b9:22:92:52:69:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Oct 1 13:00:12 2026 GMT
Not After : Dec 30 14:00:12 2026 GMT
Subject: CN=006acfcc-9c05-4551-bdfb-96bc59e62825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:48:cc:5d:81:4e:43:ca:7b:98:50:5d:2e:
41:22:87:05:f2:f9:40:3d:b5:a5:bc:f4:f4:8d:5d:
0f:3a:df:11:f4:96:e1:b1:74:02:3b:99:c8:da:e5:
6d:28:dd:ee:a5:9d:19:50:32:63:c7:46:6d:06:9d:
10:68:db:bc:05:db:f1:90:c3:97:d3:f3:72:0c:93:
c3:aa:2d:32:1a:29:7d:53:32:d3:e0:02:0a:f2:71:
7e:cb:e8:c6:a4:b3:90:c2:40:44:b4:90:3b:55:47:
6a:38:0c:66:1b:1a:11:7a:7b:de:40:a7:5d:60:a0:
ec:d0:4a:cf:ec:dc:82:c5:e9:76:bf:b5:fb:c7:e1:
1d:65:21:30:c2:12:32:bb:73:44:f8:c4:ba:b0:ed:
9d:03:55:ee:7a:a0:39:02:f3:af:9c:81:a4:a1:fd:
51:e8:34:40:ed:46:b9:f2:fc:2c:75:57:7f:05:ee:
9b:a7:cc:f1:bc:7d:1d:ca:78:8e:34:dc:c5:c9:23:
43:b1:c9:01:63:ea:df:35:99:07:8b:9e:15:4a:ac:
06:90:e2:0b:dd:70:c0:b2:4a:86:30:18:e2:11:1e:
a8:f5:89:21:f2:ca:78:86:32:e2:83:f0:16:70:13:
6e:ae:5b:ff:76:6d:24:86:e6:75:1f:0a:36:39:bc:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:8B:AF:71:2B:AC:C9:00:32:51:90:65:5A:35:9C:5D:27:58:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.39.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:1e:ae:cb:0e:ee:17:fb:20:00:ff:13:29:0d:7f:68:6b:b9:
16:7f:24:ae:ca:a0:05:43:11:4d:3f:af:0d:15:15:d7:4b:43:
c3:d1:e4:e5:ad:a1:da:10:14:50:e4:e2:ce:15:2f:67:bd:fb:
4b:29:6c:40:20:77:c0:39:b8:88:ea:7a:f0:da:d2:e9:f4:18:
98:36:de:81:ea:c8:b4:37:58:58:e2:a1:7d:e4:0a:2b:35:cd:
b4:47:4c:9f:89:e8:40:e1:b7:f7:17:42:46:25:49:e9:2d:21:
e3:da:16:86:85:3e:f5:e2:47:64:1e:16:bb:0a:5e:b2:7c:03:
8c:91:9d:0b:0f:88:c1:70:1a:ab:15:c3:67:66:bc:2c:28:f7:
44:be:bd:e7:7b:a7:83:85:91:88:9b:0a:dd:57:4d:8b:2d:1b:
3c:f8:8d:19:f2:b2:98:7c:06:f6:45:f4:6d:ff:c2:8b:07:e2:
8b:6d:19:ee:4b:e7:a7:62:26:4a:c2:ac:3f:a6:4a:73:20:68:
14:2c:7a:d6:9d:91:20:0a:e9:c6:cc:c9:1b:66:8c:36:78:bb:
49:94:b5:18:0b:02:fd:a6:5d:15:ae:76:6d:10:30:0c:b6:80:
56:b9:f8:06:f6:ce:0b:aa:6b:18:7c:85:9a:2b:0a:d6:85:52:
1a:75:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:40:36 2026 by rpki-client