
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
File: 4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa (raw, json)
Hash identifier: N7m16tkH4KKa/qPpAYZh1cyyGf/iyGEEJzHPct76dYc=
Subject key identifier: 5B:6F:B0:9C:42:C9:59:E5:3A:D2:58:88:70:55:B6:41:72:F7:86:AC
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584F5B9800D3F639DD84CC0CB380
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
Signing time: Thu 01 Oct 2026 13:00:12 +0000
ROA not before: Thu 01 Oct 2026 13:00:12 +0000
ROA not after: Wed 30 Dec 2026 14:00:12 +0000
asID: 16740
IP address blocks: 66.39.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:98:00:d3:f6:39:dd:84:cc:0c:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Oct 1 13:00:12 2026 GMT
Not After : Dec 30 14:00:12 2026 GMT
Subject: CN=05432aac-4619-418f-a93e-bf3614f39db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:a1:af:a4:aa:26:db:d5:fc:e2:e1:7a:ec:
49:12:b2:49:67:44:ca:2b:fc:d8:c3:44:73:f4:32:
c1:2a:29:85:2d:e0:49:bf:5a:b0:b9:34:9f:57:81:
25:71:9c:94:47:e9:ba:62:aa:e2:95:51:41:1b:3f:
46:62:c6:ff:6d:c6:55:56:3e:2f:a1:67:b5:7e:0c:
f9:ce:dd:84:a2:b3:d0:04:79:f3:ff:ba:e1:50:94:
69:54:79:a9:36:d4:81:d8:98:1e:e9:46:56:28:53:
f9:bd:05:fe:89:1e:d3:ed:d8:68:6f:1d:86:bd:81:
bd:64:25:1f:c0:56:91:2d:3c:90:e0:d2:2f:44:b0:
a5:ea:e9:9a:1d:df:fb:86:43:1e:bf:5c:1d:be:ed:
f1:28:7e:76:77:7c:18:a4:8a:ca:89:9a:ee:c9:3c:
41:1d:68:c4:42:43:13:89:2b:b9:e0:f8:10:f7:71:
b5:5a:63:f2:3c:8b:b9:89:ea:90:4c:47:57:69:98:
96:dc:ae:bc:2e:cd:c1:9f:7a:d1:c6:17:fa:b2:58:
8d:83:5e:51:be:0e:ac:da:35:e8:4a:c0:49:a3:ab:
a1:3d:6b:c9:1d:c2:0a:3f:c5:e9:8e:00:d9:33:8c:
a7:97:cd:7b:48:c2:11:b3:d6:46:20:e1:9d:fe:b4:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:B0:9C:42:C9:59:E5:3A:D2:58:88:70:55:B6:41:72:F7:86:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.39.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:35:10:95:d8:88:d1:cf:a6:59:8e:19:2b:7b:e7:6e:22:08:
21:c6:dd:1a:df:08:95:bc:46:2a:0c:bb:26:36:a0:6c:99:2d:
97:46:15:75:dc:ba:e6:e2:9c:d5:7d:79:ae:8a:b4:c0:bb:d8:
0a:f8:2c:06:01:02:15:07:64:6b:1d:31:ce:70:69:2c:c8:9b:
86:90:30:82:21:ca:62:1a:d1:23:b9:7b:8c:8e:21:2a:61:ef:
9e:90:1b:ce:0b:29:75:7a:74:f3:07:e8:e5:af:8f:27:77:d8:
fc:05:ea:6d:6e:5b:85:57:aa:62:6f:9b:c8:e2:86:a9:c0:4e:
de:67:4c:c2:a1:60:58:eb:78:2b:e9:a4:66:c8:da:6d:c3:1d:
d3:1d:4a:11:ae:28:b3:f1:44:67:1f:99:d4:f9:1c:f2:97:a2:
26:1c:2c:8e:49:ca:10:bc:a8:e2:27:1b:51:79:1b:45:49:d4:
a5:69:46:38:08:58:6f:1b:35:b4:09:a8:b6:f1:33:8b:1d:99:
b0:0e:ee:7b:25:77:2e:46:7e:d0:33:23:bc:b0:62:bb:94:ec:
84:94:75:5b:88:b3:37:27:19:5a:45:46:d9:65:61:eb:8f:d7:
e1:1a:d2:58:68:7d:0f:c2:ac:26:59:3f:48:0a:e0:43:52:f6:
2a:71:91:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:02:12 2026 by rpki-client