
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
File: 4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa (raw, json)
Hash identifier: XQaj9Eb0NerObVPYUb+ULbJWjB3WnCITGN9kILiUh/o=
Subject key identifier: A9:DE:5F:33:5D:5F:EE:81:24:BF:97:EE:FE:9A:32:24:6D:78:CF:E2
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584EB9AC4FBE2AA532914D405F00
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
Signing time: Tue 04 Aug 2026 13:00:12 +0000
ROA not before: Tue 04 Aug 2026 13:00:12 +0000
ROA not after: Mon 02 Nov 2026 14:00:12 +0000
asID: 16740
IP address blocks: 66.39.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b9:ac:4f:be:2a:a5:32:91:4d:40:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Aug 4 13:00:12 2026 GMT
Not After : Nov 2 14:00:12 2026 GMT
Subject: CN=aa2c8a6f-e677-4fa5-ac34-afef2b8e5c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:fa:0f:17:a1:b7:4d:28:1d:1a:e1:b8:49:
fd:7c:6d:b8:32:6c:ee:e5:f8:f7:48:3b:01:35:4c:
de:e8:e8:e2:8a:6f:77:42:9d:ad:15:96:b7:fc:d5:
89:9f:be:ae:69:62:47:2d:07:51:11:ac:a4:f0:2c:
7a:f3:fe:c8:fe:2f:f1:da:83:bf:ef:77:9c:d0:5d:
a6:79:c1:fd:5e:a6:c3:ee:a9:4e:77:cf:4c:cc:1d:
b6:d9:81:68:85:ba:57:f6:fb:24:2c:53:3e:31:b3:
f2:8e:ad:aa:2e:94:14:6c:ca:e7:17:8d:55:79:bb:
40:f0:b7:81:78:d0:da:14:5c:3e:74:fc:4b:9c:3f:
71:7f:9d:20:b1:73:75:7f:d0:73:f5:8b:e8:47:fd:
75:e0:cf:d2:ee:37:1b:20:db:fd:78:0e:b9:ee:fb:
00:5b:cc:aa:7b:b2:ba:9f:3d:c6:c9:96:c7:92:da:
0b:a6:ab:fd:a1:92:3b:96:c0:70:00:17:d2:7c:83:
ed:7d:e7:96:30:3c:82:f1:15:f3:b1:75:ec:ee:49:
c7:2e:7f:63:b4:f0:7c:9e:df:18:89:55:96:56:16:
5a:05:97:f2:22:f0:a9:60:13:dd:27:3e:87:3e:a7:
0e:7e:ae:8c:02:fc:f7:7b:83:b8:e6:b4:a6:ce:96:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DE:5F:33:5D:5F:EE:81:24:BF:97:EE:FE:9A:32:24:6D:78:CF:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.39.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:97:da:75:3b:42:a9:e2:93:40:5d:89:f8:50:2b:35:81:db:
87:c4:3e:13:8a:d2:b3:dd:27:0b:16:96:ea:50:ad:83:c0:7b:
2d:92:5b:02:78:7e:93:07:ee:fe:75:e6:ab:82:cb:68:07:a1:
9b:a4:61:68:fb:84:b9:98:ff:4d:8a:dc:4c:ec:19:d3:48:41:
a1:ec:3d:12:48:f5:f4:3c:dc:f1:5d:d4:f5:c8:14:b5:82:2d:
95:57:e5:30:d8:57:5a:44:83:11:fd:b4:32:e8:8d:3a:05:7d:
9e:c4:cf:0c:8a:f5:45:34:45:1f:87:b3:8b:38:7b:35:f8:db:
6c:47:15:df:82:d3:db:c4:5e:88:1e:15:4c:48:93:3b:7c:2b:
4a:e6:43:b1:70:fd:ea:8a:ec:76:9c:f1:de:69:fc:cb:0b:ec:
33:d9:df:4d:6b:09:73:4a:da:3f:0a:8f:50:f3:5e:c2:21:b2:
23:cc:0a:01:9e:0b:ce:cd:47:0e:ea:b4:f1:f4:ed:b9:fe:f0:
15:74:e6:8e:29:7a:19:88:af:d8:a1:d4:c4:b6:b7:a6:89:ff:
a8:50:11:f5:31:62:cc:a0:f3:10:21:63:18:58:45:9c:4d:de:
18:cd:c7:ed:4b:ce:b1:46:7c:92:7f:a0:d0:e2:77:76:b4:19:
c3:01:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:41:39 2026 by rpki-client