
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/977e8b1d-ec16-3747-9616-314aac87cdab.roa
File: 977e8b1d-ec16-3747-9616-314aac87cdab.roa (raw, json)
Hash identifier: /qKJcBFN/er8ZsrScgj8aV8i8lJADUpM8bVx4PqLOwA=
Subject key identifier: 04:FF:3B:AF:48:67:DE:70:BD:E8:B6:98:57:D0:52:9D:81:3D:E2:EC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584F35E7C3D6351B5B029980B754
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/977e8b1d-ec16-3747-9616-314aac87cdab.roa
Signing time: Fri 18 Sep 2026 01:00:12 +0000
ROA not before: Fri 18 Sep 2026 01:00:12 +0000
ROA not after: Thu 17 Dec 2026 02:00:12 +0000
asID: 21859
IP address blocks: 108.165.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:35:e7:c3:d6:35:1b:5b:02:99:80:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 18 01:00:12 2026 GMT
Not After : Dec 17 02:00:12 2026 GMT
Subject: CN=447835eb-aa62-4157-b502-113de5382b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:16:ad:2b:b7:e5:01:04:94:5a:62:93:82:
11:4e:05:f0:55:eb:45:e7:4f:dc:f1:f1:d1:8e:c3:
bf:21:c2:5a:62:4a:c4:dc:2e:44:8d:80:2a:72:df:
f0:81:a7:ff:7e:c2:3f:f7:46:d8:69:cb:d1:af:5c:
91:2b:4e:62:c9:eb:31:b5:4d:3a:c9:09:86:f5:d5:
fc:bd:f1:99:be:42:32:e2:d9:da:4e:33:1c:2c:f2:
ac:84:7e:e8:ba:8a:ae:05:09:ef:d3:b4:b5:68:31:
78:2c:b7:45:d6:cc:1c:f6:8b:f3:d4:f7:a9:ba:ba:
95:bb:9d:fd:17:99:a8:b1:e8:48:ac:32:b2:7d:d5:
3c:92:47:a1:e3:cf:98:18:0a:4b:00:3e:c7:ae:c7:
b7:05:61:ea:52:d5:04:ab:58:5e:83:f7:8c:16:ae:
4b:d1:95:01:a8:f9:e6:31:ef:66:ca:66:b8:3d:d3:
29:0f:25:c4:67:5b:61:ce:e4:31:7a:b5:0b:bd:15:
3c:9b:3d:a8:c0:68:ad:3b:64:f0:db:b2:84:83:7f:
39:6e:c5:f3:fb:24:28:23:7b:49:52:51:12:2f:98:
78:78:62:d4:15:3e:75:33:3b:4f:d4:8e:5b:cb:48:
90:af:9c:a7:7c:d2:15:f1:ca:9d:40:3b:19:51:d4:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FF:3B:AF:48:67:DE:70:BD:E8:B6:98:57:D0:52:9D:81:3D:E2:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/977e8b1d-ec16-3747-9616-314aac87cdab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:01:9b:ea:9e:62:bc:17:f9:98:b3:71:72:58:7b:b5:84:76:
55:d2:b6:af:ae:7c:98:65:76:a2:5b:ce:8e:18:de:af:06:19:
4c:e5:9e:ba:08:d7:05:20:e5:bf:f6:db:a9:ea:44:f1:77:ea:
9e:01:7c:5e:98:92:25:ca:e4:11:d5:32:fb:eb:cd:63:80:07:
14:f2:42:9f:44:f8:48:07:d5:ae:c3:35:2e:de:c4:86:ea:c2:
be:7a:31:d3:a4:7e:61:32:64:e9:89:84:71:30:ce:a1:34:63:
af:cd:1d:b6:5d:84:d5:27:ad:38:b0:9f:67:64:d5:8f:e0:fa:
12:29:36:e7:f8:22:2d:55:c7:3b:49:63:70:6d:5d:cd:5c:96:
ad:4f:54:ce:2b:28:1d:a4:b1:8d:cd:2a:22:1e:65:3b:d8:0e:
bd:c6:e4:60:b9:12:86:77:25:f3:17:c9:83:0e:5c:34:37:77:
19:d1:77:e6:56:5b:b2:d2:57:1c:ba:62:3e:12:ac:74:41:82:
cd:73:4c:51:ce:9f:67:27:9d:52:54:86:2e:06:51:0e:f5:d3:
76:ec:a7:d2:04:24:2e:43:d4:2d:68:5e:2c:a4:f2:bf:1e:e0:
85:03:ea:26:cd:76:d3:e3:21:38:be:15:3f:d1:84:fb:f0:e4:
57:3f:14:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158PWNRtbApmAt1QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk
NDQ3ODM1ZWItYWE2Mi00MTU3LWI1MDItMTEzZGU1MzgyYjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKEWrSu35QEElFpik4IRTgXwVetF50/c8fHR
jsO/IcJaYkrE3C5EjYAqct/wgaf/fsI/90bYacvRr1yRK05iyesxtU06yQmG9dX8
vfGZvkIy4tnaTjMcLPKshH7ouoquBQnv07S1aDF4LLdF1swc9ovz1PepurqVu539
F5mosehIrDKyfdU8kkeh48+YGApLAD7Hrse3BWHqUtUEq1heg/eMFq5L0ZUBqPnm
Me9myma4PdMpDyXEZ1thzuQxerULvRU8mz2owGitO2Tw27KEg385bsXz+yQoI3tJ
UlESL5h4eGLUFT51MztP1I5by0iQr5ynfNIV8cqdQDsZUdQ1OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAT/O69IZ95wvei2mFfQUp2BPeLsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTc3ZThiMWQtZWMxNi0z
NzQ3LTk2MTYtMzE0YWFjODdjZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQBm+qeYrwX+ZizcXJYe7WEdlXStq+ufJhldqJbzo4Y3q8GGUzlnroI
1wUg5b/226nqRPF36p4BfF6YkiXK5BHVMvvrzWOABxTyQp9E+EgH1a7DNS7exIbq
wr56MdOkfmEyZOmJhHEwzqE0Y6/NHbZdhNUnrTiwn2dk1Y/g+hIpNuf4Ii1VxztJ
Y3BtXc1clq1PVM4rKB2ksY3NKiIeZTvYDr3G5GC5EoZ3JfMXyYMOXDQ3dxnRd+ZW
W7LSVxy6Yj4SrHRBgs1zTFHOn2cnnVJUhi4GUQ7103bsp9IEJC5D1C1oXiyk8r8e
4IUD6ibNdtPjITi+FT/RhPvw5Fc/FJM=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:20:16 2026 by rpki-client