
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6698efa3-aa50-3916-a56e-51d386fa8e19.roa
File: 6698efa3-aa50-3916-a56e-51d386fa8e19.roa (raw, json)
Hash identifier: DRKnw9N37wxKzVLdXNdWrdvy4UkRy/U/Dw9OSsRmTBY=
Subject key identifier: 04:02:DA:81:11:D9:EE:78:D5:BC:0F:E4:51:15:B6:C2:C6:FD:72:FC
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F4328584CAE5713CACCECE4EE2D7B5C00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6698efa3-aa50-3916-a56e-51d386fa8e19.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 16509
IP address blocks: 66.159.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:13:ca:cc:ec:e4:ee:2d:7b:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=3fc3b4ba-3550-4530-9ac5-f89a9ca4e661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:7a:1e:d0:ca:29:df:71:4c:5b:87:63:9c:
bb:f8:b4:26:dc:0b:0e:ae:fa:36:c7:67:0b:8e:2b:
f1:e7:55:2d:62:59:01:e9:d1:9f:50:4d:b1:f7:2f:
83:5b:5f:28:49:7a:13:89:41:1a:5c:74:ee:ab:70:
f0:73:e7:67:c9:9b:06:67:37:86:a8:0e:5d:9c:ef:
29:51:4d:cd:c9:ac:66:72:46:f2:fc:49:8e:77:2a:
97:7f:de:9d:0f:b6:79:21:3a:9d:c8:ab:cd:76:88:
3c:73:86:72:1a:eb:bd:90:6d:d9:36:c2:ba:76:65:
bb:d5:cf:86:85:f0:0c:a9:a6:83:06:86:92:d7:8e:
e0:d6:14:fb:a8:1d:ac:e0:a1:82:fc:41:11:ba:91:
48:31:9b:54:e8:67:0b:2a:5f:f4:7c:5f:13:6f:7a:
b7:da:fd:3e:33:f6:75:dc:48:b8:4c:12:59:25:b5:
27:fa:bf:97:13:62:e7:7c:8d:e4:f2:a0:42:b1:f3:
51:ee:b0:6a:66:d9:9d:63:ff:a2:36:06:e4:c1:2f:
af:8e:f9:2c:b4:4b:5b:11:0d:30:e9:58:cb:99:9a:
c5:ee:af:d2:6f:18:c5:3e:67:aa:f6:e7:3b:56:7a:
a6:04:5d:d5:c4:2a:dd:f8:a7:fa:cb:9a:7e:6a:8c:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:DA:81:11:D9:EE:78:D5:BC:0F:E4:51:15:B6:C2:C6:FD:72:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6698efa3-aa50-3916-a56e-51d386fa8e19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.159.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:4e:c7:3a:6a:fd:b4:85:e5:06:67:ba:f9:3b:60:c8:70:77:
09:76:f1:cf:f0:bd:26:41:9d:5d:36:fa:a2:23:4e:ea:a9:6c:
a8:16:7e:b8:8c:02:c3:59:1b:29:07:00:dd:56:fb:ad:f4:2e:
27:54:26:38:6e:af:4d:29:42:67:52:18:d8:47:4e:09:44:49:
9c:8d:c9:1f:4b:e1:da:5f:cb:70:b9:95:70:e4:5e:af:87:a4:
c0:bb:40:33:72:76:04:0d:03:d8:e3:16:80:68:58:14:1e:f5:
d6:5c:1d:11:c6:1e:16:1f:78:f0:65:1c:ce:f1:b8:69:25:fb:
c0:ed:93:df:9f:39:48:8d:5b:48:13:d3:96:d6:5f:25:49:94:
47:77:cc:8b:58:31:a6:f9:c7:4b:60:07:24:ae:2c:e7:e8:8d:
97:a6:5a:ae:f8:96:42:ad:67:f8:be:5d:47:00:ca:d7:6a:18:
19:70:df:55:a5:2e:53:c8:24:89:f8:8f:73:e9:0b:28:15:2a:
56:44:a3:16:b3:0d:6c:d8:f6:bb:67:d5:eb:dc:7f:69:fe:ea:
45:4e:10:6e:67:e4:dd:d7:e3:ee:c0:e8:66:b2:c6:fc:55:20:
ff:63:ef:42:e4:18:4b:ee:12:30:45:bd:9f:92:62:f9:be:e5:
2f:6d:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:47 2026 by rpki-client