
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa
File: e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa (raw, json)
Hash identifier: 5D7Gj5dQnrrkQZdHImdf268Hd+xvzrEoZarwo6fgNHU=
Subject key identifier: 57:7A:3F:6F:DB:BB:7A:AF:F0:61:FB:B0:14:E2:25:67:41:04:DB:66
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584D5E1A6143588F93BFA3659ED0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 19905
IP address blocks: 64.18.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:61:43:58:8f:93:bf:a3:65:9e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=061f3992-5a78-4a2f-a8dd-6ac23a17e06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:8e:7a:f7:45:65:46:b2:52:2c:a7:87:b8:
19:84:b5:e1:06:fa:77:c2:1f:f0:22:50:68:a8:e3:
7d:8f:87:3a:a2:7a:1c:b1:96:4a:f4:b3:5e:76:35:
6b:bb:68:84:6b:cf:63:e2:eb:75:be:b2:cd:f6:0d:
1c:62:12:20:9a:2f:76:b0:e7:ce:5a:ca:1f:91:0c:
86:a9:71:80:e2:1b:c2:ad:5d:3d:2c:7a:3e:25:21:
7a:cd:a4:95:45:17:f9:2a:d2:76:fd:96:73:c0:85:
58:dc:52:63:17:fe:82:44:82:76:c4:6e:a0:fc:ca:
c4:f4:41:96:97:2f:b1:29:cc:c7:da:f0:7a:18:06:
ab:c7:22:e3:54:38:d3:71:63:3b:b0:b3:0e:be:e1:
6c:c3:1b:5a:ac:2a:fa:d6:b1:39:ad:0b:d1:0f:cb:
c1:ff:5f:a5:87:af:3e:1a:d9:6c:f8:a5:6b:f7:cc:
7f:9c:8b:29:72:e7:23:fa:f0:f3:51:e1:7c:58:54:
08:e8:20:11:3b:4f:58:cb:3f:a6:fd:07:91:ab:e4:
ba:75:f6:b4:bc:b3:17:c1:8e:69:f9:b6:c2:1d:30:
b5:99:2b:08:4c:e5:f2:66:ea:af:a1:f3:90:1c:0e:
8e:44:85:c0:b2:73:05:b3:a1:51:9a:fa:ea:48:9d:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:3F:6F:DB:BB:7A:AF:F0:61:FB:B0:14:E2:25:67:41:04:DB:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.18.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:77:40:c7:b8:77:7f:1c:ae:61:0c:32:73:cf:d8:e8:67:59:
fe:66:34:0c:19:5c:df:1d:d1:05:2e:f0:c7:3a:50:79:3b:29:
08:6e:90:11:b2:a1:ab:e4:a6:bb:13:74:47:cf:03:7a:99:84:
a9:68:c2:2c:8a:64:cd:19:80:4a:a5:23:42:d9:74:44:84:be:
fd:6d:7e:ee:69:bd:c9:74:8b:b7:53:ae:2b:15:86:6f:00:11:
20:09:85:d5:c8:98:0d:e2:4d:35:e0:56:f0:f3:5a:c7:ef:25:
47:47:65:0e:72:f8:57:99:34:26:e2:3d:f8:52:5b:06:b5:74:
c9:54:67:50:59:e6:00:8d:27:94:22:a5:ab:19:2d:09:cd:6b:
0d:98:64:e2:ae:02:69:fd:94:19:6b:24:9e:d7:6d:27:57:1a:
8d:65:a8:f7:2a:0c:8e:bc:2a:17:a5:42:14:22:1f:82:a7:45:
01:51:82:3f:04:0e:99:d1:40:4f:16:2b:25:cc:ee:3b:fe:b9:
c9:d7:4a:d8:c3:58:f9:93:bf:88:88:2d:69:dc:93:4c:ad:31:
24:6b:3b:b1:52:7f:e0:00:a2:13:91:88:e4:ce:fa:01:94:d4:
54:51:e0:2c:2f:fb:7b:2d:67:f3:3f:03:e2:5e:2a:6a:a0:fd:
8b:8a:30:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmFDWI+Tv6NlntAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MDYxZjM5OTItNWE3OC00YTJmLWE4ZGQtNmFjMjNhMTdlMDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWOevdFZUayUiynh7gZhLXhBvp3wh/wIlBo
qON9j4c6onocsZZK9LNedjVru2iEa89j4ut1vrLN9g0cYhIgmi92sOfOWsofkQyG
qXGA4hvCrV09LHo+JSF6zaSVRRf5KtJ2/ZZzwIVY3FJjF/6CRIJ2xG6g/MrE9EGW
ly+xKczH2vB6GAarxyLjVDjTcWM7sLMOvuFswxtarCr61rE5rQvRD8vB/1+lh68+
Gtls+KVr98x/nIspcucj+vDzUeF8WFQI6CARO09Yyz+m/QeRq+S6dfa0vLMXwY5p
+bbCHTC1mSsITOXyZuqvofOQHA6ORIXAsnMFs6FRmvrqSJ0qXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFd6P2/bu3qv8GH7sBTiJWdBBNtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZTc3NGFlMGMtY2U5Yi0z
NGNkLWIxNTEtOTZhNWFjZWFhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBJCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZ3QMe4d38crmEMMnPP2OhnWf5mNAwZXN8d0QUu8Mc6UHk7KQhukBGy
oavkprsTdEfPA3qZhKlowiyKZM0ZgEqlI0LZdESEvv1tfu5pvcl0i7dTrisVhm8A
ESAJhdXImA3iTTXgVvDzWsfvJUdHZQ5y+FeZNCbiPfhSWwa1dMlUZ1BZ5gCNJ5Qi
pasZLQnNaw2YZOKuAmn9lBlrJJ7XbSdXGo1lqPcqDI68KhelQhQiH4KnRQFRgj8E
DpnRQE8WKyXM7jv+ucnXStjDWPmTv4iILWnck0ytMSRrO7FSf+AAohORiOTO+gGU
1FRR4Cwv+3stZ/M/A+JeKmqg/YuKMHU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:28 2026 by rpki-client