
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa
File: 6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa (raw, json)
Hash identifier: v3Bcw7Y7pp9OyTNXqj8DGD9NW2phSTYbQJWZPD95DWw=
Subject key identifier: 09:6E:C8:89:2F:F5:B1:93:0B:2D:5E:B7:CF:55:1D:1A:C9:B7:DD:40
Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Certificate serial: 010D0C9F4328584D5E1A6ED6C6D04FB6EDA12C00
Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 14618
IP address blocks: 66.33.34.0/24 maxlen: 24
66.33.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:6e:d6:c6:d0:4f:b6:ed:a1:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=bf2a04d5-79a2-4e9a-aed3-fe29e3ee4937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:20:f6:32:c8:e1:d7:ad:15:7c:97:4e:c8:
80:81:61:76:a8:6a:b7:7b:9b:dc:85:1e:7d:f8:c4:
08:cd:7d:b7:05:88:11:d9:68:b9:07:62:06:95:53:
37:48:36:4a:dc:60:34:a9:ea:35:01:5b:a5:60:a5:
68:03:37:da:c9:3d:c4:21:bb:c0:28:4d:8e:65:49:
93:c0:82:cd:db:6e:0a:40:6b:1e:b5:13:07:f9:4f:
d9:05:19:78:57:97:a2:c0:55:59:4c:5a:5b:e7:17:
44:2e:f0:74:1a:a9:e0:70:a2:a2:0d:98:46:b0:fa:
20:c1:dc:c6:3f:8e:39:ef:35:0f:ca:f0:74:4a:45:
5d:42:89:c5:66:87:df:e3:10:5c:3e:55:4d:1c:bd:
39:89:13:b1:5b:0c:ac:e3:c4:4f:57:b5:63:3c:00:
65:dc:42:46:c2:48:42:5c:c5:24:ef:a5:c9:c2:c7:
5a:c0:04:39:f4:42:6e:db:9b:ee:ff:27:97:a6:b6:
c3:30:4e:dd:64:6b:31:16:bb:16:cf:a5:ce:13:b3:
e0:72:e1:ee:49:e3:60:bc:d5:e4:4b:f8:21:68:79:
52:c8:70:38:eb:ad:17:29:dc:3e:6c:e2:31:1b:63:
76:d9:03:94:58:78:96:f6:8c:0b:46:3d:0d:55:0c:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:C8:89:2F:F5:B1:93:0B:2D:5E:B7:CF:55:1D:1A:C9:B7:DD:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl
X509v3 Authority Key Identifier:
keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ec:07:b7:99:d3:14:7a:80:04:23:80:21:27:c8:ab:5a:38:
da:e7:e7:cc:33:07:43:35:d5:72:00:d3:4b:89:2f:b0:22:fc:
c6:29:a9:3d:14:c1:20:57:76:e5:f7:33:d1:2e:96:8c:93:62:
f8:a2:84:ed:90:84:91:5a:03:58:25:d4:62:d5:23:02:bc:62:
7b:f9:91:e2:5b:b5:19:12:d6:f8:bf:6f:12:5c:2b:24:69:bd:
d8:f8:e6:55:b5:db:c0:45:24:b7:bc:82:00:ea:8b:ce:ac:ef:
a4:20:9b:6b:7d:21:4f:91:2f:d4:c6:55:62:2f:10:bb:cd:4f:
07:ea:6d:56:f0:a2:18:09:bb:49:00:bb:a1:ea:d9:21:31:a8:
1e:96:5b:86:37:2e:e7:ff:48:5d:dd:50:1f:7c:ea:92:58:7d:
85:46:70:87:28:c7:69:98:8d:84:4c:c7:e5:c9:49:97:8d:5e:
43:1f:2a:66:b9:79:e1:97:24:22:25:78:64:a0:a2:4f:e4:48:
33:94:4a:8c:a4:46:de:12:48:a3:93:69:49:ad:07:ad:d6:3a:
0c:6a:c2:1f:0a:88:d0:47:a8:57:cb:85:03:af:e9:04:ac:2b:
89:e7:b1:08:27:94:b7:e7:25:3b:7e:2a:63:ea:36:6b:a5:b1:
b3:71:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:24 2026 by rpki-client