
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa
File: e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa (raw, json)
Hash identifier: aKOsjiw4itOGIKbaiN3OzeFvr8WPtgu2QRm8fj68h6U=
Subject key identifier: 9F:44:FA:13:5E:AD:1B:7D:21:07:F5:E3:23:F9:9F:77:56:03:68:05
Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Certificate serial: 010D0C9F4328584C7D7C68C147C50D8858EA8500
Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 16509
IP address blocks: 66.33.34.0/24 maxlen: 24
66.33.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:68:c1:47:c5:0d:88:58:ea:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=44576e68-3d81-4a83-b7f7-8b7c402ceb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f9:52:45:47:a0:04:73:ee:d5:33:0b:50:84:
72:ba:fb:2b:f5:79:e5:0a:cb:95:32:65:2c:2d:f3:
00:f4:29:99:69:52:a2:b1:74:af:d9:07:f5:e7:51:
a2:62:5f:71:15:3e:f4:a8:d3:81:4f:89:45:75:ef:
32:c7:e2:85:97:5e:6d:a7:86:d4:d8:eb:8a:cf:02:
a0:f3:62:e7:e0:d4:b5:bf:5d:3c:14:97:92:2e:23:
8b:a2:74:4a:d1:2a:3c:b1:34:ed:ec:b1:8f:50:c1:
c3:39:fa:72:77:99:36:ec:74:00:91:3e:30:41:54:
c4:c6:ce:09:f7:eb:2e:cd:94:3d:f9:e7:80:2a:93:
7b:28:bf:14:15:ca:b8:42:53:59:ae:35:ff:1b:3a:
4c:87:b3:4d:cc:4e:c7:fb:77:87:93:fb:65:7f:c4:
56:47:c8:41:ea:ee:42:e7:bf:10:81:84:8c:69:ce:
13:b6:bd:e5:6d:26:9e:8f:cd:0a:11:62:4c:d0:ab:
0d:06:36:5f:64:04:0d:af:6c:f0:5b:37:18:8a:bb:
b9:39:3a:72:2b:96:22:9b:ac:20:b2:99:0f:da:bc:
fa:30:1e:05:d8:39:33:b3:ca:f1:97:3f:aa:f0:3a:
e3:80:f6:2c:b2:8c:9e:f2:ae:68:70:51:cb:a6:af:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:FA:13:5E:AD:1B:7D:21:07:F5:E3:23:F9:9F:77:56:03:68:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl
X509v3 Authority Key Identifier:
keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:a4:f8:9a:88:81:fe:7e:ae:35:11:30:46:16:64:87:8b:32:
1c:b4:54:e5:6c:4d:b1:c6:76:52:00:7b:c7:1e:d7:bc:23:ec:
27:03:d6:6f:da:74:42:ab:33:c2:ab:24:19:c7:47:b3:b0:cb:
f4:34:15:c2:fa:31:7c:08:a3:be:02:a3:a7:f7:e9:61:5b:b0:
2f:25:f5:57:77:bc:8f:73:9b:db:68:fe:e5:8c:2a:bb:70:b5:
1f:45:e4:30:2e:bd:15:ed:97:df:57:0d:bc:07:61:ea:fc:33:
f0:43:76:e8:35:33:f9:d2:32:ea:ae:1d:f9:ce:b6:fd:11:31:
d3:25:8f:ce:e5:82:b1:5f:60:38:4c:ad:17:f6:73:ae:42:cb:
25:67:7b:a1:52:6e:af:62:14:08:98:77:0c:c8:ec:28:10:aa:
d7:21:eb:1e:44:3c:1f:bd:53:a0:6d:44:1b:9c:a5:43:ca:97:
b3:33:10:07:8a:22:63:4d:b9:83:bc:dd:73:ea:2e:9d:a8:54:
9e:02:a3:37:80:96:53:c2:77:a5:a7:5d:82:8f:63:65:b2:bf:
72:c9:b1:ff:08:af:59:ad:67:fe:76:3b:df:28:85:05:fc:10:
65:76:74:53:72:57:c9:6d:bb:ea:15:99:60:ce:90:5d:da:94:
11:f4:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:12 2026 by rpki-client