
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
File: 0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json)
Hash identifier: 2duF7i4CWPmxA2UAwrxBQH3KDjzvoB7IwxseVEFIj7g=
Subject key identifier: 66:90:EA:2B:E0:CC:0A:53:75:41:AC:5D:64:FE:A3:38:CC:4D:FB:CD
Certificate issuer: /CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Certificate serial: 010D0C9F4328584EA787DB1E42864625F7B2F440
Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 25661
IP address blocks: 199.119.140.0/22 maxlen: 24
207.167.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:db:1e:42:86:46:25:f7:b2:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3c1c78ae-55cc-4bb7-8470-68dff871e81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0c:d1:d7:38:ae:7d:bd:9e:98:e3:02:32:7c:
ef:90:bf:d1:9e:01:a8:0b:61:27:30:5e:a7:9d:06:
9d:cd:aa:67:e3:9f:a1:90:61:89:a3:08:51:e0:39:
05:e8:59:32:0d:e0:ca:61:13:78:06:38:f0:71:97:
9f:1d:8d:5e:4c:68:f6:46:97:f7:1e:ed:c8:d9:85:
54:8a:ce:ba:7a:0b:21:95:da:4d:e1:d4:58:5a:83:
8b:50:33:f5:57:32:29:8e:6f:0d:22:33:89:ff:4b:
7f:dd:18:24:77:7f:ba:89:29:88:0e:0a:d1:0d:fc:
2f:7a:c8:7b:a0:94:4f:90:de:cd:40:b3:67:34:de:
3c:1a:f9:d4:37:ee:87:fc:36:69:f2:92:c0:56:0a:
c6:1a:30:9b:bd:15:75:ce:54:49:96:e2:a1:7c:47:
92:24:39:b3:9e:24:25:13:4b:c3:67:bb:3c:76:bd:
a5:29:94:b5:ff:21:ac:cf:23:bc:f2:7b:c5:f5:e9:
b7:07:b0:ac:1e:76:c0:84:3c:88:54:00:d9:cf:82:
9f:55:09:21:38:ab:5e:74:ac:1a:7b:63:22:34:99:
71:01:3e:a0:30:98:95:c9:22:1b:98:81:77:de:63:
19:76:71:a1:1b:cc:fe:cf:e8:9e:78:1c:4d:c6:77:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:EA:2B:E0:CC:0A:53:75:41:AC:5D:64:FE:A3:38:CC:4D:FB:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
X509v3 Authority Key Identifier:
keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.140.0/22
207.167.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:d2:00:28:75:61:a6:65:05:01:65:ad:b2:b4:2c:30:43:30:
9a:ef:8f:69:a5:f9:34:6e:eb:e4:e1:f7:46:2d:ff:5a:68:20:
ca:03:1f:09:ca:e8:fc:4e:9e:d0:4e:02:69:c7:a8:41:78:7b:
d6:4b:61:71:08:68:a5:0c:91:e8:13:0e:cc:fb:3f:ab:bd:91:
1c:a5:4c:94:b3:c8:13:f7:4e:29:e2:09:63:06:99:94:e7:9a:
7f:a4:ec:74:8f:2e:11:75:c5:8d:d7:54:e0:94:66:55:cf:11:
06:c3:af:8b:52:4e:03:33:d7:cb:7a:3b:3e:d5:b4:fd:ec:67:
17:43:a1:1a:09:83:7c:36:81:52:5d:05:cf:54:77:77:d8:5a:
0e:5e:35:07:8b:71:eb:f7:d3:1d:38:4b:97:17:92:2d:6e:75:
7f:62:71:5a:04:45:39:66:f3:89:c9:cd:b4:3d:9f:e4:e0:d9:
3f:64:be:b6:a1:5d:47:1e:9f:e4:f9:27:83:b9:17:b1:f5:01:
4d:1f:b5:a7:af:29:0a:14:c5:07:c6:36:a9:60:1f:e1:8a:3c:
aa:85:d4:da:e3:bf:a2:fe:e5:39:49:83:e7:eb:98:96:db:43:
60:4a:96:b9:7a:ef:4c:98:bf:4c:0b:9e:bc:71:ba:ce:e0:df:
60:73:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:21 2026 by rpki-client