
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93/d7695f96-fcd9-30a1-800a-5ed4e676c237.roa
File: d7695f96-fcd9-30a1-800a-5ed4e676c237.roa (raw, json)
Hash identifier: QhC7yVuFWWjkkthgE7AYoT7YnZ1FWcFqJK12RtxPGaI=
Subject key identifier: F4:11:40:50:8F:53:59:30:16:93:43:A9:77:D3:85:E1:0A:E1:E3:62
Certificate issuer: /CN=aba641e4-e8aa-4426-92da-13e455485d93
Certificate serial: 010D0C9F4328584D7E3535EF596A442E1F456C00
Authority key identifier: EC:CB:26:DC:46:F2:34:14:53:FF:47:29:0F:C6:B3:66:7E:B6:66:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93/d7695f96-fcd9-30a1-800a-5ed4e676c237.roa
Signing time: Mon 13 Apr 2026 13:00:30 +0000
ROA not before: Mon 13 Apr 2026 13:00:30 +0000
ROA not after: Sun 12 Jul 2026 13:00:30 +0000
asID: 17294
IP address blocks: 66.71.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93/aba641e4-e8aa-4426-92da-13e455485d93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93/aba641e4-e8aa-4426-92da-13e455485d93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7e:35:35:ef:59:6a:44:2e:1f:45:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba641e4-e8aa-4426-92da-13e455485d93
Validity
Not Before: Apr 13 13:00:30 2026 GMT
Not After : Jul 12 13:00:30 2026 GMT
Subject: CN=047dec79-b5ef-49f9-aa72-0cd41965d7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:a8:fb:ef:ac:b2:f2:05:3f:3e:78:2d:de:
51:00:55:d4:67:25:f4:e4:46:f8:6d:e3:e8:ac:b5:
f7:cb:15:f6:3b:e8:42:14:f2:52:1b:c3:7c:f0:f1:
53:b0:7e:fd:41:14:31:8e:cb:27:80:95:4e:e3:47:
d6:62:c2:57:d5:d9:bd:10:a6:ce:26:50:7b:c9:b8:
62:91:5d:23:c7:ff:b8:60:5a:94:23:6a:87:dc:00:
42:14:56:df:c4:2e:72:c6:ce:78:ee:65:54:e4:2d:
9d:4f:29:ec:57:82:98:2f:dc:64:d7:e7:34:50:af:
0a:f4:f5:68:16:2d:32:c4:3a:67:46:be:15:fe:4d:
92:49:27:24:39:ce:a5:03:08:c8:db:57:0b:41:69:
09:f8:e9:96:01:8f:0f:c7:e3:f8:dd:19:0c:11:17:
4c:b5:f5:77:4e:ff:6c:93:4c:6f:86:db:ff:96:38:
d1:ab:23:e9:74:b3:4e:a8:50:a0:7e:5e:d1:da:ef:
6b:74:1d:53:cb:92:88:cb:5c:5b:dc:f8:4e:97:1c:
0f:4a:d3:8f:e7:99:20:ea:2a:75:b0:4a:0b:c8:04:
47:00:88:f6:4b:45:57:90:7a:52:17:ce:d1:30:95:
bd:93:ee:7d:14:ba:17:fc:db:75:06:aa:83:ef:1e:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:40:50:8F:53:59:30:16:93:43:A9:77:D3:85:E1:0A:E1:E3:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93/d7695f96-fcd9-30a1-800a-5ed4e676c237.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93/aba641e4-e8aa-4426-92da-13e455485d93.crl
X509v3 Authority Key Identifier:
keyid:EC:CB:26:DC:46:F2:34:14:53:FF:47:29:0F:C6:B3:66:7E:B6:66:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba641e4-e8aa-4426-92da-13e455485d93.cer
sbgp-ipAddrBlock: critical
IPv4:
66.71.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:18:af:f2:45:40:28:b7:13:43:d2:0e:2f:73:e6:27:eb:6a:
89:98:58:fa:71:56:ce:5f:85:e2:18:46:a4:be:9c:15:96:55:
8d:22:bb:dc:c4:8b:38:fb:24:fa:46:af:04:c5:90:8c:65:6e:
ab:5e:76:4a:5e:01:e2:99:4d:61:11:18:85:26:2c:42:26:8e:
dd:a4:8f:bd:dc:f0:5a:0f:92:e0:cd:46:83:02:d1:a4:a3:57:
63:c1:58:69:96:88:c4:26:f5:5e:fe:e5:dc:5e:28:fa:33:7d:
18:86:be:01:a3:37:f9:d3:2c:e6:a8:8a:ce:fb:8f:df:27:82:
58:e3:0a:5e:78:b1:f3:fd:86:ae:a6:f8:e2:07:5d:d8:eb:a8:
37:3d:20:69:cd:6a:30:8e:7e:2f:4c:ca:83:0d:4b:0a:38:e7:
16:ba:fc:0c:ed:d3:b4:58:71:8e:38:c1:70:28:c6:4a:cd:3d:
9c:0c:47:5a:a9:68:c5:68:8f:e2:f5:ef:5b:b8:2f:73:99:42:
aa:ed:fd:55:05:b8:e3:b4:a8:cc:a1:65:a0:87:31:43:d8:eb:
09:14:e9:28:bb:1c:e9:57:77:a1:2b:37:f1:98:17:0b:92:2e:
94:15:83:c1:75:cd:3c:4d:c8:c6:c0:b2:f2:f1:07:d3:21:16:
ff:3d:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:08 2026 by rpki-client